Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/TVEdarLnlUkZhd4uc5HWaM7C1F4.roa
File: TVEdarLnlUkZhd4uc5HWaM7C1F4.roa (raw, json)
Hash identifier: XXiBDhnQsTykczo/2NACBKND800VuRzS+V0RgxdJm/s=
Subject key identifier: 4D:51:1D:6A:B2:E7:95:49:19:85:DE:2E:73:91:D6:68:CE:C2:D4:5E
Certificate issuer: /CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Certificate serial: 01A068948CCD77D7DC01A484BD5E01D4B059
Authority key identifier: EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/TVEdarLnlUkZhd4uc5HWaM7C1F4.roa
Signing time: Thu 03 Sep 2026 18:42:40 +0000
ROA not before: Thu 03 Sep 2026 18:42:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 189.105.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:68:94:8c:cd:77:d7:dc:01:a4:84:bd:5e:01:d4:b0:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Validity
Not Before: Sep 3 18:42:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d511d6ab2e795491985de2e7391d668cec2d45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:da:b4:7b:5a:38:31:23:03:cd:d8:78:93:cc:
0c:cd:3a:30:f8:05:5e:27:9e:3f:98:e1:7a:ea:b3:
64:5a:f1:a3:1d:b6:b9:14:8d:7d:bc:a7:d1:6f:20:
77:96:b3:ca:6c:2f:55:cf:dd:d6:4f:59:9e:aa:4a:
16:fe:f9:83:4a:27:68:da:d2:09:57:92:08:d5:df:
2d:04:2f:84:b9:de:0b:7b:f7:04:7b:66:4f:3b:4e:
0f:60:87:f2:7f:99:40:87:e5:bd:c5:a2:4c:65:be:
eb:29:ca:12:96:c0:f1:82:89:0e:e3:f2:f6:f2:83:
2f:ca:f5:82:ba:53:96:49:fc:18:3c:45:4b:f2:89:
8e:48:06:cd:f0:96:5d:3e:02:12:19:6a:09:46:f0:
0c:94:aa:a2:df:29:29:e3:95:6f:17:45:1b:72:09:
bf:5f:2a:d0:0b:57:a9:13:56:66:f0:9b:6a:a5:15:
36:b0:cc:37:bb:c1:0a:65:0f:c2:b6:66:07:52:05:
ca:05:6e:94:56:d2:41:c6:46:59:e1:0b:2b:ee:0f:
ea:b1:48:53:41:3d:58:07:73:4a:7c:79:f7:b7:de:
31:ec:e6:a0:24:17:fd:01:d3:f0:13:2f:df:98:5a:
9f:da:ec:b3:79:ee:43:1e:6a:68:94:fa:e8:dd:a9:
a5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:51:1D:6A:B2:E7:95:49:19:85:DE:2E:73:91:D6:68:CE:C2:D4:5E
X509v3 Authority Key Identifier:
keyid:EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/TVEdarLnlUkZhd4uc5HWaM7C1F4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.105.64.0/20
Signature Algorithm: sha256WithRSAEncryption
72:81:3b:29:dd:46:61:2c:3d:a9:e0:88:72:9d:b5:59:5a:31:
83:61:06:33:02:58:0f:bc:83:c9:fa:29:f5:a3:51:98:ad:aa:
0c:03:03:0b:99:1a:4c:0e:a4:ba:51:60:9b:e1:8b:7e:21:20:
86:2f:83:bd:9a:7e:0b:a8:42:52:cd:3b:1a:24:a6:c3:f9:71:
38:db:e0:ad:b7:aa:79:ef:57:db:40:3b:5b:27:89:cd:fc:81:
e1:1a:9a:54:08:5c:03:aa:9f:2a:2d:6a:36:83:ff:68:e2:b1:
97:d0:2f:32:d8:9c:0a:2d:e6:bb:54:01:b8:d0:b5:a9:d2:c2:
c1:62:63:ea:cc:90:ec:e5:43:fc:0b:22:a8:f1:9e:11:34:4a:
72:a4:e0:fa:ff:49:47:56:25:ee:6e:17:a8:32:b9:75:cd:eb:
c6:d5:bf:4a:a4:c2:0e:f7:f1:40:d2:0d:43:00:01:30:4f:48:
46:54:64:40:92:84:7b:cf:31:09:03:c6:5d:2b:24:97:af:2b:
d1:af:fd:69:be:c3:be:12:77:b0:84:3b:38:5b:9a:91:79:5b:
b7:8c:d7:dd:0e:9c:7e:44:a5:54:b3:5b:a0:cc:42:69:0d:98:
7b:ab:48:00:d4:f4:6a:c7:1a:12:ee:c4:b3:b1:7f:05:79:b8:
33:47:96:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 12:37:57 2026 by rpki-client