Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/TFWQMBrTQ_CUA4Cak7djWi9jRiA.roa
File: TFWQMBrTQ_CUA4Cak7djWi9jRiA.roa (raw, json)
Hash identifier: iHPrQntxBQ8Yfodv7+5kSSwaLAG1oIn9WUEjo4EhvoI=
Subject key identifier: 4C:55:90:30:1A:D3:43:F0:94:03:80:9A:93:B7:63:5A:2F:63:46:20
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01A09FE1245F769977EA17ABE0ACCC547CA7
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/TFWQMBrTQ_CUA4Cak7djWi9jRiA.roa
Signing time: Mon 14 Sep 2026 12:25:27 +0000
ROA not before: Mon 14 Sep 2026 12:25:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399989
IP address blocks: 109.111.60.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:e1:24:5f:76:99:77:ea:17:ab:e0:ac:cc:54:7c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Sep 14 12:25:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c5590301ad343f09403809a93b7635a2f634620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6c:9f:f4:d9:af:2d:e2:58:43:f0:ac:75:e7:
aa:c3:41:67:12:0a:ca:24:1e:a3:05:90:59:a2:78:
dd:8b:94:77:70:67:74:65:a0:f1:39:9e:8e:fa:56:
19:18:06:9b:60:58:de:3f:2b:a4:35:3a:f8:68:99:
01:b2:3a:4d:38:19:60:eb:86:1f:d1:3a:88:f5:b2:
ec:dd:7f:5a:8d:38:63:a7:4a:da:7e:c4:67:3a:13:
5a:4b:ff:eb:5b:08:c4:4c:38:4c:56:79:20:7d:60:
5e:c8:0b:cf:20:59:cc:18:02:40:24:f3:8e:39:52:
e1:f0:50:41:24:cb:40:bc:9b:76:6e:f1:4e:fb:80:
97:87:c6:8c:21:92:87:cf:ef:4f:2a:22:e1:c8:ce:
c9:ab:e9:ec:ac:f5:be:f0:f2:66:2f:5e:49:35:e1:
aa:aa:f9:25:e4:cd:92:d0:72:5a:e2:9b:c4:c7:32:
b7:3f:b3:f1:33:11:ad:cf:10:ff:0b:e7:3d:8e:5f:
0b:ec:b7:c5:cc:59:73:9d:d5:b4:c0:c8:27:67:08:
93:73:db:09:f2:80:54:3e:0c:65:04:12:e9:ce:96:
4f:c1:89:8a:c7:a2:10:a4:18:62:c3:d6:25:ae:85:
6d:2f:ec:1b:ab:71:42:0b:24:b4:05:55:08:fb:4a:
29:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:55:90:30:1A:D3:43:F0:94:03:80:9A:93:B7:63:5A:2F:63:46:20
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/TFWQMBrTQ_CUA4Cak7djWi9jRiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.60.0/22
Signature Algorithm: sha256WithRSAEncryption
41:b9:69:bd:76:6d:f9:e0:e6:d9:02:6d:41:85:21:9d:04:62:
71:73:ec:0c:45:63:7a:d2:f7:5f:d2:36:43:d2:5f:35:7a:d2:
33:0e:05:80:16:be:24:a1:a4:87:cd:f2:1d:31:c3:d8:fa:41:
e2:11:0e:e7:e3:d5:8c:22:03:8c:46:d4:98:bd:7b:11:c1:0e:
17:84:61:c9:ab:5a:7b:30:11:f2:f7:83:37:d5:07:0f:1a:85:
6d:2f:b7:7f:16:7f:87:6b:8b:b9:8c:18:c5:d5:16:d0:68:33:
f2:e7:8e:39:31:b4:b1:2b:4a:8b:44:59:e0:d0:26:a1:28:b4:
92:b1:69:3d:72:bd:6b:52:5b:d3:39:a2:d0:7b:98:c6:d2:c7:
3e:16:bc:d8:0e:8a:23:24:67:0d:b7:c6:6d:c6:74:fb:0d:d7:
08:79:95:2f:00:30:9c:5e:6e:e2:68:64:f3:5a:c2:4e:80:f7:
04:b7:b0:89:7d:4e:ce:2d:f3:30:a5:8a:05:99:af:8b:6e:0b:
fc:fc:de:16:30:72:58:8b:bf:e1:5f:5f:d9:61:85:f5:a1:5f:
91:24:0b:80:cc:c6:aa:5e:ad:59:26:d5:41:df:f7:4a:f0:99:
5d:45:45:ac:0b:ab:5a:46:3c:72:b5:64:11:d6:f8:7b:30:22:
13:f7:4d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 01:29:52 2026 by rpki-client