Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/TJH7rXFErydexfRL-QsD_cueRP0.roa
File: TJH7rXFErydexfRL-QsD_cueRP0.roa (raw, json)
Hash identifier: /vncITHOlaOinL9o+QNnspukAoGVv247LPURWW+StzU=
Subject key identifier: 4C:91:FB:AD:71:44:AF:27:5E:C5:F4:4B:F9:0B:03:FD:CB:9E:44:FD
Certificate issuer: /CN=5754d19527fd85d0d444acadd44a01655fdc7400
Certificate serial: 019F179ABBE3839E3782AA1351A6A3DB3A83
Authority key identifier: 57:54:D1:95:27:FD:85:D0:D4:44:AC:AD:D4:4A:01:65:5F:DC:74:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1TRlSf9hdDURKyt1EoBZV_cdAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/TJH7rXFErydexfRL-QsD_cueRP0.roa
Signing time: Tue 30 Jun 2026 08:17:24 +0000
ROA not before: Tue 30 Jun 2026 08:17:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 62.69.137.0/24 maxlen: 24
62.69.139.0/24 maxlen: 24
62.69.140.0/24 maxlen: 24
193.219.115.0/24 maxlen: 24
2a00:a640:10a0::/44 maxlen: 48
2a00:a640:20a0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1TRlSf9hdDURKyt1EoBZV_cdAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:9a:bb:e3:83:9e:37:82:aa:13:51:a6:a3:db:3a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5754d19527fd85d0d444acadd44a01655fdc7400
Validity
Not Before: Jun 30 08:17:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c91fbad7144af275ec5f44bf90b03fdcb9e44fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:20:a4:ad:16:98:8e:0c:08:c3:71:2d:0a:d8:
a1:0c:0f:14:0c:2b:46:5a:0c:7d:45:a8:f6:ad:a5:
fb:48:d0:6b:7c:27:a0:c9:a3:02:e7:26:f7:74:f1:
b1:ef:2b:11:7f:cc:51:a3:8d:0c:1d:54:71:7a:08:
df:6d:cb:7b:5d:65:c3:29:59:c7:b0:9a:1e:b7:52:
a3:cf:99:b6:5c:b8:87:76:d8:b8:1f:ae:45:ba:16:
76:e7:9f:44:b6:21:51:fc:39:ba:b5:4d:7c:3b:7e:
f2:46:49:de:40:3f:a8:55:17:a6:87:2e:dc:8e:c2:
2e:73:5e:5e:5b:49:17:69:20:c5:cb:da:e7:2d:e9:
ed:3c:bf:e9:64:f6:6d:09:60:2a:f0:50:22:d0:ae:
7a:11:fb:6a:da:48:6e:d9:05:6f:ee:48:d0:c1:68:
21:12:89:eb:08:15:03:bf:b0:a9:d6:a3:a0:7f:9b:
ab:fb:75:b6:db:d0:55:f8:b8:c0:03:9c:b6:19:c0:
65:6a:fb:ac:af:b6:dd:b5:c3:95:0d:0e:31:3a:24:
7c:4c:25:52:fb:c2:36:18:61:ab:f3:63:bc:4f:a7:
3b:3a:77:bc:5e:67:f2:d4:66:47:9a:a9:99:f9:05:
91:e7:30:48:3f:be:c6:c8:1c:e7:61:c6:98:60:e5:
6f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:91:FB:AD:71:44:AF:27:5E:C5:F4:4B:F9:0B:03:FD:CB:9E:44:FD
X509v3 Authority Key Identifier:
keyid:57:54:D1:95:27:FD:85:D0:D4:44:AC:AD:D4:4A:01:65:5F:DC:74:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1TRlSf9hdDURKyt1EoBZV_cdAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/TJH7rXFErydexfRL-QsD_cueRP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.69.137.0/24
62.69.139.0-62.69.140.255
193.219.115.0/24
IPv6:
2a00:a640:10a0::/44
2a00:a640:20a0::/44
Signature Algorithm: sha256WithRSAEncryption
6d:d5:b6:b3:1f:6f:53:c5:33:72:21:c4:d5:5a:0e:c4:2d:13:
e5:fb:3a:7b:93:a0:4d:12:7d:e6:90:57:de:55:f9:1d:52:62:
13:7a:9e:5b:46:9c:3c:ed:de:9a:89:b9:a3:10:53:39:c9:54:
fe:50:44:58:2b:61:ab:b4:84:d0:65:45:c5:5c:cf:6d:7a:b8:
f7:14:a3:ed:af:16:93:78:fb:5b:14:a9:0a:a9:03:8d:77:1c:
c6:2c:dc:be:d5:ab:88:cf:96:2e:f8:73:0c:eb:e1:2c:57:da:
da:f8:8f:69:a0:11:eb:2a:77:91:f2:33:9b:a0:0b:04:3a:36:
d0:58:48:ce:8f:3b:d5:4c:71:4a:9b:0e:24:ab:35:66:7f:10:
83:9a:c0:b1:31:7e:df:8f:8c:3c:cc:88:8d:a5:6f:55:16:3d:
5b:72:c4:8b:f5:4c:db:4c:9a:7e:65:be:73:df:74:f2:16:f9:
fb:c2:0c:4c:c4:43:25:71:26:ff:42:0f:6f:1e:82:d1:26:e5:
02:11:16:01:9b:fb:90:2e:64:92:6f:43:8a:9f:0f:88:5b:34:
1e:ef:94:d0:db:85:62:5d:a4:78:43:b8:ea:d6:da:e3:62:c9:
ea:c9:34:88:6f:ff:6b:c9:a8:ca:02:09:57:8f:dc:62:95:a3:
2a:e3:aa:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:15:51 2026 by rpki-client