Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/tFzaapDmNwAtVvR5ifMcPLl5ebQ.roa
File: tFzaapDmNwAtVvR5ifMcPLl5ebQ.roa (raw, json)
Hash identifier: QC3tzeHaFimQxWbGnNorS8UQYwAQdR7zW8Go/MreQ7I=
Subject key identifier: B4:5C:DA:6A:90:E6:37:00:2D:56:F4:79:89:F3:1C:3C:B9:79:79:B4
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019DD34B16E99DF82E659E3BAA3D5C2D074C
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/tFzaapDmNwAtVvR5ifMcPLl5ebQ.roa
Signing time: Tue 28 Apr 2026 08:53:26 +0000
ROA not before: Tue 28 Apr 2026 08:53:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17404
IP address blocks: 193.200.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d3:4b:16:e9:9d:f8:2e:65:9e:3b:aa:3d:5c:2d:07:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Apr 28 08:53:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b45cda6a90e637002d56f47989f31c3cb97979b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bd:90:6a:e9:9a:14:2b:90:29:fe:1f:ff:c3:
93:0c:a4:95:e6:b5:c6:9f:9b:32:cf:a8:28:a0:6c:
33:7d:ba:b4:b3:57:45:89:00:cf:c3:86:3e:f6:d1:
48:e8:1d:c9:07:5e:e5:a6:a1:d5:77:6e:89:4d:73:
4a:9f:d8:bc:77:53:33:ad:13:e2:d1:e3:e1:8b:e7:
a8:7f:ee:d4:6b:6a:75:17:b7:19:b2:1f:59:5b:e2:
d2:c8:b1:9f:6c:5d:c3:e8:c3:a3:ee:d9:eb:26:03:
eb:00:b7:09:9c:cc:0c:21:bf:85:30:dc:fe:00:fc:
f3:93:0a:55:4f:02:51:41:99:85:60:58:59:28:4e:
c9:de:d4:fe:8d:4d:9e:50:12:ef:bc:15:74:a7:67:
d9:db:bf:62:b0:0d:f7:2c:5a:8a:06:e2:20:e3:eb:
90:c5:1a:c6:04:9a:b9:d1:2e:5a:f1:fc:e9:82:5d:
c8:6f:7e:72:d5:82:21:ce:ae:40:f4:00:8a:c1:23:
dd:ec:22:f6:eb:89:fd:32:66:e9:e1:4d:ac:bf:74:
a8:6c:91:6a:45:9f:27:65:33:7d:14:92:cc:1f:0c:
cf:89:7b:d0:cf:d7:cb:74:25:0d:e9:87:f1:4e:83:
6d:49:fa:2e:e9:d9:52:15:45:b1:8f:48:b3:ca:81:
e9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5C:DA:6A:90:E6:37:00:2D:56:F4:79:89:F3:1C:3C:B9:79:79:B4
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/tFzaapDmNwAtVvR5ifMcPLl5ebQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.78.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:54:b8:16:8e:e4:b8:1e:d7:7b:52:93:3c:20:3a:06:39:c7:
62:b7:42:60:4f:48:f6:fd:7a:a6:42:35:aa:b7:1e:e0:e0:ce:
38:74:0a:ba:86:e7:a6:4c:c2:c1:ad:e9:33:63:50:27:0e:dc:
24:c6:eb:42:21:c7:08:82:e3:79:8c:fa:84:77:26:a3:81:b7:
0e:38:e0:55:59:6c:6a:c1:53:03:80:82:9f:31:c3:00:f5:ac:
3f:08:f3:22:e8:29:4f:92:c1:b2:81:fd:60:12:40:ca:b8:20:
5a:1a:e6:28:ff:cc:8e:30:fc:22:78:b7:5d:a5:62:17:bd:69:
46:4d:99:0a:fb:bb:41:20:03:c5:fa:0e:53:9f:89:40:ed:88:
d6:95:75:bb:46:ae:3e:aa:7a:1e:1c:0b:90:49:3b:aa:ed:af:
33:54:21:05:84:ea:bf:14:3b:22:a9:5e:12:44:58:9d:43:6d:
3d:54:21:6d:4e:b8:ea:ab:49:01:8f:67:8c:ce:69:96:c5:b8:
2e:d0:21:f7:95:68:8b:6a:e5:f9:30:47:e3:2c:7f:f8:5e:c3:
54:df:67:a8:9e:e2:9a:d8:6d:2c:69:0e:ea:72:11:b5:64:1e:
bf:02:1b:97:88:bf:f0:94:fb:8c:d7:5c:5e:92:df:33:bc:20:
c6:80:1c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 04:45:39 2026 by rpki-client