Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/tKOJMA_Ej6G_X7mORPW8_8mTAAU.roa
File: tKOJMA_Ej6G_X7mORPW8_8mTAAU.roa (raw, json)
Hash identifier: MkRKRrZeLxOIfkMxXa3JxJ8juek672QrpVGCDQT42S0=
Subject key identifier: B4:A3:89:30:0F:C4:8F:A1:BF:5F:B9:8E:44:F5:BC:FF:C9:93:00:05
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 01A12FEA2EA2A4E34FDFDB6DB1A480D8FB4D
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/tKOJMA_Ej6G_X7mORPW8_8mTAAU.roa
Signing time: Mon 12 Oct 2026 11:40:38 +0000
ROA not before: Mon 12 Oct 2026 11:40:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 213.182.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:ea:2e:a2:a4:e3:4f:df:db:6d:b1:a4:80:d8:fb:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Oct 12 11:40:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4a389300fc48fa1bf5fb98e44f5bcffc9930005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:90:5a:d4:6d:7b:f9:a4:68:1e:e6:48:5a:38:
27:aa:03:ff:b9:f2:19:54:3a:e3:e3:23:b0:1b:ac:
30:7e:17:09:e0:67:57:ce:67:38:4b:e2:95:ef:ba:
60:1f:7f:be:94:1e:e2:d1:ed:74:a3:93:f7:08:44:
e5:3e:56:07:84:72:e2:d9:29:02:00:b2:90:56:6e:
ec:67:ae:7e:dd:fe:1e:1a:2c:e4:44:6c:95:ef:98:
7f:59:1e:56:a4:4f:2f:0e:f1:4c:59:e9:eb:4c:fb:
99:92:3d:3f:31:b1:40:b3:73:ef:92:06:56:74:85:
f7:ed:1c:21:cf:e8:7f:ef:27:6c:89:a5:b7:ee:75:
28:e8:4c:bb:94:c3:c6:ad:b6:24:8e:92:f7:4f:f0:
bd:1a:eb:ac:31:eb:da:62:94:a6:36:2c:45:2b:c3:
cd:cb:a6:26:94:02:b7:19:fe:44:8e:97:a9:38:25:
19:3e:28:79:38:83:e7:b7:bf:6c:9b:f2:fd:15:e7:
82:b1:98:bb:63:cc:9e:9c:24:3b:7c:2c:6c:4f:15:
12:e5:95:ab:0e:56:fc:f0:ba:c9:9c:51:85:f4:c4:
82:0a:f5:63:f1:a5:70:a7:93:10:a1:a3:d2:11:6b:
6d:92:62:49:c0:9b:a3:ff:98:ff:42:3f:83:5a:4a:
6c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A3:89:30:0F:C4:8F:A1:BF:5F:B9:8E:44:F5:BC:FF:C9:93:00:05
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/tKOJMA_Ej6G_X7mORPW8_8mTAAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.182.194.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:a3:85:ce:a9:9b:97:88:5e:68:91:f3:e7:9f:ad:aa:67:35:
8b:9d:ec:69:b6:41:5d:ef:3b:14:09:e1:c9:13:77:a9:82:ad:
a8:c8:4f:95:77:e3:ba:dd:e7:2a:80:c8:7a:0e:85:b8:55:89:
ae:86:e7:2b:de:06:16:60:78:8a:d4:96:9b:08:3d:9c:8a:6b:
95:01:76:9b:02:15:8a:bf:dd:09:7e:57:62:44:d5:6d:7b:69:
33:b9:93:b0:df:73:f9:20:d9:b5:dd:b1:50:1a:fe:59:3c:67:
9a:4a:9f:f1:6c:69:3b:59:37:b5:06:29:6d:3c:13:d8:82:99:
3e:9f:85:a7:0e:1f:26:2e:86:5d:ea:a6:25:c2:79:0e:05:e9:
8f:7c:52:fd:c5:55:33:d7:d3:ba:2e:0b:71:35:86:db:55:ed:
6b:91:da:09:8f:13:1d:3d:d5:9a:81:af:4c:1b:17:bf:f3:79:
54:4c:48:09:66:48:49:11:7a:ba:07:dc:5d:45:30:22:db:2e:
4e:26:1c:06:25:89:c5:de:b0:1a:09:ea:1e:b5:f5:7e:ab:ef:
24:9a:58:7a:d0:22:aa:11:a7:ae:97:46:14:9f:a8:98:d4:fe:
2b:25:52:cc:ca:d6:db:89:55:a8:ba:7f:49:22:08:83:b4:72:
b7:5a:74:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:45:46 2026 by rpki-client