Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/TizLz_RtqcQjN9lGzJGaC8FzeDM.roa
File: TizLz_RtqcQjN9lGzJGaC8FzeDM.roa (raw, json)
Hash identifier: uLfdO+lKVjA/KdCMSJZIRciSMOLy+9+itlBgtmnFcVQ=
Subject key identifier: 4E:2C:CB:CF:F4:6D:A9:C4:23:37:D9:46:CC:91:9A:0B:C1:73:78:33
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019F2208B7C114A128397907F1E9ABC4B7A4
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/TizLz_RtqcQjN9lGzJGaC8FzeDM.roa
Signing time: Thu 02 Jul 2026 08:53:44 +0000
ROA not before: Thu 02 Jul 2026 08:53:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402492
IP address blocks: 160.20.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:08:b7:c1:14:a1:28:39:79:07:f1:e9:ab:c4:b7:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jul 2 08:53:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e2ccbcff46da9c42337d946cc919a0bc1737833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0a:09:99:47:e7:cd:80:03:9c:f7:1d:7c:77:
ae:d7:cb:ad:0a:f3:62:79:46:fe:9f:3f:bf:0a:27:
02:23:ca:54:2b:66:89:70:84:e3:23:77:4d:fb:a5:
d7:eb:ee:4a:3d:49:c0:ca:9c:e2:90:60:1d:5e:88:
fd:72:00:12:72:ae:da:f5:e6:2e:e7:f6:34:09:d0:
ac:24:54:a3:69:45:1c:4c:94:04:51:1e:92:49:a0:
bb:6a:ec:21:b1:aa:16:34:73:bc:31:dd:81:04:50:
e5:fb:63:32:5b:59:5c:f3:64:bd:0a:a0:ea:90:02:
6a:03:75:81:33:0e:69:fb:97:81:7b:60:ed:e2:8e:
1f:08:38:f5:10:79:92:d2:d5:f5:c9:82:a3:00:52:
70:08:f9:9e:45:ac:64:c8:8a:46:4b:30:43:c7:76:
a3:13:f4:7e:0e:ba:1c:44:72:6c:08:68:15:6b:70:
2f:2f:31:4a:6a:b4:61:52:e0:d2:d4:a3:95:00:c0:
81:67:0c:7a:e4:7a:3c:36:13:44:0e:af:9e:da:af:
4a:73:4d:3c:46:92:40:1e:10:11:c0:55:db:04:28:
37:67:90:e9:71:2f:1d:ad:39:6f:6b:22:2d:22:04:
c4:a4:bb:60:3e:63:b2:f5:5e:a0:ac:1c:6e:6f:62:
18:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2C:CB:CF:F4:6D:A9:C4:23:37:D9:46:CC:91:9A:0B:C1:73:78:33
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/TizLz_RtqcQjN9lGzJGaC8FzeDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.20.109.0/24
Signature Algorithm: sha256WithRSAEncryption
41:28:7f:06:bc:a3:d6:d4:0d:3c:e8:c1:c9:6d:47:0a:80:21:
ee:c4:7b:6e:13:a6:22:60:30:9f:a7:63:2d:14:d2:da:fe:46:
23:bf:6c:8a:db:84:19:5d:d6:66:d3:c8:6a:e9:d6:48:29:5c:
ca:6b:93:8b:71:5a:53:c7:ce:74:ff:4b:56:8e:51:20:bd:fb:
19:29:10:e1:fd:d7:1b:c1:fc:b1:4d:16:98:f2:09:fd:1e:9f:
48:41:f1:5d:8c:f5:03:46:1c:65:96:fb:aa:ea:1c:df:36:30:
97:2c:23:e7:d5:c8:f9:6a:61:d6:ff:8d:13:36:9b:d9:7a:23:
d3:db:8e:e6:dd:66:1f:03:37:35:d9:14:31:7d:8b:d8:b5:84:
60:cd:3f:79:bd:4c:02:7c:b1:bf:bf:03:f0:b5:25:02:6f:2f:
fb:b3:69:44:31:45:4c:a0:f9:3b:32:a0:29:c3:30:07:11:76:
72:2f:8f:a3:ea:e3:be:a8:88:44:9f:7b:9e:57:fa:c7:7d:56:
f7:ff:ea:43:ed:0e:59:e4:76:77:b2:df:70:6f:0a:73:83:55:
77:61:74:42:8d:9e:af:ef:7b:bb:45:26:00:84:67:6c:9e:6a:
5a:c8:e6:d1:d3:41:b6:55:40:99:0f:51:e5:68:d4:ef:bc:01:
80:d3:6d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:51:31 2026 by rpki-client