Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/TY7th3tsM46-kxb_gJ_vRbBN9xY.roa
File: TY7th3tsM46-kxb_gJ_vRbBN9xY.roa (raw, json)
Hash identifier: G1fDRBfTWBOMz3twb0Wk9eOM8S1ix/PexYCpAYKkhSY=
Subject key identifier: 4D:8E:ED:87:7B:6C:33:8E:BE:93:16:FF:80:9F:EF:45:B0:4D:F7:16
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368E02083CAD58A60AA0915FA43A456
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/TY7th3tsM46-kxb_gJ_vRbBN9xY.roa
Signing time: Thu 02 Jul 2026 15:18:23 +0000
ROA not before: Thu 02 Jul 2026 15:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213220
IP address blocks: 213.108.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e0:20:83:ca:d5:8a:60:aa:09:15:fa:43:a4:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d8eed877b6c338ebe9316ff809fef45b04df716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7e:ea:a4:e6:0a:b0:64:5c:c9:b0:01:2c:0d:
95:c0:08:9f:de:9a:b2:da:19:cb:9f:80:63:42:fb:
8c:ba:b1:dc:3b:6a:58:13:a5:79:00:de:66:8d:f5:
ab:a9:c3:98:7d:7a:62:a7:b0:9b:ff:21:9d:23:4b:
3f:23:73:60:f4:3e:57:39:c3:63:1c:37:79:48:92:
03:05:e6:cb:90:fd:b4:bf:b4:13:f5:1a:66:68:33:
45:d5:3b:de:22:d9:50:73:ab:11:bf:bf:30:dd:0a:
c3:46:05:73:46:10:6c:4b:bb:ec:da:94:f6:6c:96:
da:1f:fa:31:3c:c2:d8:b2:01:1d:72:25:dc:78:f2:
69:15:69:ff:aa:c9:df:d6:1b:a7:3a:12:78:d5:19:
f0:85:e9:e4:8c:06:66:3e:97:10:a5:ab:80:ab:20:
35:44:1e:0d:ce:58:a1:17:09:a3:75:af:92:f8:a1:
ec:6a:2b:17:e5:3f:b6:7a:ff:23:a4:5c:bd:82:bf:
44:10:75:c5:3d:e3:a2:b0:12:14:00:e3:3e:8f:95:
63:92:d1:b4:a2:f4:b9:cd:9b:1a:7a:45:f9:83:17:
df:84:c9:b0:91:eb:fc:3e:27:61:ca:55:5c:e7:ad:
e3:21:69:48:47:37:46:38:f1:ce:72:d5:10:42:67:
30:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8E:ED:87:7B:6C:33:8E:BE:93:16:FF:80:9F:EF:45:B0:4D:F7:16
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/TY7th3tsM46-kxb_gJ_vRbBN9xY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.108.196.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:69:db:35:94:09:f4:19:6b:73:be:5a:39:c0:a3:3e:af:0b:
e0:a2:6d:6b:6f:a8:a6:2b:5a:61:57:97:a2:4c:04:61:82:a3:
e8:02:11:61:ca:a2:85:59:8b:cb:6e:e0:85:2e:2f:c5:5c:37:
8e:3c:1a:22:84:c6:bb:ff:7b:8e:59:d7:7b:2f:76:05:0b:f5:
80:e2:d8:29:d8:89:6b:aa:fd:1d:34:9e:27:3c:f3:16:cb:5e:
4f:d1:d5:2a:35:62:50:77:cc:4d:b9:7e:1f:a2:bb:84:51:2a:
b9:64:f2:7f:de:b4:85:80:fc:66:25:fa:cd:38:ff:e9:b9:a2:
f5:90:e0:4c:8b:55:85:95:81:fe:f0:96:9a:ae:16:a1:72:ac:
c5:35:a2:74:a4:d5:03:9b:33:f8:b4:b7:2e:37:29:37:c7:46:
a9:63:74:0b:65:be:12:16:11:2a:31:03:b2:8c:03:45:4a:6e:
31:03:93:3a:9e:de:d9:4b:20:4a:bd:2b:98:f9:9e:59:b9:7f:
cb:17:3f:18:68:04:39:7d:2d:1e:14:82:72:c7:03:2b:be:0e:
37:cc:9d:4d:c1:3b:d8:4d:9b:93:45:e5:08:f7:e1:3b:fa:cb:
14:d5:83:e9:48:82:af:43:a8:b4:7c:e7:ca:00:80:31:e9:cf:
c8:86:01:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:39 2026 by rpki-client