Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/tdM1IwqW73HrJVgiscivcoYYwEk.roa
File: tdM1IwqW73HrJVgiscivcoYYwEk.roa (raw, json)
Hash identifier: hKpDN8kFRhdY4wLLUYtG2ZDQIrQyzHlmoJQA0lxw3lI=
Subject key identifier: B5:D3:35:23:0A:96:EF:71:EB:25:58:22:B1:C8:AF:72:86:18:C0:49
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 019F6025976CD6F13494B6BDE8429BC7EE90
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/tdM1IwqW73HrJVgiscivcoYYwEk.roa
Signing time: Tue 14 Jul 2026 10:21:44 +0000
ROA not before: Tue 14 Jul 2026 10:21:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213607
IP address blocks: 216.116.186.0/24 maxlen: 24
216.236.50.0/24 maxlen: 24
216.236.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:60:25:97:6c:d6:f1:34:94:b6:bd:e8:42:9b:c7:ee:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Jul 14 10:21:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5d335230a96ef71eb255822b1c8af728618c049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:68:45:07:93:e7:a5:c6:72:dd:30:c2:1d:e7:
67:00:a5:23:b9:76:d7:28:24:2a:d9:99:6a:16:06:
eb:a7:74:01:63:5f:46:08:c5:f8:f2:38:d9:3e:a2:
5f:f9:6c:d6:13:67:3b:83:c7:1f:af:96:ed:b2:62:
d2:47:0f:38:3b:49:8b:43:56:06:fa:0e:e6:fc:92:
ce:a2:da:38:9d:77:24:bd:84:be:12:c4:4d:6d:32:
37:f1:ec:c6:2b:0a:22:29:8d:c6:e6:6f:b2:1c:be:
bb:0c:4c:c6:34:da:9b:82:43:b9:16:28:e7:43:b0:
a1:29:0e:31:bd:1c:81:84:54:09:70:5e:4c:4f:ca:
8c:fb:c3:38:5c:d8:fd:73:55:10:b3:56:89:c0:6c:
95:8c:20:c8:58:7c:ad:3d:bf:9d:62:ba:39:37:c8:
75:2d:5a:48:4a:5d:2b:52:51:2c:80:d6:30:ad:1f:
fc:af:9b:61:ae:39:b8:24:ae:4a:14:c6:58:07:bd:
7d:5f:a2:5b:2c:df:4c:39:b6:35:00:4d:6d:8d:a2:
71:0c:38:19:b4:d4:73:17:a2:d4:4f:d6:54:74:16:
fa:8e:d6:e2:8e:0d:80:64:a4:b1:41:de:a0:1e:3a:
fe:6b:dc:a4:79:a5:cc:da:e2:19:89:a4:e4:8f:53:
65:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D3:35:23:0A:96:EF:71:EB:25:58:22:B1:C8:AF:72:86:18:C0:49
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/tdM1IwqW73HrJVgiscivcoYYwEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.116.186.0/24
216.236.50.0/24
216.236.55.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:f2:55:60:77:5d:98:06:89:9f:c2:11:87:55:34:83:3f:e9:
16:95:e1:c7:cc:cd:77:c9:8c:9b:bd:48:a0:58:2e:2f:de:d6:
5a:a4:a1:8c:05:81:b2:3c:bb:4b:66:b9:17:af:33:3b:3e:e6:
fd:c8:c9:2a:c7:13:dc:11:68:ce:0c:73:41:a8:15:02:b0:c7:
60:41:6d:5c:da:28:ab:cc:d4:33:22:42:ff:1e:85:93:15:18:
57:7c:a7:ac:a4:bf:7c:06:91:91:4a:3a:f3:7f:e9:b0:0a:74:
d8:37:7a:00:5a:d7:7b:4d:24:d0:40:90:8c:88:fc:01:31:76:
84:d5:b9:74:f2:93:f8:81:a0:5e:25:cc:18:a0:59:1e:97:8b:
4f:7f:0d:66:b3:52:35:51:8d:42:0d:1e:8b:28:2a:c2:1a:70:
92:0e:d4:22:00:c2:c6:46:bf:43:2a:df:60:a5:fa:90:70:d1:
6a:3e:b9:1c:ac:7b:db:7a:6d:b0:d3:66:36:98:02:3f:5f:ec:
8d:82:70:d7:aa:26:28:00:63:23:e4:27:13:2f:57:ff:39:bf:
40:e8:15:14:30:00:ba:15:da:dd:2d:9b:b6:13:41:f9:d7:57:
ee:f8:b9:6c:c1:44:06:1e:a0:c4:19:73:14:44:f9:d8:4b:a1:
81:87:c9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:33:21 2026 by rpki-client