Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/T3hmtjVJ0pIGPxsPUX7Jodsysdg.roa
File: T3hmtjVJ0pIGPxsPUX7Jodsysdg.roa (raw, json)
Hash identifier: TRJx9DdiSo189lniYuAWR8maCT8iYXtHoZzttgkFt5k=
Subject key identifier: 4F:78:66:B6:35:49:D2:92:06:3F:1B:0F:51:7E:C9:A1:DB:32:B1:D8
Certificate issuer: /CN=1fe65f2b616c0bdb6606db0a02f3903d8a20d9bd
Certificate serial: 019F23693738B8740BC1E66892C959948B4A
Authority key identifier: 1F:E6:5F:2B:61:6C:0B:DB:66:06:DB:0A:02:F3:90:3D:8A:20:D9:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/T3hmtjVJ0pIGPxsPUX7Jodsysdg.roa
Signing time: Thu 02 Jul 2026 15:18:45 +0000
ROA not before: Thu 02 Jul 2026 15:18:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55002
IP address blocks: 128.139.6.0/24 maxlen: 24
128.139.7.0/24 maxlen: 24
192.114.0.0/24 maxlen: 24
192.114.1.0/24 maxlen: 24
192.114.2.0/24 maxlen: 24
192.114.49.0/24 maxlen: 24
192.114.50.0/24 maxlen: 24
192.115.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:37:38:b8:74:0b:c1:e6:68:92:c9:59:94:8b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe65f2b616c0bdb6606db0a02f3903d8a20d9bd
Validity
Not Before: Jul 2 15:18:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f7866b63549d292063f1b0f517ec9a1db32b1d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ca:4e:76:c3:51:b4:59:a3:6a:bd:23:4a:10:
58:de:57:d9:83:db:14:74:04:c3:5e:b5:c5:d7:e7:
fb:f1:ba:ed:41:9a:4e:70:bd:05:e5:46:a5:4c:f4:
3a:6c:99:e9:00:da:f5:39:7a:63:4f:4d:46:c2:26:
6c:0b:d1:12:5b:b0:14:f4:eb:10:d8:0e:a6:b1:49:
4a:d5:71:23:92:8e:dc:1f:eb:5f:f2:30:b0:8c:8b:
68:c0:11:80:51:1c:3d:b0:7c:1d:a5:d5:05:b3:f4:
9d:33:6c:0c:95:7b:1f:64:17:2b:e3:55:be:70:20:
25:7d:da:1c:92:06:74:69:ca:0a:dc:8a:77:06:4b:
53:d8:63:a9:7a:c9:5d:1d:d3:1f:b2:3b:c5:76:41:
3a:1b:c3:3d:53:50:cf:09:a6:41:f2:ea:39:63:55:
50:ff:6a:74:fb:e9:a3:82:6a:d4:88:4e:30:40:ea:
2d:97:3b:f2:ec:48:50:20:8f:25:ce:7c:2a:ea:e5:
1e:c1:32:15:3a:c8:cc:a8:ba:cc:6e:33:79:2f:50:
d4:6d:86:ed:30:dd:c8:f5:dc:ed:c7:33:eb:17:34:
bd:f2:d6:c9:1a:ff:0e:d4:8c:7f:4f:bd:05:48:c0:
91:b2:5f:a2:4a:51:7e:f0:42:4c:83:a4:e0:be:23:
e2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:78:66:B6:35:49:D2:92:06:3F:1B:0F:51:7E:C9:A1:DB:32:B1:D8
X509v3 Authority Key Identifier:
keyid:1F:E6:5F:2B:61:6C:0B:DB:66:06:DB:0A:02:F3:90:3D:8A:20:D9:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/T3hmtjVJ0pIGPxsPUX7Jodsysdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.139.6.0/23
192.114.0.0-192.114.2.255
192.114.49.0-192.114.50.255
192.115.40.0/24
Signature Algorithm: sha256WithRSAEncryption
04:68:cd:20:a7:c1:3a:80:c7:1f:ee:34:c3:3e:7c:46:97:2c:
16:ce:e6:24:37:55:1c:f8:dc:5b:e5:d6:ea:29:7a:96:70:44:
4c:27:73:ed:f1:56:9c:56:d7:4e:d0:8d:2d:37:c7:bb:c9:a1:
13:8f:5a:4d:94:c6:58:86:30:2d:e4:ea:32:93:87:4a:a5:44:
5c:5f:7c:15:cc:9e:f9:4d:11:82:bf:8f:b5:86:0e:89:70:54:
66:fc:15:b3:e0:8a:27:43:9e:1e:39:2d:b9:59:4b:0e:f3:b9:
48:2c:1f:72:15:48:52:0e:63:18:40:77:34:e2:4c:3b:e3:bb:
36:d1:29:e3:a5:d5:6c:16:5f:c2:8c:4f:11:31:b4:a8:5a:a6:
c7:27:a7:4b:1a:e5:f0:f1:94:ff:6f:90:26:71:7a:f0:df:19:
8c:3f:e0:1f:9d:67:fd:76:71:59:44:13:7c:27:f0:7b:f7:6a:
c0:a6:23:d4:d9:dd:a1:1f:b6:44:c5:8a:64:5c:1d:b8:b6:11:
c7:08:d4:e6:02:97:9b:ca:42:4a:fb:a9:62:35:31:ce:ef:ed:
83:5d:b2:21:ef:48:32:d9:c4:38:91:df:0f:8e:7a:d6:9f:91:
79:c0:c6:d1:a2:42:f0:a5:1e:d1:e2:ce:02:d9:9f:0f:00:2b:
0e:70:58:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:57:44 2026 by rpki-client