Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/TfjDpIDCN5enwORrl2HGaUCHPFs.roa
File: TfjDpIDCN5enwORrl2HGaUCHPFs.roa (raw, json)
Hash identifier: hrRaazs2Yccudp18liK/a7Puzsq6Ik4X0HKk9CH9Bbc=
Subject key identifier: 4D:F8:C3:A4:80:C2:37:97:A7:C0:E4:6B:97:61:C6:69:40:87:3C:5B
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0F70F22C2DF10EDE3F17AD96EF93D0F78
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/TfjDpIDCN5enwORrl2HGaUCHPFs.roa
Signing time: Thu 01 Oct 2026 10:42:39 +0000
ROA not before: Thu 01 Oct 2026 10:42:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402671
IP address blocks: 212.135.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 11:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:0f:22:c2:df:10:ed:e3:f1:7a:d9:6e:f9:3d:0f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 1 10:42:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4df8c3a480c23797a7c0e46b9761c66940873c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:53:b2:44:55:ad:b4:4a:14:6f:49:1c:16:4d:
58:4f:aa:58:6b:ce:00:9e:01:72:5a:22:a7:b8:66:
21:4e:cc:83:10:b5:29:32:70:62:b1:8c:a1:14:b0:
78:d2:74:2e:cf:26:7a:59:27:6a:d0:9d:18:e6:ef:
d6:db:17:fe:2d:37:44:30:25:a7:f8:f4:e0:6f:19:
91:59:1d:67:56:fe:d3:ea:8c:cd:39:9f:0f:63:b9:
52:3e:f6:0f:55:ae:f7:e5:43:a5:14:8b:a6:21:15:
49:64:5f:bd:93:3a:f8:a7:23:f5:65:cb:9f:ed:bb:
a5:ea:5d:d0:c3:98:d8:c8:ca:b3:7b:ac:2d:b4:e7:
c9:87:fd:58:cf:95:2e:6d:5d:c6:ab:b7:7f:a3:b1:
5d:d3:ea:e9:7c:65:1d:13:09:13:d4:20:44:0b:90:
9f:2d:e4:21:fb:17:4d:82:3b:5a:fc:1b:d0:e1:30:
d5:25:d6:fe:34:f6:0f:33:6b:36:f7:a5:ed:47:29:
ac:03:48:3d:a5:52:d7:ff:ab:00:30:8a:35:46:6e:
4b:30:e2:5a:75:8f:34:3a:44:d5:24:3a:fe:44:c4:
94:6d:84:b1:14:e5:a5:f0:f5:a8:38:03:eb:78:47:
55:c9:4c:63:b9:65:57:23:45:5a:57:af:5d:e6:1c:
dd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F8:C3:A4:80:C2:37:97:A7:C0:E4:6B:97:61:C6:69:40:87:3C:5B
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/TfjDpIDCN5enwORrl2HGaUCHPFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.135.194.0/24
Signature Algorithm: sha256WithRSAEncryption
46:d1:96:5b:17:7b:2c:19:17:3e:a8:dd:90:a2:97:a9:c7:a8:
09:73:fe:20:69:1d:1d:83:a3:07:1c:e3:47:78:b5:c3:30:74:
f4:2c:c7:1e:98:b8:c1:55:f7:a2:a5:c8:b6:b1:ea:6b:87:7e:
81:4a:2d:5b:28:9b:5d:2e:16:2d:b8:d8:1c:12:ef:8d:41:a4:
bd:de:e8:19:8d:3c:42:4c:d7:f2:e9:e7:35:60:82:4f:89:87:
d1:e0:b9:ec:8f:00:b0:01:0f:cd:76:81:0f:e2:45:8f:43:c6:
77:d6:db:3a:f5:fc:4d:40:ab:24:f2:64:6a:f9:f2:fe:e7:3d:
04:e5:9e:56:c2:6a:a0:76:f0:42:81:18:3d:12:f8:16:8f:41:
46:1f:d2:9d:b5:13:79:44:0e:41:25:2d:ad:b7:91:c6:2f:7a:
a8:57:b5:65:21:3f:a4:f5:b0:62:58:89:09:f8:1f:44:32:76:
d7:28:be:9d:79:4c:53:6b:d9:ba:c3:34:55:b5:88:16:9e:55:
17:c9:91:b7:f2:22:79:52:32:17:08:20:a7:94:5b:c3:ce:ab:
e7:95:a8:c2:87:98:94:91:aa:90:40:b4:cf:6f:3c:52:f7:54:
bb:ed:94:91:1f:3d:36:93:19:71:73:57:c8:6e:72:2d:74:bb:
30:cc:f6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:20:08 2026 by rpki-client