Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/080e92-fffe-47d9-a6e2-c238eae0663b/1/TJJyQv5VmDi08KoYJ1vbnVQ_a3w.roa
File: TJJyQv5VmDi08KoYJ1vbnVQ_a3w.roa (raw, json)
Hash identifier: YTVRlYaiyjDRHlwYiMmjF3xep4HFHPTyJKjMDMtzsrc=
Subject key identifier: 4C:92:72:42:FE:55:98:38:B4:F0:AA:18:27:5B:DB:9D:54:3F:6B:7C
Certificate issuer: /CN=4f4b2aab1d67f6d4c058392b9137bd03228f7d2a
Certificate serial: 01A12FC654B11E9EC4ADC67C96A3DFF0748F
Authority key identifier: 4F:4B:2A:AB:1D:67:F6:D4:C0:58:39:2B:91:37:BD:03:22:8F:7D:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0sqqx1n9tTAWDkrkTe9AyKPfSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/080e92-fffe-47d9-a6e2-c238eae0663b/1/TJJyQv5VmDi08KoYJ1vbnVQ_a3w.roa
Signing time: Mon 12 Oct 2026 11:01:29 +0000
ROA not before: Mon 12 Oct 2026 11:01:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8793
IP address blocks: 185.58.0.0/22 maxlen: 22
185.58.3.0/24 maxlen: 24
185.191.146.0/24 maxlen: 24
193.168.6.0/23 maxlen: 24
193.200.240.0/24 maxlen: 24
2a02:60a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/080e92-fffe-47d9-a6e2-c238eae0663b/1/T0sqqx1n9tTAWDkrkTe9AyKPfSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/080e92-fffe-47d9-a6e2-c238eae0663b/1/T0sqqx1n9tTAWDkrkTe9AyKPfSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0sqqx1n9tTAWDkrkTe9AyKPfSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:c6:54:b1:1e:9e:c4:ad:c6:7c:96:a3:df:f0:74:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4b2aab1d67f6d4c058392b9137bd03228f7d2a
Validity
Not Before: Oct 12 11:01:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c927242fe559838b4f0aa18275bdb9d543f6b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e9:8c:88:9e:5d:c9:5f:cb:38:91:4b:e3:32:
d2:f1:b0:70:2a:dc:01:a5:a9:84:39:7c:3b:bf:f3:
83:8d:07:9c:0b:d7:a1:a2:92:36:91:20:ba:46:18:
8d:50:93:fd:4a:77:d5:31:ca:cf:4a:8b:43:cb:ef:
18:16:f5:8c:ab:8b:e6:81:84:40:21:03:58:ea:79:
00:b3:06:01:a8:ac:2f:b8:89:5e:43:79:26:43:58:
26:bd:2b:1e:84:32:fe:70:1b:57:d0:2d:5a:59:83:
a1:a2:60:35:4e:45:10:e2:71:d2:9e:22:f1:7c:65:
c1:2b:b5:62:1b:68:fe:35:58:a1:e2:71:b2:8f:de:
9c:4a:f4:d4:72:74:ef:6d:3c:2d:65:e8:47:54:82:
24:bf:87:18:3d:58:a4:f5:aa:62:40:92:0a:77:a6:
ea:11:3f:c2:23:ad:ea:04:9c:0f:75:16:c7:37:ad:
d0:aa:23:44:80:8a:9e:e4:2c:46:0f:8a:93:c8:36:
e8:97:6b:14:f2:cf:00:82:f4:8d:23:5c:61:71:2d:
9c:98:fa:e2:23:77:42:4c:c8:6a:36:73:3a:32:6d:
7b:1d:af:ce:db:23:75:8f:73:0e:84:13:18:cc:47:
53:c3:21:c9:57:15:d3:91:76:60:1d:92:cc:42:a4:
a5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:92:72:42:FE:55:98:38:B4:F0:AA:18:27:5B:DB:9D:54:3F:6B:7C
X509v3 Authority Key Identifier:
keyid:4F:4B:2A:AB:1D:67:F6:D4:C0:58:39:2B:91:37:BD:03:22:8F:7D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0sqqx1n9tTAWDkrkTe9AyKPfSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/080e92-fffe-47d9-a6e2-c238eae0663b/1/TJJyQv5VmDi08KoYJ1vbnVQ_a3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/080e92-fffe-47d9-a6e2-c238eae0663b/1/T0sqqx1n9tTAWDkrkTe9AyKPfSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.58.0.0/22
185.191.146.0/24
193.168.6.0/23
193.200.240.0/24
IPv6:
2a02:60a0::/32
Signature Algorithm: sha256WithRSAEncryption
b5:87:cb:27:7f:22:f3:bb:53:d5:63:ee:1c:25:e3:2e:e8:20:
cc:3d:8a:51:6d:10:ac:96:4e:0c:63:88:9b:be:ef:cc:2a:8b:
6a:57:b1:79:e1:d3:38:a3:54:8f:49:77:24:f3:69:6f:b2:c6:
ae:ca:73:7f:80:eb:86:c9:f4:c3:54:a7:11:f7:4e:01:bf:48:
a0:35:c7:6a:fb:de:d9:cc:cd:dc:1d:fa:2c:c7:2b:50:f8:61:
11:ec:3e:f8:d6:dc:bf:f4:43:f0:45:70:af:ff:7b:b9:27:a8:
9c:c4:14:62:e5:5a:9b:e9:a1:ba:e6:74:aa:08:4a:d4:07:67:
aa:e4:01:39:0e:cb:ad:25:46:d2:c8:81:d4:9e:8e:e2:ff:4a:
65:56:2d:a4:a0:22:23:a9:a0:fe:d2:de:9e:57:66:c9:16:8b:
c9:4a:c4:37:2e:e5:43:11:bf:c6:e6:76:6f:1b:75:8f:69:22:
9f:45:54:bc:ab:8f:76:ac:61:04:a0:97:e8:dc:6f:a8:5e:0e:
c3:11:3b:d5:55:7e:ae:13:04:7f:86:41:7e:d3:8f:b1:8c:38:
0a:4b:88:38:61:fe:c6:a5:e2:db:75:be:5f:4a:d6:99:15:a1:
0d:ed:64:3b:ed:e9:fd:a6:5c:8a:5d:ee:e1:d7:91:ad:6d:f7:
72:db:b8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:20:35 2026 by rpki-client