Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/TbZ4UxM472uZwvxUqFwV48R32GU.roa
File: TbZ4UxM472uZwvxUqFwV48R32GU.roa (raw, json)
Hash identifier: +tVWlpFmpYRQxsehBjuSGd5DAH2rij5I3LuhqNxfiC0=
Subject key identifier: 4D:B6:78:53:13:38:EF:6B:99:C2:FC:54:A8:5C:15:E3:C4:77:D8:65
Certificate issuer: /CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Certificate serial: 019F7508BB19100E9AF1689543D69A07638F
Authority key identifier: 4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/TbZ4UxM472uZwvxUqFwV48R32GU.roa
Signing time: Sat 18 Jul 2026 11:42:14 +0000
ROA not before: Sat 18 Jul 2026 11:42:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219207
IP address blocks: 2a07:e000:20::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:75:08:bb:19:10:0e:9a:f1:68:95:43:d6:9a:07:63:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Validity
Not Before: Jul 18 11:42:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4db678531338ef6b99c2fc54a85c15e3c477d865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9d:87:a5:c0:35:58:13:19:b4:e5:b5:52:44:
ba:16:be:99:a8:cf:7a:83:35:ac:37:65:b7:87:90:
8d:9a:c5:4c:e1:d1:f7:89:b8:46:33:91:52:92:72:
44:ae:4f:75:c3:4f:97:84:21:da:3e:f0:32:0e:a2:
ae:d3:af:56:bf:10:01:ca:69:4f:2a:e2:35:6a:40:
80:60:26:12:0e:58:ae:31:02:df:59:d4:fc:2e:1e:
4e:39:48:b8:a5:b2:ba:22:35:fd:e8:74:ee:ce:ab:
1c:63:4e:ee:56:dd:12:d0:de:09:01:19:39:ec:63:
26:30:5f:6e:be:c4:78:10:e7:9a:c6:eb:ba:0e:bd:
58:4d:6d:88:b4:1c:99:04:47:13:4e:4d:59:d2:a9:
de:5b:b5:20:8e:1c:a1:a3:2e:3a:28:da:f7:ff:01:
24:09:97:61:f7:48:52:9a:cd:c6:6b:76:81:7a:af:
ef:25:a0:23:0e:a3:9f:9e:10:d0:c0:1a:1c:a1:77:
24:4f:86:9c:35:52:c7:8a:ad:9c:13:b5:47:c8:44:
0b:25:09:df:e0:f1:dc:31:51:42:80:f5:74:26:d9:
d1:dc:34:11:c3:cc:41:10:bf:72:fe:1b:3c:5a:05:
c8:39:0d:af:59:6e:b8:cb:2e:6a:cf:58:78:ed:ea:
70:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B6:78:53:13:38:EF:6B:99:C2:FC:54:A8:5C:15:E3:C4:77:D8:65
X509v3 Authority Key Identifier:
keyid:4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/TbZ4UxM472uZwvxUqFwV48R32GU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:e000:20::/44
Signature Algorithm: sha256WithRSAEncryption
0a:6f:9a:d9:7c:2d:de:7a:80:33:85:0e:82:c0:74:b0:55:3d:
1f:d1:24:20:8f:9f:40:4e:4d:12:fa:94:c5:61:44:03:49:1c:
f6:27:c8:5f:f6:00:ce:2f:d6:3a:c7:46:a2:ed:48:f0:44:53:
5c:9c:6d:87:b5:6a:38:2f:e8:4f:d5:f7:88:af:40:60:f4:e5:
1c:c4:85:6c:f4:df:4e:72:a5:d1:e1:1e:c6:d1:a7:7d:e1:cd:
26:76:ac:e2:5f:82:f1:4b:f9:59:39:65:88:63:f3:6d:b8:f0:
2b:f2:69:51:c8:cd:95:7c:0f:e4:36:fe:a2:e3:23:6d:59:94:
04:a8:3d:1b:b0:bc:bd:b4:60:6d:a2:eb:07:3e:59:e9:ef:84:
a6:00:4f:bf:c8:c4:ac:b5:5f:e6:80:3b:45:04:24:38:a5:b0:
f3:07:eb:15:4b:45:1f:34:fb:70:02:e9:fb:52:8d:30:69:e5:
b6:59:c1:26:11:fe:8c:03:b7:0e:89:37:38:78:55:17:81:ac:
4e:07:32:68:38:0f:cf:c0:56:5f:bd:04:b8:78:72:6f:f4:78:
35:61:67:c5:89:5c:78:b9:51:00:72:5a:09:c5:bb:61:73:dd:
ca:38:37:43:47:fb:88:05:c2:1e:62:c6:66:1b:2f:d3:e3:72:
b2:53:87:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:57:01 2026 by rpki-client