Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/tcF15tNlSuEg70jJ8EoXax3uQbA.roa
File: tcF15tNlSuEg70jJ8EoXax3uQbA.roa (raw, json)
Hash identifier: tspjGkYrlu/5O+0pb3g1F2aojwG61qZg9C67qwQocOo=
Subject key identifier: B5:C1:75:E6:D3:65:4A:E1:20:EF:48:C9:F0:4A:17:6B:1D:EE:41:B0
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A047DBF73E81A6FC82301A831BAC10A538
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/tcF15tNlSuEg70jJ8EoXax3uQbA.roa
Signing time: Fri 28 Aug 2026 10:13:13 +0000
ROA not before: Fri 28 Aug 2026 10:13:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219393
IP address blocks: 194.231.199.0/24 maxlen: 24
194.231.209.0/24 maxlen: 24
194.231.213.0/24 maxlen: 24
194.231.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 13:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:db:f7:3e:81:a6:fc:82:30:1a:83:1b:ac:10:a5:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 28 10:13:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5c175e6d3654ae120ef48c9f04a176b1dee41b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:15:f9:4f:a9:92:6c:f3:c6:8b:a5:05:c0:60:
47:0e:fc:92:90:2d:6b:6d:23:e6:06:11:58:39:18:
77:b8:5a:e6:64:15:f7:ff:a3:c0:6f:d4:7c:b1:ae:
d7:6b:2d:3b:2e:0d:30:80:59:15:e8:63:56:d1:13:
a0:ca:ff:cd:c6:1c:35:6c:6c:58:0a:f0:c7:15:7f:
be:28:ed:75:2d:0c:19:2e:8e:c7:38:9c:22:f8:90:
30:81:b7:46:10:b3:c6:c9:04:35:43:67:8b:08:26:
f9:74:41:08:d4:61:7f:02:0b:0b:aa:bc:86:39:04:
c7:9c:4d:35:70:6b:44:98:0c:17:96:7a:ac:75:53:
d6:0e:6b:2f:36:b4:38:52:2d:e8:04:3b:5d:19:89:
7b:48:89:bb:ed:a5:16:01:22:cd:10:72:0d:75:23:
29:52:14:96:70:40:a0:46:09:be:64:67:27:f4:b2:
e8:a6:06:e5:42:c7:8f:8f:b8:7d:12:95:75:f4:56:
ab:9d:65:ca:57:dc:22:40:37:1e:6f:c2:6b:e6:fc:
da:0c:5e:08:23:2c:29:21:d8:f3:12:95:1d:63:35:
84:e6:44:b1:57:a5:ca:18:71:18:91:d7:72:fe:5b:
24:15:fa:98:ab:1a:85:4e:33:fe:b5:5d:62:91:9d:
21:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C1:75:E6:D3:65:4A:E1:20:EF:48:C9:F0:4A:17:6B:1D:EE:41:B0
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/tcF15tNlSuEg70jJ8EoXax3uQbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.199.0/24
194.231.209.0/24
194.231.213.0/24
194.231.223.0/24
Signature Algorithm: sha256WithRSAEncryption
12:36:e7:9c:d3:d6:5c:b3:95:82:41:03:dd:13:38:b0:fa:a6:
70:e2:b0:45:fa:17:23:ef:13:9c:4e:38:53:ed:a3:19:77:99:
fa:f3:79:0d:d6:13:7a:ac:c7:69:cf:6a:90:a0:b9:67:77:fc:
ea:54:91:bc:ac:03:fd:29:91:db:11:1c:04:77:c7:33:22:46:
43:c2:73:ae:05:da:28:80:04:63:02:f0:3b:42:e2:ee:eb:03:
5c:09:e0:96:da:9a:8c:42:98:c9:97:57:58:1b:6b:ec:1f:f7:
da:4e:38:53:2c:80:47:05:1f:58:68:28:04:da:20:9c:c1:b8:
b3:9e:90:0f:b1:2a:e0:bd:19:29:e6:50:4d:13:f2:01:6b:72:
a7:bc:a3:c5:8e:67:be:29:21:a0:fb:a7:4a:01:b6:e4:89:a9:
fd:cb:78:2d:2f:20:d0:87:ab:37:c8:4e:63:d4:a0:44:67:4a:
00:24:39:bf:21:7b:96:f9:9e:4c:87:9f:24:a4:22:a7:15:f0:
27:47:92:8d:47:6c:37:90:b5:1f:92:f2:c8:ff:93:d4:11:70:
5b:9a:14:be:51:bb:4b:83:9f:4f:d0:95:82:0d:47:e3:f9:49:
43:f3:be:f2:97:cb:37:2a:f0:aa:7f:d2:3d:33:9f:87:69:f4:
b1:75:72:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 18:18:05 2026 by rpki-client