Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/TeSgwnVmck5qAeU0xaP5HSjpKXc.roa
File: TeSgwnVmck5qAeU0xaP5HSjpKXc.roa (raw, json)
Hash identifier: SwYhhZ9tOxdiW0bMRJ4iImJVu2d8XXuxuWkpnpkdxQc=
Subject key identifier: 4D:E4:A0:C2:75:66:72:4E:6A:01:E5:34:C5:A3:F9:1D:28:E9:29:77
Certificate issuer: /CN=87785594824d5b1a5b245ff8737e08aeaf47f3e8
Certificate serial: 019F2368AA4ABE970B41F6DCDBCE40B4E97C
Authority key identifier: 87:78:55:94:82:4D:5B:1A:5B:24:5F:F8:73:7E:08:AE:AF:47:F3:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3hVlIJNWxpbJF_4c34Irq9H8-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/TeSgwnVmck5qAeU0xaP5HSjpKXc.roa
Signing time: Thu 02 Jul 2026 15:18:09 +0000
ROA not before: Thu 02 Jul 2026 15:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 31.88.0.0/15 maxlen: 24
218.254.0.0/16 maxlen: 24
2a14:f180::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/h3hVlIJNWxpbJF_4c34Irq9H8-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/h3hVlIJNWxpbJF_4c34Irq9H8-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3hVlIJNWxpbJF_4c34Irq9H8-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:aa:4a:be:97:0b:41:f6:dc:db:ce:40:b4:e9:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87785594824d5b1a5b245ff8737e08aeaf47f3e8
Validity
Not Before: Jul 2 15:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4de4a0c27566724e6a01e534c5a3f91d28e92977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e9:f8:d8:82:6e:a3:df:32:ce:4b:d4:83:78:
67:b1:0c:99:80:22:7e:ed:b5:14:2f:4e:04:1f:44:
0f:b5:03:01:2e:7a:6f:7a:08:f9:fd:e9:9d:58:16:
42:af:60:ff:dc:eb:c4:05:e2:85:bc:e0:9f:cb:30:
8e:bf:3e:a8:3f:90:f0:a4:51:6a:11:54:fb:2c:1e:
af:68:e6:56:54:4e:24:45:50:dd:72:be:0a:f9:46:
78:c3:53:17:e2:f8:1e:28:77:6b:17:d1:b8:cd:65:
a6:6e:2c:7f:dd:07:c7:e6:10:73:ee:d8:dd:41:93:
c0:da:f4:ff:67:17:ba:ed:a5:96:b1:f5:bd:c4:e4:
94:b1:45:e6:d2:5d:84:2c:d3:9f:43:8e:ec:d2:15:
57:e9:15:6f:6f:f5:a2:2c:fa:ef:4e:ef:61:1f:65:
ad:23:09:32:42:bd:52:4a:76:a7:d7:d2:23:24:50:
8e:6a:19:80:46:a5:f1:4f:ed:42:0e:47:01:97:55:
64:fc:b5:41:de:9d:a0:63:ca:8f:b1:bb:35:4e:c6:
91:16:7e:b0:f6:0d:d0:08:5f:6b:e9:93:ad:0d:0f:
8a:fc:36:0a:8a:c9:44:1d:83:cb:9e:ef:5b:1b:f1:
a2:d0:69:d0:e3:88:67:5b:e2:50:da:5a:25:1e:48:
43:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E4:A0:C2:75:66:72:4E:6A:01:E5:34:C5:A3:F9:1D:28:E9:29:77
X509v3 Authority Key Identifier:
keyid:87:78:55:94:82:4D:5B:1A:5B:24:5F:F8:73:7E:08:AE:AF:47:F3:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3hVlIJNWxpbJF_4c34Irq9H8-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/TeSgwnVmck5qAeU0xaP5HSjpKXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/h3hVlIJNWxpbJF_4c34Irq9H8-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.88.0.0/15
218.254.0.0/16
IPv6:
2a14:f180::/29
Signature Algorithm: sha256WithRSAEncryption
77:ac:48:c8:79:4b:72:7b:0d:24:0a:e0:6c:14:30:05:be:fc:
17:99:95:74:8d:db:62:13:59:4a:08:75:18:4b:69:7c:b1:96:
8c:66:90:70:21:a4:2e:0d:b3:d3:95:76:0a:b5:ff:e6:89:d4:
4e:9d:81:a1:91:64:bf:62:03:98:5c:f4:39:2d:9f:35:95:b1:
7b:5c:59:b6:ca:e6:01:8c:83:8d:b0:0f:a6:29:f8:a9:92:c6:
3a:62:ca:86:dd:de:29:90:20:c7:06:ce:5c:01:99:c1:95:7d:
c0:32:c7:6c:d1:fc:e6:72:68:0b:b0:ea:ac:b5:91:55:8f:7d:
0b:fa:4a:0a:a0:62:cd:9d:2d:db:80:c4:48:f9:94:f4:73:f9:
17:ef:df:77:ed:a9:05:72:d6:b5:74:5a:a0:23:2d:24:98:67:
09:32:02:cf:9b:bb:04:af:03:5d:ef:a7:11:ff:d3:18:78:3f:
44:de:53:a9:2e:5a:b6:cc:bd:9c:50:41:77:0b:50:af:64:92:
41:9a:87:ad:37:78:e5:19:20:07:73:ac:92:f3:7c:74:f0:dc:
fc:0f:49:83:47:f8:5c:e9:b7:d4:11:65:e3:46:c2:48:13:a4:
d9:b7:b0:d2:c7:e7:ce:a3:8b:51:5f:fe:35:53:3b:36:cb:32:
23:f1:4c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:59:13 2026 by rpki-client