Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/TdqSn5WT6bBIWHwKcBQStfLEQ8c.roa
File: TdqSn5WT6bBIWHwKcBQStfLEQ8c.roa (raw, json)
Hash identifier: TGw0y4tzt3XMgXJsUXMt46Gd2692xH2itYwdSwfZDS4=
Subject key identifier: 4D:DA:92:9F:95:93:E9:B0:48:58:7C:0A:70:14:12:B5:F2:C4:43:C7
Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414
Certificate serial: 01A001A1FA700F57F9BBFF6FC905694DD73F
Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/TdqSn5WT6bBIWHwKcBQStfLEQ8c.roa
Signing time: Fri 14 Aug 2026 18:56:27 +0000
ROA not before: Fri 14 Aug 2026 18:56:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58285
IP address blocks: 2a05:f680::/29 maxlen: 64
2a05:f685::/32 maxlen: 64
2a12:6d00::/29 maxlen: 64
2a12:7c80::/29 maxlen: 64
2a12:b080::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a1:fa:70:0f:57:f9:bb:ff:6f:c9:05:69:4d:d7:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414
Validity
Not Before: Aug 14 18:56:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4dda929f9593e9b048587c0a701412b5f2c443c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:60:6b:f8:7c:29:d8:b0:57:42:86:18:e2:b2:
fa:01:a8:c2:71:37:a3:22:d8:32:65:a3:69:fc:11:
4f:69:aa:e7:8a:89:29:54:ed:a1:3f:ff:72:8a:02:
09:b4:4a:5a:80:e5:dc:36:4a:ac:62:c7:00:9b:8b:
f4:67:30:5e:2e:0c:13:e7:01:ae:e0:f7:44:cf:bd:
d1:e8:04:71:b2:48:58:df:52:b4:a7:21:f2:e2:fd:
11:04:27:b8:0b:b3:a1:f9:d0:f9:72:ba:9c:74:29:
58:7b:d6:a7:ef:b9:52:97:a4:e5:51:9c:71:2d:ba:
08:8f:97:2c:f8:fe:02:fc:26:43:2b:8b:9d:f6:92:
00:3e:6c:ec:48:40:e8:2f:58:7c:11:31:84:03:c6:
c7:b6:bd:fb:33:c5:8d:24:22:cf:a4:99:d4:10:26:
b7:70:2e:a2:0f:4d:ad:be:4b:4c:53:f2:ef:33:44:
66:0e:c6:25:c8:a0:51:bb:e7:3e:45:af:af:6c:cf:
22:0a:11:a1:15:31:19:e4:9b:b6:3c:9f:cf:91:23:
ce:d0:7f:82:23:bb:09:2d:91:31:0f:ec:c8:f0:f4:
eb:84:9e:f3:70:a7:56:c1:d4:92:04:0e:f5:11:92:
9d:34:6d:49:85:1e:f8:ba:1f:91:ba:b6:f8:a5:f0:
8c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:DA:92:9F:95:93:E9:B0:48:58:7C:0A:70:14:12:B5:F2:C4:43:C7
X509v3 Authority Key Identifier:
keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/TdqSn5WT6bBIWHwKcBQStfLEQ8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:f680::/29
2a12:6d00::/29
2a12:7c80::/29
2a12:b080::/29
Signature Algorithm: sha256WithRSAEncryption
5a:b4:f9:b3:0c:66:6d:7c:56:26:bf:eb:7c:82:4a:9d:8c:fe:
37:6b:96:25:f5:8e:ea:a1:4d:66:f0:4e:af:37:a3:de:17:c6:
09:a1:83:06:3e:9b:e2:86:75:0c:8a:fd:23:0d:ab:2e:6f:a8:
56:95:1b:d8:2d:42:c5:f6:d8:16:0f:23:1d:57:c6:66:1a:42:
94:1b:95:07:b5:6c:e6:bb:c8:9c:d6:bc:ca:09:87:ca:ff:43:
d9:a3:12:36:c3:43:24:8c:81:f0:dd:0f:53:be:d4:a9:c3:ca:
ec:41:8b:5a:62:d1:c4:20:2e:d5:51:55:00:2f:5d:ac:ac:39:
ca:7f:78:f6:85:f0:a4:8f:36:f4:ce:20:dc:b4:9d:8e:f0:32:
7c:1b:7b:bc:0b:40:ef:00:26:88:3a:a7:49:d0:d6:13:ec:fd:
f8:f4:3e:99:24:b8:59:48:47:cb:30:23:ad:96:bc:35:6f:87:
32:81:c8:ab:2b:a0:77:c2:01:06:72:c9:3a:95:40:36:ed:96:
d7:9f:ce:17:91:86:a0:6f:32:f5:b7:3b:d5:b9:28:51:c1:6d:
c1:4d:1d:d4:4b:08:9f:f0:b0:be:7c:54:d7:68:3f:89:48:93:
ff:2b:66:d4:43:22:21:5e:d1:51:3b:8e:1e:cd:c0:f4:6b:32:
17:e0:a7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:24:12 2026 by rpki-client