Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/0fad6f-e9d9-48b6-bd11-b0f5367c01f4/1/TUf12jhMmcLOANf7cgOVkVeYwW8.roa
File: TUf12jhMmcLOANf7cgOVkVeYwW8.roa (raw, json)
Hash identifier: 7Fp06A3yhCRN7VwSugruMcOv/NybhwRNEN+T2UwHQGg=
Subject key identifier: 4D:47:F5:DA:38:4C:99:C2:CE:00:D7:FB:72:03:95:91:57:98:C1:6F
Certificate issuer: /CN=110fc3ac40a40d8e0e6f175b82b38ff1f8f885a0
Certificate serial: 01A03F8D6B00D3C1C4489AD3320E265D3550
Authority key identifier: 11:0F:C3:AC:40:A4:0D:8E:0E:6F:17:5B:82:B3:8F:F1:F8:F8:85:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQ_DrECkDY4ObxdbgrOP8fj4haA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/0fad6f-e9d9-48b6-bd11-b0f5367c01f4/1/TUf12jhMmcLOANf7cgOVkVeYwW8.roa
Signing time: Wed 26 Aug 2026 19:30:27 +0000
ROA not before: Wed 26 Aug 2026 19:30:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219017
IP address blocks: 80.224.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/0fad6f-e9d9-48b6-bd11-b0f5367c01f4/1/EQ_DrECkDY4ObxdbgrOP8fj4haA.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/0fad6f-e9d9-48b6-bd11-b0f5367c01f4/1/EQ_DrECkDY4ObxdbgrOP8fj4haA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQ_DrECkDY4ObxdbgrOP8fj4haA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:8d:6b:00:d3:c1:c4:48:9a:d3:32:0e:26:5d:35:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=110fc3ac40a40d8e0e6f175b82b38ff1f8f885a0
Validity
Not Before: Aug 26 19:30:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d47f5da384c99c2ce00d7fb720395915798c16f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4c:a4:7d:91:e2:cd:a6:b5:f7:8e:e4:21:a1:
a3:60:d2:d0:5c:54:b8:d5:08:91:3c:e0:2a:03:d8:
02:56:d7:9d:2f:95:ce:73:e9:70:2f:21:3a:40:1e:
d8:6f:27:0c:33:2b:4e:38:fc:36:82:75:40:e0:34:
14:cf:28:b1:b2:c7:1c:d4:ed:0b:a4:3c:ba:d7:d9:
bf:fa:a8:64:26:8a:fd:a8:5d:5a:2f:f2:cc:20:22:
23:83:52:16:6f:b0:17:76:c6:2f:10:26:03:4f:72:
61:66:d2:de:8d:39:f4:9c:42:ca:17:b4:4c:d8:8c:
03:88:36:16:80:b0:63:8f:af:aa:3b:e3:99:f9:d8:
6a:ee:e8:27:09:1c:03:fb:76:ac:04:c8:39:5d:01:
7e:5a:3e:87:2f:4e:c3:27:c2:fc:62:b2:8f:aa:4b:
0d:b4:84:ca:a0:30:2a:7d:87:d4:13:03:39:d2:86:
b9:0e:a6:5e:c8:b6:93:59:04:5f:13:ef:7f:54:75:
75:dd:a2:7f:0f:eb:1a:c2:e0:55:bf:cd:45:04:7a:
a2:0b:c3:79:11:e4:59:a3:58:95:9a:d8:2b:7c:07:
c1:e7:0b:b2:78:50:56:b4:de:94:bb:86:82:fe:b8:
45:71:6c:3b:17:74:4b:ea:49:92:49:e3:15:a4:ad:
4c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:47:F5:DA:38:4C:99:C2:CE:00:D7:FB:72:03:95:91:57:98:C1:6F
X509v3 Authority Key Identifier:
keyid:11:0F:C3:AC:40:A4:0D:8E:0E:6F:17:5B:82:B3:8F:F1:F8:F8:85:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQ_DrECkDY4ObxdbgrOP8fj4haA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0fad6f-e9d9-48b6-bd11-b0f5367c01f4/1/TUf12jhMmcLOANf7cgOVkVeYwW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0fad6f-e9d9-48b6-bd11-b0f5367c01f4/1/EQ_DrECkDY4ObxdbgrOP8fj4haA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.224.238.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:23:2e:e3:3d:be:e6:a7:06:7a:43:71:a5:f7:98:0b:92:91:
a5:17:4b:3b:3a:88:e3:12:14:61:e5:2b:8d:17:79:00:d9:13:
0d:ab:6a:2a:74:04:5b:fb:d7:12:1a:17:8f:0e:97:f0:76:fd:
b9:16:84:3b:2f:35:04:32:59:83:79:3f:43:54:da:f0:5b:10:
df:87:43:49:be:41:6b:da:f2:f0:7d:36:4e:ec:8a:27:58:81:
9f:be:81:b1:dc:89:c1:fd:80:9c:19:4f:f8:d8:48:98:aa:47:
73:f9:92:91:a5:9c:d0:6c:48:50:f6:81:60:ec:ec:b6:d1:71:
d6:ef:b2:df:12:1a:19:87:38:4c:af:a0:c9:e7:ce:a6:1b:4b:
12:29:66:d5:e9:91:ec:52:17:98:3d:db:f6:5d:22:db:d0:e1:
18:85:0b:93:7c:cd:79:28:9f:42:45:d5:57:90:86:f0:0b:0c:
2b:f8:2a:27:cb:1f:20:41:43:c9:38:f7:cc:71:37:30:60:96:
78:fe:d2:62:54:80:5b:72:88:33:f6:e6:11:42:37:b3:ba:51:
91:24:88:3c:89:88:6f:a6:cb:20:01:fb:5d:ff:b6:1a:fe:9e:
f3:f7:f6:0d:6c:42:61:39:a7:f1:e4:c6:03:4e:b4:09:67:6b:
bd:5a:32:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 11:00:46 2026 by rpki-client