Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/TnnOKxtf4EPhpaijnm_BNONRxwU.roa
File: TnnOKxtf4EPhpaijnm_BNONRxwU.roa (raw, json)
Hash identifier: /oEc2dWACsObBTpte8m7CBKnG6qM7AzaqS7eowDmmPE=
Subject key identifier: 4E:79:CE:2B:1B:5F:E0:43:E1:A5:A8:A3:9E:6F:C1:34:E3:51:C7:05
Certificate issuer: /CN=aaebc9bfef2b4d23f19513bfd4d60bb798f5a59d
Certificate serial: 019ECBC43410E6E232842AF927886C461471
Authority key identifier: AA:EB:C9:BF:EF:2B:4D:23:F1:95:13:BF:D4:D6:0B:B7:98:F5:A5:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/TnnOKxtf4EPhpaijnm_BNONRxwU.roa
Signing time: Mon 15 Jun 2026 14:51:33 +0000
ROA not before: Mon 15 Jun 2026 14:51:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34081
IP address blocks: 31.14.163.0/24 maxlen: 25
84.33.0.0/18 maxlen: 24
84.33.16.0/23 maxlen: 24
84.33.32.0/19 maxlen: 19
84.33.192.0/18 maxlen: 24
84.33.215.0/24 maxlen: 24
172.83.81.0/24 maxlen: 25
193.188.28.0/22 maxlen: 24
217.70.144.0/20 maxlen: 24
2001:1a38::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cb:c4:34:10:e6:e2:32:84:2a:f9:27:88:6c:46:14:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaebc9bfef2b4d23f19513bfd4d60bb798f5a59d
Validity
Not Before: Jun 15 14:51:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e79ce2b1b5fe043e1a5a8a39e6fc134e351c705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d7:d1:41:dd:02:41:6b:62:f3:ef:cd:b2:2a:
45:81:8f:30:28:f6:76:6c:96:78:99:2d:90:5a:a2:
92:52:90:95:87:9e:ed:58:9c:09:f3:df:0c:01:ae:
e2:41:ac:3a:9c:05:0a:e4:0b:af:e4:86:17:57:c3:
25:9b:29:36:78:79:da:15:4e:b8:f9:c5:aa:bb:da:
be:a8:02:ec:fb:5e:d6:00:6a:e1:cc:3f:47:b7:a2:
40:88:b8:a4:4f:18:06:eb:08:88:5d:fd:23:33:5d:
80:16:b1:b9:c1:5a:42:63:23:75:51:e7:10:5c:96:
36:8a:45:69:25:2d:96:15:24:c8:3c:e5:ba:32:b3:
bf:99:7b:a1:f3:a9:58:80:4b:fe:d4:93:7f:a8:8a:
c3:8f:83:aa:08:03:79:0d:41:cf:19:ea:6a:fb:45:
ca:3a:1e:4d:c5:b6:97:38:60:a7:e4:10:d2:31:0d:
ee:21:83:c6:5a:ef:2f:aa:25:fd:c0:b7:78:63:33:
82:37:db:53:7e:ea:bf:ce:48:fe:30:9d:55:a9:7d:
ec:07:ce:cd:7f:77:bb:88:67:20:3e:ac:6e:12:86:
2c:b6:e7:6f:d2:dd:b3:1f:e6:fe:9c:97:a5:87:40:
4c:a8:3d:90:af:46:7b:b9:da:9f:2f:5b:8d:49:24:
c7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:79:CE:2B:1B:5F:E0:43:E1:A5:A8:A3:9E:6F:C1:34:E3:51:C7:05
X509v3 Authority Key Identifier:
keyid:AA:EB:C9:BF:EF:2B:4D:23:F1:95:13:BF:D4:D6:0B:B7:98:F5:A5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/TnnOKxtf4EPhpaijnm_BNONRxwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.163.0/24
84.33.0.0/18
84.33.192.0/18
172.83.81.0/24
193.188.28.0/22
217.70.144.0/20
IPv6:
2001:1a38::/32
Signature Algorithm: sha256WithRSAEncryption
50:67:ee:b8:61:79:bf:74:68:77:9c:73:56:fd:5f:47:7d:c2:
a6:6c:16:d3:f8:d1:00:63:41:94:8b:05:6f:5b:f0:4d:a9:2b:
0d:48:34:d3:e5:93:9e:17:b4:4d:e5:48:a2:e0:0d:38:41:00:
f1:2d:aa:17:63:7c:c9:65:f4:fb:79:16:8f:0a:22:3e:52:ab:
28:bd:2c:16:7b:57:39:f6:db:1b:6f:30:5f:42:14:04:e4:b1:
2d:2f:b8:00:b6:fb:1a:37:5f:69:ca:35:66:df:9e:39:3e:3a:
09:ed:28:b7:39:40:4f:5f:bf:43:79:b3:bd:7e:0a:b2:2a:93:
f2:a1:60:b5:59:a1:22:f6:54:4b:8d:ac:0c:c4:4e:15:00:60:
e1:f5:0d:41:0d:98:bb:31:9e:9e:6e:8d:19:d1:f8:0d:8f:70:
af:f3:df:00:ba:ea:09:a0:0b:c2:0a:d3:a3:b1:d1:b6:9e:f6:
f2:8d:09:dd:98:03:39:69:e4:f3:10:86:3a:e5:b1:70:c3:62:
b2:47:6b:57:ba:7f:3e:df:28:dd:30:ec:3c:28:0e:43:fd:10:
2c:6e:84:ed:b4:0a:41:49:09:7b:cb:58:36:a3:87:c1:82:8d:
65:97:5b:08:9a:35:bc:33:4d:c0:6d:5a:08:97:7c:c2:4a:17:
b6:6d:24:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 14:21:03 2026 by rpki-client