Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TQU7RYybgjajqrSIbwKpGHTK52w.roa
File: TQU7RYybgjajqrSIbwKpGHTK52w.roa (raw, json)
Hash identifier: x3wxIvmLn/AFg0dH6TimGlzZOjZ5wjRzI3jHRVd10Hw=
Subject key identifier: 4D:05:3B:45:8C:9B:82:36:A3:AA:B4:88:6F:02:A9:18:74:CA:E7:6C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019FAC15742C35B855C9EAA26078ACF23314
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TQU7RYybgjajqrSIbwKpGHTK52w.roa
Signing time: Wed 29 Jul 2026 04:15:14 +0000
ROA not before: Wed 29 Jul 2026 04:15:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48014
IP address blocks: 89.144.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 12:11:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:15:74:2c:35:b8:55:c9:ea:a2:60:78:ac:f2:33:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 29 04:15:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d053b458c9b8236a3aab4886f02a91874cae76c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:23:9d:9d:24:f6:eb:9f:ed:01:b3:ac:06:fe:
83:d1:59:d7:86:fc:b5:52:38:d1:0a:27:9d:2f:14:
f7:9d:4e:4f:ef:4f:9c:c7:7d:cc:a0:a1:06:55:f8:
1b:14:58:46:c7:59:ef:3f:76:8d:bf:c1:7b:8f:1d:
3b:95:5e:86:98:40:34:81:08:0c:c9:7a:1c:e6:fe:
02:29:e0:52:87:f5:9b:83:18:b2:fa:7f:2e:98:71:
16:bb:e0:de:da:e6:6a:71:68:4d:de:1b:0c:3d:38:
37:b0:bb:ab:ad:10:ef:84:e8:f7:71:aa:82:fc:e2:
86:c2:3b:8b:bb:23:6a:63:1b:d0:a5:fa:3b:11:e8:
2c:1e:46:75:a5:e2:08:aa:e8:2f:90:14:42:fa:84:
15:20:d0:e0:7f:5b:e6:0f:0b:a1:8a:9f:89:c9:f7:
21:fd:94:5b:9c:f2:0f:05:97:39:08:e8:b6:99:c2:
b7:76:a5:37:8a:9a:fb:d3:84:ff:01:77:15:d7:2f:
ac:27:48:11:2b:bf:05:6f:52:07:35:c9:ba:08:aa:
e9:34:f4:fe:04:5d:5b:00:2c:ed:2a:90:a1:ae:20:
ce:8c:ec:05:0e:0c:c0:91:74:ce:9c:56:9c:8c:6d:
6b:ef:fc:df:a1:3c:bc:60:fa:c2:0d:5c:57:48:a7:
aa:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:05:3B:45:8C:9B:82:36:A3:AA:B4:88:6F:02:A9:18:74:CA:E7:6C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TQU7RYybgjajqrSIbwKpGHTK52w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.60.0/24
Signature Algorithm: sha256WithRSAEncryption
10:9c:4a:e1:2f:24:03:ff:26:19:97:09:17:23:48:38:e3:86:
43:a7:b9:49:12:45:98:46:3d:f7:e6:41:3d:be:fa:5f:90:4b:
7e:e7:c9:da:c8:08:ce:4b:fa:50:03:b8:6c:53:76:fc:4f:84:
3a:f2:da:fd:07:b4:5e:f5:63:d8:92:09:00:e1:86:d2:5d:b4:
1a:f3:02:01:94:0f:61:f9:07:b9:2a:3d:f8:1b:bd:04:63:03:
26:ca:25:ab:c1:59:ce:44:9d:66:98:7b:02:70:10:ed:f8:50:
4b:f3:93:19:1a:24:01:17:58:2c:36:23:74:4f:d3:44:8f:ea:
a5:37:9d:8b:c4:85:0d:45:fe:da:a8:bb:ff:ac:65:01:65:61:
cc:95:d5:b7:8c:3b:30:15:af:7a:b6:fc:4f:ad:d3:0e:f3:25:
2b:fe:27:a6:b0:ef:1e:bd:cc:84:6e:ae:73:d7:ba:ab:11:00:
9b:79:63:b8:f6:28:a7:2a:78:e8:a5:47:64:be:18:e8:75:ca:
96:03:75:fd:5a:b8:64:6c:9e:08:e3:ac:db:79:62:5f:23:42:
e1:47:d5:4f:49:14:31:45:c8:c6:0d:91:b2:da:3a:1a:d7:0a:
d7:91:a9:a3:b2:e4:97:e9:0b:61:a7:29:12:95:04:dc:6d:69:
98:80:f3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 19:16:11 2026 by rpki-client