Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/TZNSpFdvF_kWdWvSN9xo9E7pUAo.roa
File: TZNSpFdvF_kWdWvSN9xo9E7pUAo.roa (raw, json)
Hash identifier: L4f495xs6bPrffq9bj9nd73qk/To0son5jRvMcRUKJA=
Subject key identifier: 4D:93:52:A4:57:6F:17:F9:16:75:6B:D2:37:DC:68:F4:4E:E9:50:0A
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019F19DF79D8E728D86D0CF6EA8527D6EB41
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/TZNSpFdvF_kWdWvSN9xo9E7pUAo.roa
Signing time: Tue 30 Jun 2026 18:51:43 +0000
ROA not before: Tue 30 Jun 2026 18:51:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219443
IP address blocks: 191.44.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:df:79:d8:e7:28:d8:6d:0c:f6:ea:85:27:d6:eb:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jun 30 18:51:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d9352a4576f17f916756bd237dc68f44ee9500a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1c:60:de:fa:c4:89:98:0b:2d:69:bd:c9:bc:
09:61:ef:75:a9:63:0a:72:ca:b5:7f:19:d0:ac:e8:
9e:b5:83:2b:68:ca:b0:92:03:37:1a:89:e8:2a:4c:
e4:c2:0b:62:90:e8:e6:c2:a5:ad:d6:87:c1:6e:36:
a7:71:ec:3f:6d:19:6e:aa:a0:41:dd:9b:91:2e:11:
c9:5a:d8:47:91:f1:9a:fc:f4:69:b8:0a:31:56:a2:
34:f0:31:3c:6b:62:b9:af:b1:a3:81:f0:9b:06:f9:
0a:6d:8a:87:91:e8:c5:61:3d:10:25:73:11:e0:8b:
ea:10:7c:f0:a9:ca:c0:92:c2:b7:4f:0b:78:b5:37:
32:95:46:2e:05:2b:5b:e7:9f:f3:30:a0:44:5a:e2:
0c:9b:bc:3c:45:cb:e8:c8:73:65:cd:ef:4b:0a:01:
e8:2e:05:24:fd:8c:33:0b:17:bf:c0:a7:4a:64:e7:
66:89:0b:77:db:59:12:e9:b4:1e:1e:ee:0e:5c:f9:
b6:1e:98:3c:c8:10:62:2c:ce:d7:24:f1:48:8b:60:
9a:0e:36:09:61:66:24:77:2b:86:0c:b8:20:5f:b5:
b6:14:86:1f:62:ad:4d:4a:21:34:36:a6:6a:cd:0f:
64:6e:14:6b:7b:af:2c:01:d0:8b:6f:ec:7e:d5:ad:
48:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:93:52:A4:57:6F:17:F9:16:75:6B:D2:37:DC:68:F4:4E:E9:50:0A
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/TZNSpFdvF_kWdWvSN9xo9E7pUAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.92.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:75:06:44:6d:4e:f4:01:ec:f7:ce:88:99:ac:f6:91:78:ac:
fc:07:ac:1b:9b:f9:19:04:d2:8c:50:e3:30:5b:93:d7:10:09:
1f:60:2c:e4:7b:b0:74:35:13:bb:94:1a:23:4d:85:69:71:56:
e4:d1:ba:ea:e5:82:57:ae:6b:fc:b2:c5:15:8c:e5:54:c6:d8:
0c:2e:11:c8:70:4a:2a:ff:8b:6d:bf:a5:47:bf:ec:b3:ea:26:
7f:c0:09:c0:b4:85:e9:c6:f5:1e:a5:d4:d9:29:d4:d2:d6:b8:
f1:f5:12:6a:83:7f:f0:62:03:7e:78:1c:1f:dd:89:98:0e:69:
46:5d:b6:2e:d4:9f:95:08:aa:69:6c:cb:dc:c5:41:10:68:9d:
83:a0:96:f7:5d:31:bb:cd:ec:82:78:65:12:9d:02:34:6b:79:
f7:33:39:61:67:83:7c:6b:03:5e:c4:d3:83:fc:68:82:0e:9d:
45:03:07:d2:16:c5:e3:f4:a6:2a:c1:42:10:ad:91:10:7b:ab:
97:4e:6b:57:2a:15:eb:24:52:ac:a4:bf:e1:47:eb:9b:27:73:
eb:68:69:3e:b0:10:83:8d:2b:57:d5:47:bf:d1:13:9c:1c:18:
28:29:18:f9:a2:76:b7:12:d0:9d:32:43:1c:16:11:3f:5e:64:
c1:2f:c1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:44:29 2026 by rpki-client