Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/Tr0YnxbnlTKJBw3KuPRiQ4WLk4A.roa
File: Tr0YnxbnlTKJBw3KuPRiQ4WLk4A.roa (raw, json)
Hash identifier: fUqzu0DwJKML2PUP+/+0esbF3iP8hAniVL4L3/9u/nk=
Subject key identifier: 4E:BD:18:9F:16:E7:95:32:89:07:0D:CA:B8:F4:62:43:85:8B:93:80
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 019CD2B0D870DC2294AC508443960FD5A06A
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/Tr0YnxbnlTKJBw3KuPRiQ4WLk4A.roa
Signing time: Mon 09 Mar 2026 13:02:11 +0000
ROA not before: Mon 09 Mar 2026 13:02:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198087
IP address blocks: 216.195.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d2:b0:d8:70:dc:22:94:ac:50:84:43:96:0f:d5:a0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Mar 9 13:02:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ebd189f16e7953289070dcab8f46243858b9380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f8:a3:c4:6e:c0:73:12:fa:d3:db:e3:40:ef:
cb:f6:e5:de:6d:67:f7:26:bf:36:de:9e:46:be:93:
c4:f7:6b:3c:d7:de:65:3d:a5:d9:a7:dd:22:20:3d:
73:00:f1:e6:d2:14:2b:7b:08:14:bf:10:23:28:40:
e3:aa:d7:90:6c:07:9a:d5:71:89:61:13:ff:1c:b4:
03:85:6a:04:35:cf:f3:9b:de:83:e0:a7:e5:bd:99:
c9:46:7b:38:6d:68:9b:b9:7b:2c:43:3d:26:f6:0b:
7c:42:95:5c:be:48:0f:4e:39:56:a9:76:d6:d6:63:
0a:f8:29:a1:6f:3c:a6:2e:c9:c6:2d:11:ec:d0:8a:
fa:3c:b5:1d:e9:19:14:f6:a0:e3:cf:ac:b8:3f:9a:
ec:21:7f:63:45:ff:98:18:ef:1b:c3:98:82:8e:35:
17:b9:79:62:9d:91:17:cb:44:75:2d:28:71:6f:78:
ea:86:71:f5:27:9a:e9:ee:e6:23:7d:60:0c:d0:45:
05:65:e0:6a:d9:6f:31:dd:06:a2:64:02:d6:77:71:
10:a9:13:d9:ea:d3:a1:28:78:16:e4:7b:43:ad:9a:
52:df:a7:e4:ff:ed:f2:be:ba:2b:7e:78:fc:2f:3b:
87:be:bb:7c:65:3c:bb:4e:87:a9:1d:b4:a1:5e:a3:
e7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BD:18:9F:16:E7:95:32:89:07:0D:CA:B8:F4:62:43:85:8B:93:80
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/Tr0YnxbnlTKJBw3KuPRiQ4WLk4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.195.221.0/24
Signature Algorithm: sha256WithRSAEncryption
92:e6:f2:e5:47:d1:46:98:4f:02:41:f2:f8:b2:6b:ea:a3:e9:
b3:01:5a:44:de:61:ba:c2:75:07:26:6a:e9:0c:9e:17:8b:a9:
7d:fc:9e:98:05:63:ed:e8:42:b0:eb:59:9a:6a:63:a5:e4:32:
79:94:dd:8c:40:7d:98:c6:eb:c5:18:ed:57:29:91:10:d3:65:
00:81:39:0e:bf:78:ad:57:62:e6:c4:33:36:d3:1f:a4:7d:2d:
f2:7b:3e:f6:18:e6:85:7f:95:55:1c:60:eb:ea:45:4c:06:c8:
14:57:c3:62:51:12:7d:6a:b1:73:e7:19:89:6e:a7:7f:f0:5a:
1b:a0:d1:44:78:58:4c:8d:20:73:e1:b4:8b:97:f4:e2:cc:0e:
25:04:fe:8b:05:53:a0:81:61:b5:06:ba:48:7a:0d:d8:56:19:
ed:8f:65:f0:6f:aa:6e:e0:b0:4f:5a:a2:62:f0:69:d4:a0:b7:
1f:3f:d4:c1:d4:a5:49:a9:86:1a:f5:47:7b:14:56:58:d1:f5:
51:27:df:cd:2e:84:ee:86:51:5c:64:58:4c:91:b0:ea:4a:98:
41:a5:27:ca:dc:0b:14:74:e2:50:71:24:81:ef:b7:61:46:62:
33:ee:3c:2b:27:f7:ae:6a:29:d9:48:ac:49:6b:e0:fe:b3:ca:
9c:fc:57:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 23:02:28 2026 by rpki-client