Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/tjrZtcYd3WCDcECvuc602OdRVfU.roa
File: tjrZtcYd3WCDcECvuc602OdRVfU.roa (raw, json)
Hash identifier: 32OjWovYfhiPA1f94j1L1UOxJ1y/e1Gns2retSrKm3s=
Subject key identifier: B6:3A:D9:B5:C6:1D:DD:60:83:70:40:AF:B9:CE:B4:D8:E7:51:55:F5
Certificate issuer: /CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Certificate serial: 019F2368EC98996821020D7D03457E28BD29
Authority key identifier: F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/tjrZtcYd3WCDcECvuc602OdRVfU.roa
Signing time: Thu 02 Jul 2026 15:18:26 +0000
ROA not before: Thu 02 Jul 2026 15:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42117
IP address blocks: 77.233.96.0/19 maxlen: 19
95.175.160.0/19 maxlen: 19
159.20.8.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ec:98:99:68:21:02:0d:7d:03:45:7e:28:bd:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Validity
Not Before: Jul 2 15:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b63ad9b5c61ddd60837040afb9ceb4d8e75155f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:65:5d:3e:57:4b:82:a9:75:e6:bf:5e:46:04:
80:f7:99:dc:1f:ce:07:f5:a4:43:ea:63:e3:24:a7:
fd:8d:dd:b8:b6:cd:b0:db:4f:52:15:68:1f:5e:48:
13:92:eb:07:a6:50:9b:52:14:a5:df:88:f9:fc:41:
53:0d:e9:6d:8f:ad:79:a3:55:6a:68:1b:f9:5c:f8:
99:df:22:44:87:b5:82:c4:23:cd:f2:e8:af:e7:ad:
ef:14:99:c8:a0:a5:7e:1a:49:f4:b1:4a:10:a6:9b:
fe:ae:bd:e8:99:77:b8:6f:6e:0c:03:59:b4:8e:a2:
55:a7:82:8a:8d:5a:ee:3f:c0:02:de:b0:2d:a3:8e:
58:d2:3a:62:a3:e4:e3:28:4b:df:49:b5:6f:37:12:
d0:80:ca:bb:f9:93:85:3f:ee:78:2e:fc:6e:6b:97:
62:6c:09:1e:42:fc:4c:09:4b:5a:cc:b2:07:02:4a:
3e:b5:65:03:4e:11:fc:7a:8e:24:38:e3:d6:3d:e1:
30:f2:d9:04:1e:93:bb:a3:13:35:04:18:34:d0:26:
71:e4:3c:8d:74:cd:cb:2f:a5:4b:11:b1:69:1f:e1:
8e:cb:24:64:96:ce:28:2b:c5:48:2e:b2:16:af:ef:
a6:69:c4:59:aa:a3:a8:a4:8e:fb:cb:6f:ff:c8:db:
d7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3A:D9:B5:C6:1D:DD:60:83:70:40:AF:B9:CE:B4:D8:E7:51:55:F5
X509v3 Authority Key Identifier:
keyid:F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/tjrZtcYd3WCDcECvuc602OdRVfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.233.96.0/19
95.175.160.0/19
159.20.8.0/21
Signature Algorithm: sha256WithRSAEncryption
53:f4:ef:96:40:b1:78:d2:8a:36:64:21:a9:37:d4:57:46:0e:
0f:28:9e:ea:e9:57:dd:4b:ed:14:11:94:d6:f5:49:3a:ea:ba:
cd:ad:14:1b:b0:cf:c1:83:fc:f3:5c:8a:62:78:05:a9:f4:8b:
76:fe:dd:1f:4e:54:3e:a2:85:c9:e8:8d:af:59:f6:a7:27:69:
96:e1:e7:c4:24:22:51:2b:3b:e0:7b:c9:0a:7f:bd:a8:db:17:
f9:00:a0:29:a7:83:e3:5a:00:15:09:3a:48:ea:17:bf:54:b8:
bd:28:ec:2a:6f:a6:cd:92:01:a4:1f:11:61:68:88:9e:33:85:
df:b4:ef:f8:fc:5b:4b:49:34:10:cb:bc:49:2d:12:06:23:e5:
56:b5:01:2b:bc:17:98:1f:7c:08:b4:61:8d:ac:95:05:92:f5:
87:31:5c:e8:d0:82:de:e1:e7:28:24:d5:e9:21:fa:57:72:a7:
7e:c2:53:18:4a:bc:c1:7b:c3:02:56:8a:34:02:e8:e6:83:d3:
25:e5:75:05:c1:0d:88:a9:ff:81:e8:27:d3:94:d1:d6:dd:82:
fc:bb:a9:57:89:26:37:56:55:cc:13:be:12:cc:8b:71:22:a0:
08:0f:41:56:c3:2e:a3:17:6f:22:a9:4b:c1:d3:6d:92:c0:a5:
a3:54:4c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:34 2026 by rpki-client