Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tppuzkmN6jpfpZKIH0VQ644PPG0.roa
File: tppuzkmN6jpfpZKIH0VQ644PPG0.roa (raw, json)
Hash identifier: 7pgb7H6ySxmjpEPHGA+SxPrWzMz3658+URBk5kcUvJ8=
Subject key identifier: B6:9A:6E:CE:49:8D:EA:3A:5F:A5:92:88:1F:45:50:EB:8E:0F:3C:6D
Certificate issuer: /CN=b6380000fb7e45f8976261a698d418f08e8d67c7
Certificate serial: 019E357A20A8C7B3E2EFBF362E9BFE1CB1B7
Authority key identifier: B6:38:00:00:FB:7E:45:F8:97:62:61:A6:98:D4:18:F0:8E:8D:67:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tppuzkmN6jpfpZKIH0VQ644PPG0.roa
Signing time: Sun 17 May 2026 10:27:36 +0000
ROA not before: Sun 17 May 2026 10:27:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203
IP address blocks: 212.57.192.0/19 maxlen: 19
212.57.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Jun 2026 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:35:7a:20:a8:c7:b3:e2:ef:bf:36:2e:9b:fe:1c:b1:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6380000fb7e45f8976261a698d418f08e8d67c7
Validity
Not Before: May 17 10:27:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b69a6ece498dea3a5fa592881f4550eb8e0f3c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ac:2a:d8:9d:06:6a:2d:28:b8:fb:04:82:22:
88:9f:bf:e4:50:fc:49:24:09:de:35:f1:1f:5a:ac:
17:03:e0:05:ad:fa:d0:c3:2d:1c:e0:5d:33:78:96:
24:b1:14:2a:a3:e9:6e:f3:ca:87:c3:99:e6:b1:68:
c3:f2:3e:43:98:96:65:0d:29:65:ba:5c:32:69:a8:
4b:cd:e8:54:44:b3:16:bb:a0:95:d9:9a:64:98:aa:
d3:ab:79:39:f1:ac:6b:de:40:6d:74:f2:41:d6:cc:
bf:32:f7:c3:ea:b8:3a:3c:96:fb:18:07:e3:b8:f4:
b4:bd:53:78:54:54:4f:4d:ac:e4:96:99:66:ae:f3:
9e:5d:b6:c3:93:ae:14:00:e8:07:b5:d3:e7:16:db:
94:60:3d:76:8b:31:e8:b5:7e:4d:bf:0d:5d:cd:93:
c0:83:70:12:a8:36:70:e3:12:d9:f5:00:88:bf:a8:
f3:57:c2:60:3a:d5:49:e6:fe:76:60:ca:e5:0c:55:
3c:ba:3c:09:92:f5:37:51:cf:d4:30:f2:7a:c6:c6:
5d:85:bd:27:a5:aa:f7:2b:1e:92:a3:4c:b9:76:5d:
19:86:bd:45:b5:6f:55:fe:84:fb:e6:66:74:9d:51:
db:36:72:35:9d:98:b8:11:19:39:ce:47:4e:67:40:
d5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9A:6E:CE:49:8D:EA:3A:5F:A5:92:88:1F:45:50:EB:8E:0F:3C:6D
X509v3 Authority Key Identifier:
keyid:B6:38:00:00:FB:7E:45:F8:97:62:61:A6:98:D4:18:F0:8E:8D:67:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tppuzkmN6jpfpZKIH0VQ644PPG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.57.192.0/19
Signature Algorithm: sha256WithRSAEncryption
1b:ad:23:3f:9c:43:bd:19:ca:ec:b8:8b:a2:49:70:63:1a:f0:
c0:82:11:bc:35:54:7b:3a:56:c1:e5:4f:23:f2:f9:ea:0b:be:
90:9d:8b:bd:9e:b8:58:b1:87:0b:78:60:56:3e:7a:f6:95:b8:
09:2e:be:fe:42:fd:d6:9d:1a:c4:b7:eb:5d:4c:08:6c:1d:77:
ca:5b:c0:f5:f4:8c:6b:33:53:b5:b2:39:3a:4d:e7:2d:d8:56:
2c:9e:1c:73:6f:68:fa:45:b4:03:23:f8:0d:81:ca:1a:67:40:
d3:36:99:17:c3:57:7e:63:8e:86:a6:46:f1:9d:11:bf:d9:b4:
dc:c3:ce:ff:c1:c0:5f:d4:c8:2a:6d:d9:2b:6f:5e:62:63:78:
1b:1c:22:65:d6:4e:67:a5:9e:b5:6a:ad:f8:08:0d:f5:d1:5c:
2d:e4:1c:8d:c8:05:16:e3:36:a0:6f:16:7b:26:91:68:22:32:
e2:a3:88:61:21:c4:d0:d5:fc:de:4c:03:0e:7c:4c:25:72:00:
ee:53:e5:02:27:79:80:56:88:2b:99:4e:a8:2d:76:76:08:e3:
e0:a1:04:55:01:07:6c:be:8e:dd:86:e8:63:0c:ae:6c:ea:ff:
98:df:7d:5c:e1:ff:c8:cf:4d:ca:cf:d8:56:87:2a:7e:25:d0:
36:0f:f9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 8 17:50:00 2026 by rpki-client