Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/TaSH7NtlwtrFIrDj364DwXJ_HIM.roa
File: TaSH7NtlwtrFIrDj364DwXJ_HIM.roa (raw, json)
Hash identifier: /firgbfNVWhYSHYSkEW46TaNJKxPv/A5DQIPgW4X1Ec=
Subject key identifier: 4D:A4:87:EC:DB:65:C2:DA:C5:22:B0:E3:DF:AE:03:C1:72:7F:1C:83
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 019FD5779FC0B7B7FBFA027AC839E97335F5
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/TaSH7NtlwtrFIrDj364DwXJ_HIM.roa
Signing time: Thu 06 Aug 2026 05:06:54 +0000
ROA not before: Thu 06 Aug 2026 05:06:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6850
IP address blocks: 212.109.170.0/24 maxlen: 24
212.109.171.0/24 maxlen: 24
212.109.172.0/24 maxlen: 24
212.109.173.0/24 maxlen: 24
212.109.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d5:77:9f:c0:b7:b7:fb:fa:02:7a:c8:39:e9:73:35:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Aug 6 05:06:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4da487ecdb65c2dac522b0e3dfae03c1727f1c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:81:3b:d1:db:21:94:56:e5:66:da:63:e8:6c:
9b:79:07:e5:d6:ec:05:3f:9d:9d:0e:23:06:3d:32:
40:22:30:a9:d3:8a:24:26:43:60:11:b6:a3:f1:36:
7a:ce:81:db:a7:0a:a7:bf:ca:b5:af:25:32:51:4d:
24:e1:b0:00:d2:84:56:4c:97:ff:c8:f1:c5:0a:68:
9b:22:c6:4c:86:6e:29:d4:d1:64:3c:40:43:6f:9a:
ac:91:b4:65:dc:e2:ae:69:f4:28:84:eb:90:b4:fb:
a8:39:88:58:95:84:a7:9c:d7:0f:0e:c4:95:8a:e3:
74:aa:e1:96:d3:3c:26:62:17:27:b1:d5:c9:3f:7b:
12:66:ca:1a:42:32:81:8f:a5:cd:81:ea:6b:63:e3:
f5:80:d0:f2:8f:a7:f5:1d:5f:fd:8f:6d:f0:12:1f:
5d:30:8f:8c:a0:2b:62:be:c1:94:ac:3a:82:91:9b:
48:bb:35:e5:f3:11:c4:36:5d:10:e0:8f:09:07:4d:
83:2a:5a:4b:cc:1f:b5:ea:d0:4d:10:d6:a2:3a:16:
bc:56:20:cd:e8:c6:63:05:7c:be:51:cd:7e:06:57:
e8:b1:2f:38:3d:af:73:3f:67:e0:80:dc:50:01:2e:
0f:e2:86:ed:79:4d:6c:d1:b8:02:96:f9:00:0c:1d:
70:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A4:87:EC:DB:65:C2:DA:C5:22:B0:E3:DF:AE:03:C1:72:7F:1C:83
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/TaSH7NtlwtrFIrDj364DwXJ_HIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.109.170.0-212.109.174.255
Signature Algorithm: sha256WithRSAEncryption
90:2f:06:e3:3e:41:6a:4d:2b:0f:1b:b2:10:46:56:ba:3d:16:
09:94:a5:6a:f2:b9:98:41:bf:01:04:cb:bc:56:db:1d:0b:9b:
ec:1a:bc:38:5d:b9:54:df:27:59:c6:dc:e7:05:30:bd:1b:0d:
a6:c2:a5:1c:ad:0e:66:e9:70:93:93:a5:3e:52:d8:65:69:2c:
73:5d:51:2b:c8:12:ba:c0:2b:b7:dc:8a:1f:82:25:dd:d6:4a:
76:90:ca:c7:a5:88:ab:40:e3:28:61:a0:08:5f:43:92:98:83:
b0:1a:40:93:93:06:ad:9c:5a:26:7c:90:11:fc:2f:df:9a:c8:
01:96:6f:69:59:8f:96:40:0d:72:7c:7b:f1:e3:22:13:bf:a6:
55:ed:b8:fd:24:a3:a9:65:e3:9e:97:82:5d:07:9b:75:61:e5:
c7:fb:c6:15:a0:59:76:ce:e8:0e:e4:23:1f:00:ac:34:88:e4:
87:9c:64:7c:df:70:76:9b:2c:d9:da:fe:9f:65:a1:fc:ea:44:
f3:12:61:b0:c0:10:87:85:68:3a:4a:d1:9f:f1:41:bb:3c:b1:
f2:17:d3:11:00:a3:8c:70:56:e9:5a:17:d2:1d:4c:60:e1:67:
9d:24:43:ee:7b:2b:78:33:de:ab:25:55:e0:6f:04:b8:70:56:
3b:df:b6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 05:16:33 2026 by rpki-client