Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/tfMkSWSt2dKI6Vsrm-5ySEcm6Co.roa
File: tfMkSWSt2dKI6Vsrm-5ySEcm6Co.roa (raw, json)
Hash identifier: QBeXCos5KhryvOz3kxhZOGmIsI7fgrYyECFGEF0xZvU=
Subject key identifier: B5:F3:24:49:64:AD:D9:D2:88:E9:5B:2B:9B:EE:72:48:47:26:E8:2A
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A1082FC71072DC5519345A6A7CA0C63B0A
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/tfMkSWSt2dKI6Vsrm-5ySEcm6Co.roa
Signing time: Sun 04 Oct 2026 18:31:51 +0000
ROA not before: Sun 04 Oct 2026 18:31:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219427
IP address blocks: 82.109.195.0/24 maxlen: 24
82.110.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:2f:c7:10:72:dc:55:19:34:5a:6a:7c:a0:c6:3b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 4 18:31:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5f3244964add9d288e95b2b9bee72484726e82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6e:08:a7:1b:e9:0a:2b:62:34:53:e1:df:40:
5c:14:ed:e5:19:30:6f:d2:59:b8:7f:0a:ab:c4:f5:
1b:01:92:ff:76:07:bd:5e:db:04:e1:88:01:12:12:
d6:3e:1f:14:34:77:6f:70:30:b4:70:e9:82:a3:aa:
3d:f9:d6:9c:71:45:12:fa:3c:22:44:cb:26:dc:27:
c9:07:8a:d9:6b:b5:ce:1e:88:3e:ec:67:9c:af:15:
c8:e6:ec:dd:87:a7:dc:fa:64:fe:81:ff:ba:e5:3d:
4b:e3:72:14:99:70:8e:4c:78:6c:45:66:32:c3:6e:
11:02:ad:b4:b2:12:de:7d:9f:cd:f9:2c:e3:34:61:
d7:6e:35:13:64:39:4c:38:96:b7:89:99:a7:10:75:
f5:7f:d2:a9:53:d0:67:6b:41:3c:81:60:bd:ae:2b:
b2:54:79:68:81:f8:b3:71:e4:da:b7:0a:09:37:e8:
dd:13:be:82:85:a3:ed:21:95:a8:4f:00:48:19:b1:
89:76:cb:ac:d5:ff:31:9d:9a:6f:62:ab:b8:5a:54:
40:e2:c9:0a:95:28:9a:f7:92:2b:66:9f:a6:38:56:
55:30:ca:07:1f:5c:4a:b7:43:dc:4c:71:24:99:bb:
cf:26:c3:b6:cc:79:14:86:1d:3b:4d:4f:e8:ad:dc:
4c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F3:24:49:64:AD:D9:D2:88:E9:5B:2B:9B:EE:72:48:47:26:E8:2A
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/tfMkSWSt2dKI6Vsrm-5ySEcm6Co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.195.0/24
82.110.51.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:44:39:f5:cc:86:16:bf:48:ad:53:a2:c8:3e:fc:99:82:e3:
cf:1e:a2:55:e8:8a:74:ee:f9:dc:b4:23:06:d8:42:ec:bd:f3:
26:08:8f:d2:40:3b:0d:4e:79:c7:3d:10:1f:47:6d:ee:4d:58:
34:60:ce:e0:31:81:91:a7:7f:41:07:2a:d7:90:d8:89:59:ec:
ac:86:bc:36:43:f3:d2:4a:6a:39:d9:c6:d3:67:90:ac:8a:75:
49:8e:b6:3a:f4:e2:c6:b0:b8:44:87:b1:5f:a1:95:7a:fd:6a:
d0:ed:22:2d:05:f0:53:9f:e6:e9:bf:00:0d:b6:3d:5d:a3:46:
b6:e7:b7:c2:15:c2:cc:66:a6:32:63:a6:66:22:fa:22:6d:a7:
67:96:23:4d:1b:90:f6:42:6b:88:01:06:03:ab:f2:36:04:a0:
9e:64:84:58:67:00:49:ef:47:88:d4:55:47:a5:3c:fb:8f:91:
bd:55:35:18:ba:0a:3e:8a:83:9d:d8:ec:73:da:79:ea:28:c3:
8d:b9:e3:4b:39:42:50:fa:d8:6b:f2:00:4e:b6:d0:e4:5b:65:
b9:f6:e2:4d:f6:9d:f2:6c:20:12:55:3b:06:16:ae:07:d5:72:
74:2a:93:23:7c:d7:3c:af:7a:cf:01:36:be:be:61:5d:58:25:
3b:a6:20:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:51:08 2026 by rpki-client