Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/TXIMOOFbySOl_fCyrIFwzH38_Nc.roa
File: TXIMOOFbySOl_fCyrIFwzH38_Nc.roa (raw, json)
Hash identifier: zx/ZoqOHnaqrqnJEUUNhOkPvA4KyM2M6D+k4QPkptDg=
Subject key identifier: 4D:72:0C:38:E1:5B:C9:23:A5:FD:F0:B2:AC:81:70:CC:7D:FC:FC:D7
Certificate issuer: /CN=eef5314aeef51323194fd8629858ad20fb92dfe7
Certificate serial: 019F23689A7D1CD9A12C6AB8CA1715DDF735
Authority key identifier: EE:F5:31:4A:EE:F5:13:23:19:4F:D8:62:98:58:AD:20:FB:92:DF:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/TXIMOOFbySOl_fCyrIFwzH38_Nc.roa
Signing time: Thu 02 Jul 2026 15:18:05 +0000
ROA not before: Thu 02 Jul 2026 15:18:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210989
IP address blocks: 2a0d:1a40:7b00::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:9a:7d:1c:d9:a1:2c:6a:b8:ca:17:15:dd:f7:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eef5314aeef51323194fd8629858ad20fb92dfe7
Validity
Not Before: Jul 2 15:18:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d720c38e15bc923a5fdf0b2ac8170cc7dfcfcd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:15:e1:44:4f:65:b7:be:fa:56:ca:3d:93:06:
20:d4:f1:88:77:e7:b7:f9:23:4b:17:8f:cf:ca:26:
59:d8:5a:8e:49:a0:94:21:17:62:8d:0a:65:59:35:
02:6c:cb:aa:64:8b:66:2c:0c:a9:a1:a9:b4:16:11:
57:c7:a3:4f:46:12:ac:58:aa:5e:2b:4a:eb:ad:f2:
b0:51:d3:d8:ef:5d:7f:c5:1c:f1:f1:88:33:aa:6a:
46:cf:b8:8c:83:7c:69:3e:dc:b2:17:ba:a1:18:f4:
a6:b1:f6:e9:8e:c5:a5:66:6c:9f:18:e6:ee:04:42:
06:45:7e:d0:d1:4f:72:d0:c7:01:55:e4:c1:b1:35:
a9:08:67:db:3e:30:1d:53:77:0d:90:c0:a3:5f:3a:
a7:22:37:2a:e9:20:54:32:a9:a8:b4:e9:07:fc:9b:
6d:a2:ff:9e:2a:fe:29:57:44:3f:d9:b8:99:ec:de:
6e:d4:6f:e1:06:4c:56:6a:c4:e9:11:6f:bf:f2:58:
28:83:ca:b6:12:62:ba:8d:1d:8a:3e:24:7f:07:bd:
00:40:e0:1f:0d:c6:8e:5c:81:33:f8:e4:af:bc:4e:
67:58:2d:41:b4:2c:1d:7c:ad:1e:f5:00:36:20:68:
6c:df:ba:7e:f2:29:64:7b:91:a2:f0:ab:b3:2b:e2:
ec:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:72:0C:38:E1:5B:C9:23:A5:FD:F0:B2:AC:81:70:CC:7D:FC:FC:D7
X509v3 Authority Key Identifier:
keyid:EE:F5:31:4A:EE:F5:13:23:19:4F:D8:62:98:58:AD:20:FB:92:DF:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/TXIMOOFbySOl_fCyrIFwzH38_Nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:1a40:7b00::/44
Signature Algorithm: sha256WithRSAEncryption
05:ff:ac:67:15:26:5c:7d:22:84:65:43:11:b6:a1:54:f7:db:
41:4e:f4:b6:9c:24:e3:6b:74:fb:c5:f5:65:8d:a5:55:41:4a:
45:5a:e4:30:6a:f5:74:48:c9:8f:4d:39:6c:bd:a4:0e:a0:6d:
5c:48:7d:72:9b:15:02:60:a1:26:b4:c7:da:74:49:28:16:fd:
3a:39:0e:ac:af:87:d2:0c:27:0f:05:ef:57:38:9f:cb:3b:dc:
88:1c:c6:07:2f:5b:1d:89:cc:f5:33:46:08:7f:c3:ed:36:1a:
b9:17:79:08:bc:c2:3c:93:84:68:95:21:bb:34:ab:bc:cd:6a:
05:58:b4:2f:a3:3c:1e:65:c3:81:2f:21:4f:42:44:01:41:00:
da:e4:d0:b4:5e:f6:69:68:13:30:96:fb:4f:0b:f2:fe:05:ba:
2f:63:55:7a:70:d5:62:23:23:08:c9:62:43:57:62:e1:bf:22:
09:66:d0:5a:49:1b:d6:0a:a4:96:5d:35:55:e6:55:2e:42:54:
ee:76:9a:5f:07:3b:28:24:7d:17:a6:d8:7a:14:e4:c2:dc:32:
cb:43:bd:ca:2e:03:38:0d:5a:f3:d3:e8:97:9a:b8:9c:02:1a:
49:13:81:dd:67:2b:ce:4d:94:71:ad:1d:0d:8b:c3:ee:93:18:
6a:47:85:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:41:22 2026 by rpki-client