Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/tGeyx8Tyi3MJifUbkW9tJvD8Hi8.roa
File: tGeyx8Tyi3MJifUbkW9tJvD8Hi8.roa (raw, json)
Hash identifier: /mXuqEnnvoc6vrN9Hy5yvy5uTAQuC9QsFbTLGTdCtbM=
Subject key identifier: B4:67:B2:C7:C4:F2:8B:73:09:89:F5:1B:91:6F:6D:26:F0:FC:1E:2F
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019F5FD505743F69169C51ABDB2BB2037DE2
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/tGeyx8Tyi3MJifUbkW9tJvD8Hi8.roa
Signing time: Tue 14 Jul 2026 08:53:43 +0000
ROA not before: Tue 14 Jul 2026 08:53:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 89.191.120.0/22 maxlen: 22
91.123.64.0/22 maxlen: 22
91.123.76.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 15:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5f:d5:05:74:3f:69:16:9c:51:ab:db:2b:b2:03:7d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jul 14 08:53:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b467b2c7c4f28b730989f51b916f6d26f0fc1e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:48:4f:3d:79:78:ee:d8:e8:f0:c8:70:45:e4:
58:d9:0d:65:d5:9b:c7:a5:fd:a6:9b:bf:75:8c:5f:
23:3a:10:6b:07:c0:1b:d0:a2:dd:d8:03:b0:72:11:
c7:c1:36:37:28:6a:15:68:ce:af:f3:20:4f:a5:a2:
72:e4:7d:0a:ff:0d:e5:13:9f:fd:da:d3:16:4a:17:
29:bc:bd:41:34:d4:cc:88:ac:90:53:9e:39:1d:e5:
c9:07:e2:b7:11:7f:48:d6:f5:3c:a4:b8:96:8c:b6:
16:db:ab:a1:d6:b2:d0:71:db:31:b7:9c:18:3b:43:
a3:1f:a8:c5:44:8a:6e:5f:a4:c8:80:5f:6b:22:0f:
83:f9:98:5b:df:5b:30:dc:2f:fa:f7:50:80:a3:0b:
13:e3:38:9f:73:d7:6f:60:21:e6:9c:83:a7:8e:da:
97:7d:76:9a:ab:4d:e4:be:5b:fc:f1:47:c8:07:e8:
fb:e1:b7:25:8d:e7:7e:6c:1a:8b:f9:15:bc:c7:7b:
97:5b:a2:d8:49:ef:0c:12:a7:44:dc:54:57:f0:36:
74:0e:72:9e:a4:23:d9:b9:06:a5:d8:cd:83:fa:1f:
1f:50:e6:bc:02:ee:1d:ea:38:f0:a1:69:2d:6a:71:
9b:1d:b6:a2:50:de:2c:2f:5f:d2:f7:25:b1:82:02:
7b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:67:B2:C7:C4:F2:8B:73:09:89:F5:1B:91:6F:6D:26:F0:FC:1E:2F
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/tGeyx8Tyi3MJifUbkW9tJvD8Hi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.191.120.0/22
91.123.64.0/22
91.123.76.0/22
Signature Algorithm: sha256WithRSAEncryption
c5:93:74:1c:f2:e0:fe:e1:ef:2c:8b:57:50:66:71:84:40:97:
32:3d:80:81:68:f0:af:0b:ef:52:7c:a5:35:a0:d6:2a:01:89:
9b:15:82:47:eb:8f:ce:81:6e:8a:c7:69:f6:8a:e3:a2:3f:27:
2c:2e:9e:07:d3:d8:6a:db:9d:b6:80:c3:ef:fa:3b:9e:1c:88:
12:4c:c9:d9:36:fe:b2:01:ed:e6:0d:f9:a2:1b:db:22:e0:c4:
23:5e:e3:59:6c:41:f4:3f:50:b6:00:88:0a:6a:f4:a4:bc:07:
81:65:ce:a7:2d:27:f2:7f:a6:f5:b1:0e:c9:01:f5:7a:46:35:
6e:de:7c:05:c7:c1:7b:ad:33:07:0c:93:f3:b4:67:ac:d1:04:
d6:f0:ec:bc:06:3e:fe:cc:33:15:7e:1e:98:a9:bb:32:bd:2c:
0c:f1:24:8e:11:7d:70:27:10:38:af:d5:69:71:0d:eb:75:0c:
76:c8:14:b2:9f:c0:92:39:60:71:c6:43:c1:0f:46:cd:9f:8a:
54:cd:78:6e:da:57:d3:6a:f3:f7:ab:49:45:5b:5c:1b:72:4d:
96:73:de:ee:9f:80:12:74:b2:43:00:7f:fd:77:b7:e4:8f:b1:
96:02:de:15:c4:ba:12:3f:2a:ef:b6:88:e0:cb:ea:0c:9c:2b:
71:7e:8a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:44 2026 by rpki-client