Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/TDSIuL-UCZDNweCSbeoQaq_Kz94.roa
File: TDSIuL-UCZDNweCSbeoQaq_Kz94.roa (raw, json)
Hash identifier: xmfP7+f8gMkStgz64Ovg93ThSGH8dnAhDslP+tZj6oY=
Subject key identifier: 4C:34:88:B8:BF:94:09:90:CD:C1:E0:92:6D:EA:10:6A:AF:CA:CF:DE
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 01A0E1BFBCBE114FA8AD8540E3242041B2BF
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/TDSIuL-UCZDNweCSbeoQaq_Kz94.roa
Signing time: Sun 27 Sep 2026 07:23:54 +0000
ROA not before: Sun 27 Sep 2026 07:23:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47919
IP address blocks: 195.114.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:bf:bc:be:11:4f:a8:ad:85:40:e3:24:20:41:b2:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Sep 27 07:23:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c3488b8bf940990cdc1e0926dea106aafcacfde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c6:5c:96:dd:58:13:ea:ea:af:d7:ca:b1:a1:
72:19:61:1b:1f:1c:d4:fb:fa:80:a5:18:11:18:d2:
7e:ea:7f:3f:50:6c:27:19:0f:03:07:a3:86:86:3f:
56:12:0f:14:8e:d6:59:5d:f2:9e:0d:1b:07:c0:6f:
23:17:b7:bb:2d:7c:bc:42:ed:66:98:8a:bd:9b:c0:
85:e6:e8:74:a9:71:73:aa:36:3c:57:11:01:a0:74:
54:27:0a:35:23:db:6b:76:8a:1b:e6:e0:1e:57:8c:
8d:77:60:5b:1f:a9:5e:bc:8f:a3:c7:51:70:57:10:
c1:ac:49:78:58:9b:60:3e:47:00:6e:ff:9d:e5:62:
41:4a:5d:4c:c8:5b:76:9f:81:20:33:ab:e9:0b:1e:
34:18:d5:a2:77:4b:cc:87:f5:df:0e:d2:b1:ce:3b:
42:f7:2b:08:cb:92:62:28:8e:96:ca:a7:e5:7b:ce:
66:55:b3:be:fa:4e:ee:63:61:3d:e6:38:ef:fd:c1:
5a:b5:61:49:99:fe:8a:cf:9e:f6:15:1b:45:2d:a8:
48:da:28:d7:a4:92:21:12:7b:d8:d3:9f:74:4f:f0:
95:8c:ec:59:08:4f:1c:6b:55:24:91:88:ea:42:5d:
e1:6f:81:48:ed:06:69:4c:00:38:8f:7b:c2:2c:1a:
c2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:34:88:B8:BF:94:09:90:CD:C1:E0:92:6D:EA:10:6A:AF:CA:CF:DE
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/TDSIuL-UCZDNweCSbeoQaq_Kz94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.132.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:c9:56:a4:f6:e4:04:31:fe:89:1a:c8:f9:7b:99:55:9c:7d:
78:2f:ae:e2:a7:93:e9:3a:d1:bd:2d:ab:aa:41:41:4c:8c:8f:
04:bb:c2:2e:91:9c:86:6f:a2:3a:30:12:7e:32:26:64:5b:ba:
41:35:bf:96:b2:01:1b:45:e4:87:9b:9c:90:60:85:c9:c8:b7:
ca:05:60:77:b4:07:0f:26:50:63:ea:cd:a3:93:20:1a:ae:75:
fd:bf:f3:a3:c2:16:54:63:bd:a0:f4:aa:5f:e3:1b:66:a2:71:
9a:de:6e:83:81:26:77:38:e5:2c:56:68:6e:7e:82:e6:40:63:
b4:93:2b:12:9f:cb:43:e7:c3:1d:67:99:2f:8d:51:f0:ea:30:
f6:c3:e6:fb:1a:ea:18:60:4e:ca:d4:a8:28:b0:eb:3b:18:42:
54:58:d4:91:ed:22:33:80:0b:e3:40:26:4f:1c:ab:41:a1:b9:
8e:00:32:ca:42:f2:07:c5:f9:d1:49:25:87:0e:1e:46:02:d9:
f5:d2:6c:80:0b:94:8e:0c:7f:5d:42:0b:05:4a:31:cd:2c:ce:
6b:72:f0:98:d3:28:6f:0e:af:8e:ce:e6:fa:67:f2:c7:d1:2d:
63:77:9c:5c:17:c7:87:52:97:b1:3f:bf:03:e8:96:b9:aa:89:
cc:27:81:c8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDhv7y+EU+orYVA4yQgQbK/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYzhkYmU1MjA4M2FkMzM1YzlmMWZkZTYwMTZlYzhiNDky
OTMxNDAwHhcNMjYwOTI3MDcyMzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzM0ODhiOGJmOTQwOTkwY2RjMWUwOTI2ZGVhMTA2YWFmY2FjZmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MZclt1YE+rqr9fKsaFyGWEbHxzU
+/qApRgRGNJ+6n8/UGwnGQ8DB6OGhj9WEg8UjtZZXfKeDRsHwG8jF7e7LXy8Qu1m
mIq9m8CF5uh0qXFzqjY8VxEBoHRUJwo1I9trdoob5uAeV4yNd2BbH6levI+jx1Fw
VxDBrEl4WJtgPkcAbv+d5WJBSl1MyFt2n4EgM6vpCx40GNWid0vMh/XfDtKxzjtC
9ysIy5JiKI6Wyqfle85mVbO++k7uY2E95jjv/cFatWFJmf6Kz572FRtFLahI2ijX
pJIhEnvY0590T/CVjOxZCE8ca1UkkYjqQl3hb4FI7QZpTAA4j3vCLBrCYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEw0iLi/lAmQzcHgkm3qEGqvys/eMB8GA1UdIwQY
MBaAFKvI2+Ugg60zXJ8f3mAW7ItJKTFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2Qt
MzA1NmFmOWEzMzVlLzEvVERTSXVMLVVDWkROd2VDU2Jlb1FhcV9Lejk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2QtMzA1NmFmOWEzMzVl
LzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw3KEMA0G
CSqGSIb3DQEBCwUAA4IBAQAPyVak9uQEMf6JGsj5e5lVnH14L67ip5PpOtG9Lauq
QUFMjI8Eu8IukZyGb6I6MBJ+MiZkW7pBNb+WsgEbReSHm5yQYIXJyLfKBWB3tAcP
JlBj6s2jkyAarnX9v/OjwhZUY72g9Kpf4xtmonGa3m6DgSZ3OOUsVmhufoLmQGO0
kysSn8tD58MdZ5kvjVHw6jD2w+b7GuoYYE7K1KgosOs7GEJUWNSR7SIzgAvjQCZP
HKtBobmOADLKQvIHxfnRSSWHDh5GAtn10myAC5SODH9dQgsFSjHNLM5rcvCY0yhv
Dq+Ozub6Z/LH0S1jd5xcF8eHUpexP78D6Ja5qonMJ4HI
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:11:56 2026 by rpki-client