Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/tjzdvWQXGyuZr6RYVMx1Yjk9et4.roa
File: tjzdvWQXGyuZr6RYVMx1Yjk9et4.roa (raw, json)
Hash identifier: E99Roql1GDYJZd5vONjmCjCyvJPv3bXeRSYT36UiYFk=
Subject key identifier: B6:3C:DD:BD:64:17:1B:2B:99:AF:A4:58:54:CC:75:62:39:3D:7A:DE
Certificate issuer: /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Certificate serial: 019FBA2A812810FFC4F2B1DDFBA1F29DD583
Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/tjzdvWQXGyuZr6RYVMx1Yjk9et4.roa
Signing time: Fri 31 Jul 2026 21:52:55 +0000
ROA not before: Fri 31 Jul 2026 21:52:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55207
IP address blocks: 185.186.8.0/24 maxlen: 24
2a0b:6b86::/48 maxlen: 48
2a0b:6b86:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 22:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ba:2a:81:28:10:ff:c4:f2:b1:dd:fb:a1:f2:9d:d5:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Validity
Not Before: Jul 31 21:52:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b63cddbd64171b2b99afa45854cc7562393d7ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:35:fc:f1:dd:4b:ff:f5:5c:ba:8b:fd:2f:c6:
88:bf:5a:a2:6d:fc:d2:0c:b7:3a:d2:88:71:6c:22:
02:dc:8a:e3:5e:d5:c6:5e:37:55:0c:6d:97:48:99:
94:57:a4:90:f5:9c:9f:cc:ef:8c:c1:b6:d4:f5:4f:
0c:98:ac:ec:6d:2a:57:86:28:15:27:b9:7a:7a:4c:
dd:a0:cf:12:9f:e1:bc:21:68:b3:36:f0:3c:2f:03:
54:06:9f:69:43:ac:a3:89:bd:0b:40:66:be:2f:c0:
96:ed:08:d7:a4:1f:a2:ad:9d:6c:05:5e:b6:b1:29:
35:a8:4a:fb:a1:25:ac:57:c5:b6:10:2d:e3:76:39:
22:e4:1a:8a:1c:88:cd:25:cb:f0:e4:63:d7:30:88:
69:89:bf:b1:b1:db:d6:b2:72:b9:83:a0:6f:30:3a:
de:00:23:63:60:a1:ce:98:da:8a:d5:75:65:fa:db:
93:57:f9:40:0c:74:07:02:1e:14:bb:75:68:b5:7c:
43:9b:0b:ac:56:da:c3:ee:f5:30:4e:58:1c:39:b3:
58:41:4f:19:8f:70:97:b1:c3:3f:0e:24:e7:59:eb:
e2:56:ac:46:04:e2:37:6c:ef:20:c6:c5:f6:1b:e9:
67:87:6f:bd:80:33:e4:7f:95:64:90:84:d0:10:26:
11:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3C:DD:BD:64:17:1B:2B:99:AF:A4:58:54:CC:75:62:39:3D:7A:DE
X509v3 Authority Key Identifier:
keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/tjzdvWQXGyuZr6RYVMx1Yjk9et4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.8.0/24
IPv6:
2a0b:6b86::/47
Signature Algorithm: sha256WithRSAEncryption
96:81:b9:a3:16:0c:ac:2c:14:72:8d:65:bc:be:ac:95:b8:ff:
97:84:0d:fd:ac:5c:f7:76:a3:73:b5:c0:29:6c:84:43:80:7f:
ea:1a:ce:0a:4d:33:75:84:20:4e:2f:2b:95:73:c8:81:76:8d:
2a:ec:82:56:2c:73:a2:69:9e:17:5d:0d:e3:1c:3d:da:44:5e:
c9:e1:80:32:d0:08:93:46:c2:e0:63:04:ab:60:78:fe:75:8d:
df:7e:3d:2e:1f:05:f0:0e:9f:25:c3:28:17:36:60:8e:64:1a:
c7:69:6b:6d:18:bb:64:bb:6f:a3:1a:7c:0e:07:70:2a:ff:e2:
1a:df:30:76:b8:4a:9d:ed:c5:56:a9:4f:fc:8a:0f:c3:ed:3d:
c5:6f:db:ab:73:0b:fd:e9:07:4f:60:14:92:99:e1:81:ea:ba:
e1:e0:25:68:f1:eb:75:c9:37:bf:58:46:a6:a5:56:f1:81:95:
be:13:8f:65:d0:df:83:74:16:79:52:ce:da:cf:32:cf:34:0f:
0c:78:eb:c8:82:5e:77:49:16:12:45:b2:47:72:ee:a9:8b:b4:
e3:61:f9:cf:f2:a5:65:ee:eb:31:6a:59:69:29:01:c2:c9:a2:
f3:56:f8:a9:31:fb:9f:17:c2:29:2e:20:e2:0d:9c:87:69:3a:
d8:3e:1b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:46:37 2026 by rpki-client