Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TMF_Qjkht1qkr5Zf_wI7qvZqSWs.roa
File: TMF_Qjkht1qkr5Zf_wI7qvZqSWs.roa (raw, json)
Hash identifier: 5RXSuP5XzfNtUzJzJL/bDY8efbgfspzmprNCpnZoAg8=
Subject key identifier: 4C:C1:7F:42:39:21:B7:5A:A4:AF:96:5F:FF:02:3B:AA:F6:6A:49:6B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A01D5780886DB3C29966A8B246D721A37C
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TMF_Qjkht1qkr5Zf_wI7qvZqSWs.roa
Signing time: Thu 20 Aug 2026 04:04:28 +0000
ROA not before: Thu 20 Aug 2026 04:04:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150716
IP address blocks: 94.249.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1d:57:80:88:6d:b3:c2:99:66:a8:b2:46:d7:21:a3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 20 04:04:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4cc17f423921b75aa4af965fff023baaf66a496b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9a:08:cb:7c:5e:61:9c:9a:d7:27:71:fe:bb:
99:39:f2:14:1c:e3:04:83:22:74:ce:cc:b0:de:11:
4c:36:63:25:df:80:94:08:05:b2:53:6f:c5:c1:a7:
40:0b:f8:44:50:44:31:9b:19:7d:d8:16:f8:09:3f:
76:ac:ce:5f:90:95:89:92:9f:2a:75:83:d7:29:5d:
31:fe:dc:d3:b8:cb:75:dc:39:62:3c:7c:78:73:03:
ec:b7:b8:bf:1a:9e:57:60:68:82:3f:23:7e:44:ff:
8b:23:13:62:cb:db:31:58:34:68:1f:c6:42:0b:a3:
6f:03:bf:65:0d:d0:fe:69:5b:e3:c6:d6:6b:11:70:
7f:b6:0f:3e:56:b3:30:d4:ef:8b:c2:08:76:d0:f8:
e3:d9:4d:b6:f6:34:16:41:a2:8c:c4:36:45:c7:9a:
79:69:0b:58:aa:2f:c9:1a:b0:c0:af:aa:8c:dc:6f:
2a:7b:65:59:6c:d5:a3:44:1d:6b:c6:89:3d:25:3c:
5a:1e:e0:1a:cc:0d:ce:88:aa:87:1d:43:b3:cf:51:
76:4a:ef:64:24:c7:e7:f3:9d:89:d4:8e:23:9d:57:
84:d0:41:79:74:aa:47:0b:fc:ab:c2:70:a5:38:ae:
79:25:ca:b6:71:9a:ba:ca:1a:3b:0d:ba:7a:50:38:
e9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C1:7F:42:39:21:B7:5A:A4:AF:96:5F:FF:02:3B:AA:F6:6A:49:6B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TMF_Qjkht1qkr5Zf_wI7qvZqSWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.249.242.0/24
Signature Algorithm: sha256WithRSAEncryption
40:f6:d6:2b:91:f6:33:9b:4e:8b:6d:2c:42:e6:9f:c8:14:a2:
5b:91:44:69:a0:04:36:f8:e0:31:ca:fb:92:9e:99:dd:94:80:
72:62:6b:85:d9:55:ac:ec:5d:16:a5:19:95:a7:c8:01:db:aa:
ae:ec:3a:49:6a:60:3a:f1:9b:91:69:8d:6d:a3:2d:fa:4c:26:
cc:5a:30:ae:cb:fb:8c:ff:e4:56:b6:ba:d3:87:7f:d9:82:9a:
50:31:f6:52:a2:14:18:21:d4:d9:3a:11:03:a7:41:f5:a4:0c:
05:10:fc:05:51:0d:2b:56:39:c0:83:bc:ff:c7:26:62:89:64:
b1:1c:d9:9f:97:41:48:ec:19:bf:c3:99:57:07:28:b4:e9:66:
ea:85:95:a1:40:c3:01:5a:9e:84:ef:40:36:2c:48:2e:5e:10:
df:79:22:0a:7b:59:5b:bc:2f:6c:b1:9a:e7:ab:39:b2:fc:83:
65:9a:f7:fe:92:5d:5f:7c:c0:f2:0d:b5:32:c4:ed:ca:a6:04:
75:84:98:fc:c7:52:68:2a:f0:92:27:64:df:bd:fd:d4:94:f2:
a4:32:8b:e7:9a:bf:ce:b5:e1:a0:ab:08:0c:04:8c:24:db:fa:
60:24:36:fb:61:df:fc:52:e5:43:e1:28:b7:e6:ef:ae:31:4f:
b9:8e:65:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:35 2026 by rpki-client