Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/TEgjrgT4E594TNB9nGNCT440Ti0.roa
File: TEgjrgT4E594TNB9nGNCT440Ti0.roa (raw, json)
Hash identifier: 603HhzTICVEO6PiCI9La0BxHD8HHmkGS4VQQOaUz41c=
Subject key identifier: 4C:48:23:AE:04:F8:13:9F:78:4C:D0:7D:9C:63:42:4F:8E:34:4E:2D
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F23691E893537A2D74517DE459A0BEDD3
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/TEgjrgT4E594TNB9nGNCT440Ti0.roa
Signing time: Thu 02 Jul 2026 15:18:39 +0000
ROA not before: Thu 02 Jul 2026 15:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399631
IP address blocks: 185.49.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1e:89:35:37:a2:d7:45:17:de:45:9a:0b:ed:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c4823ae04f8139f784cd07d9c63424f8e344e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:db:d7:c7:df:6c:d9:5e:dd:99:16:f5:8f:38:
c2:1c:6d:05:92:e4:11:8d:df:e5:b3:4f:ab:43:64:
16:67:28:50:97:33:c1:be:be:85:e2:4a:af:d2:b2:
fc:65:67:a1:f2:cc:2b:02:0e:2b:11:3b:75:45:14:
b4:85:bc:99:6b:66:77:3d:00:02:1b:a3:a5:7d:29:
c8:43:d5:91:55:b0:68:6b:9c:08:52:7b:62:d8:a0:
fe:ac:da:d9:7c:4c:ad:c1:48:bf:eb:f7:4b:1b:96:
d3:6c:f3:d5:94:f9:8a:93:f2:10:93:4a:5b:44:18:
7d:47:5f:1a:67:a3:eb:25:ff:f6:aa:b1:01:59:a8:
d2:60:9c:e2:5f:ae:d0:82:c6:97:6d:b0:a1:db:af:
4f:c7:2b:76:8c:a8:7c:04:95:e1:29:8f:2c:66:38:
1b:ca:fe:7d:7d:13:35:1d:3d:cf:a1:20:d7:c8:40:
3f:23:ca:ab:12:5b:a3:9e:52:f0:41:54:cb:eb:8f:
bf:f4:24:76:c6:65:57:5c:59:7c:fb:d0:09:23:69:
9b:2e:a2:71:9a:31:7f:a8:1b:c4:18:9b:40:da:5d:
11:db:8e:97:e4:e9:cf:9a:4a:cb:19:15:b5:68:44:
8d:70:39:de:c8:b5:ff:bb:d7:17:a5:36:c5:46:76:
ee:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:48:23:AE:04:F8:13:9F:78:4C:D0:7D:9C:63:42:4F:8E:34:4E:2D
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/TEgjrgT4E594TNB9nGNCT440Ti0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.125.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:a2:9c:d8:0c:68:d8:18:be:f4:ec:21:bf:57:c7:69:c8:f9:
80:41:d8:88:03:42:ff:6f:73:5f:8e:b6:0a:d5:51:ff:11:ac:
82:2d:8d:c9:6d:6d:6c:ef:55:ff:48:81:71:79:1e:1f:90:fd:
30:bd:6f:f8:cf:05:d1:33:e1:5b:b5:53:c5:99:ca:e1:43:1b:
8c:42:ea:28:3a:c0:eb:4c:fd:61:cb:ef:b7:db:2b:2f:99:cb:
43:8a:99:04:d9:10:27:17:42:57:e8:f6:b7:49:51:1a:c3:17:
1e:51:ba:db:12:1a:30:85:06:46:44:78:42:a5:f9:88:42:85:
bb:74:0d:40:c4:22:ff:a9:ad:67:bc:9e:f9:41:c8:c3:57:3c:
4f:02:39:37:c4:97:f4:54:6b:bc:e4:61:d1:dc:32:66:97:9e:
9d:00:65:7a:fb:ea:dd:d5:ef:4c:cc:23:17:20:f8:39:43:34:
a4:50:96:4f:59:96:84:ba:25:b9:47:a7:a8:05:b2:e6:36:7f:
d7:7b:c7:7b:c6:e5:42:57:2a:5f:b1:26:27:cf:7a:04:87:6c:
01:05:70:e9:23:c4:22:c8:2e:0e:c7:46:ed:ba:da:7d:05:38:
74:c4:35:df:b6:bb:3c:c0:6c:a5:52:5b:f7:45:d8:37:02:14:
40:f3:84:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:20:48 2026 by rpki-client