Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/TSCDcfzLs1UQ4iBlw3gM1aBFviM.roa
File: TSCDcfzLs1UQ4iBlw3gM1aBFviM.roa (raw, json)
Hash identifier: H0TNbKQyWizJhTXmx4klJ/GuOXQtQlE8vidACehPiZI=
Subject key identifier: 4D:20:83:71:FC:CB:B3:55:10:E2:20:65:C3:78:0C:D5:A0:45:BE:23
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 019F7E63C0BABBA24A9E6CDF57E5EF9CFF84
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/TSCDcfzLs1UQ4iBlw3gM1aBFviM.roa
Signing time: Mon 20 Jul 2026 07:18:14 +0000
ROA not before: Mon 20 Jul 2026 07:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214266
IP address blocks: 216.116.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7e:63:c0:ba:bb:a2:4a:9e:6c:df:57:e5:ef:9c:ff:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Jul 20 07:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d208371fccbb35510e22065c3780cd5a045be23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:17:da:37:76:7f:37:34:33:9f:db:4a:f7:83:
1f:e4:43:95:1d:8a:02:2d:22:80:93:e6:7a:bb:8a:
ce:c3:46:f0:4e:ea:77:e1:8a:a4:13:03:37:ef:60:
15:79:33:a7:9e:8a:bd:51:3f:18:1f:e4:99:16:5d:
08:b0:21:8d:fc:59:12:de:e4:ca:12:7e:8b:0a:07:
01:15:0b:5d:e6:fc:cb:97:1d:e4:6e:30:ca:22:77:
26:68:52:4b:e2:0d:ea:af:d3:71:5c:ef:70:89:81:
e2:0a:e6:2b:30:54:7e:d2:60:ea:6c:c1:62:81:d7:
5b:8d:af:a1:ac:39:f3:86:08:4a:cb:b6:28:0b:1c:
df:c4:64:26:77:42:68:1e:2c:db:51:e7:f8:6f:cd:
0b:4b:ad:7d:4c:d1:78:c3:bc:80:39:39:d0:49:a2:
0b:6e:eb:e9:af:4d:5b:31:9e:ea:6c:d8:ea:60:94:
82:bb:7a:7e:d3:6f:9a:49:4e:b7:f6:e2:37:fa:5f:
15:f2:0d:46:74:63:81:eb:2a:b8:73:0b:db:70:c8:
32:32:67:c4:53:84:f1:f0:50:e5:c1:b7:53:92:fa:
c3:b7:24:3f:7d:52:b9:48:32:75:0b:e8:14:c3:17:
e2:e0:e4:91:e5:00:d8:01:9c:46:17:81:1d:eb:f2:
9b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:20:83:71:FC:CB:B3:55:10:E2:20:65:C3:78:0C:D5:A0:45:BE:23
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/TSCDcfzLs1UQ4iBlw3gM1aBFviM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.116.185.0/24
Signature Algorithm: sha256WithRSAEncryption
43:a7:8a:0c:6d:e0:75:a0:62:41:28:18:e0:78:ec:b3:9f:8e:
88:53:5a:9b:ac:b1:e7:a9:56:69:25:7b:8d:88:f2:04:1f:be:
b5:11:86:d4:14:51:d8:05:5b:b4:f0:75:ba:f9:74:54:99:7c:
bc:49:24:fe:aa:d4:7c:d5:1f:0b:47:f2:b2:2d:21:6a:85:be:
af:dc:e1:d0:10:60:cf:cf:8a:e3:18:f5:e3:e2:f2:48:9a:b6:
dc:4b:65:fd:9e:a2:11:6f:03:b9:94:c6:f3:98:fe:45:e1:c1:
da:28:c8:0d:47:f4:40:2f:23:3d:08:1b:19:d7:6f:62:b7:d3:
69:1c:9e:02:95:00:ac:33:8e:2f:11:8a:c1:6c:e6:02:6d:c5:
a8:be:77:69:93:9f:d4:bc:8f:e6:20:d0:ef:62:bd:07:8c:b7:
e7:7e:8d:b5:54:11:d3:4b:c5:f5:ad:37:4d:2e:a0:7c:21:39:
fe:29:55:2c:0a:94:45:9f:62:4c:00:8c:28:40:41:34:ac:0a:
2e:4b:fc:ee:47:93:1f:ee:24:00:61:84:52:bc:be:c6:de:95:
9c:44:92:b7:3e:3d:d0:e2:14:41:db:ac:56:16:75:8e:88:d6:
e8:f3:b7:c8:e9:39:21:7b:46:18:d9:36:e4:ac:f7:6c:a9:f8:
db:ef:ef:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:33:12 2026 by rpki-client