Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/TBY3ceZdHqsOBUA1N5KBYWnA2Q4.roa
File: TBY3ceZdHqsOBUA1N5KBYWnA2Q4.roa (raw, json)
Hash identifier: GrxytT5MfktYZwPX2ZpctZUCAOkxFD4nKvwevkU6XNg=
Subject key identifier: 4C:16:37:71:E6:5D:1E:AB:0E:05:40:35:37:92:81:61:69:C0:D9:0E
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01A03DC57EC84336EF3C04F2E0469A1A3DFE
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/TBY3ceZdHqsOBUA1N5KBYWnA2Q4.roa
Signing time: Wed 26 Aug 2026 11:12:28 +0000
ROA not before: Wed 26 Aug 2026 11:12:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 194.132.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:c5:7e:c8:43:36:ef:3c:04:f2:e0:46:9a:1a:3d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Aug 26 11:12:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c163771e65d1eab0e0540353792816169c0d90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:69:ba:48:db:f2:d0:20:5f:95:bb:59:f0:ce:
1c:5a:85:d3:22:f2:36:b3:4f:c3:fe:00:da:71:0e:
72:ea:f9:a3:29:9a:1c:b2:4f:2d:f5:f4:89:44:8f:
18:6b:2e:66:d9:53:05:92:6d:74:30:41:05:ee:c0:
1d:3e:7f:0a:fa:96:b4:34:7c:d5:29:9b:5e:51:b0:
29:71:d7:43:fc:13:36:b7:50:95:5e:47:1d:a1:3f:
98:f5:4c:4a:47:6d:9a:47:68:6d:f5:05:20:d2:bc:
2b:00:1e:26:ff:88:3f:4b:f0:b7:7b:e9:7c:85:26:
e7:e2:01:d3:ab:97:4e:6f:9e:ff:64:61:e6:a9:43:
db:69:f9:2b:67:7e:6a:87:19:8a:7f:57:2e:bd:a7:
e4:f0:6a:60:af:09:8c:7c:c6:52:5c:33:36:a5:2c:
64:26:8d:d1:76:77:fc:a5:30:cc:11:23:a4:38:a8:
cd:60:e9:1f:10:2b:ed:a3:b1:e8:e0:d8:9f:a8:21:
a8:1f:2b:b4:9b:e3:d4:cc:ee:a2:1a:56:7f:ff:e4:
bf:e3:6e:fa:78:6e:df:45:51:49:cd:e0:6b:cd:22:
75:de:00:08:69:b5:c5:82:47:be:84:07:e9:f6:28:
23:76:ed:b1:6f:03:b5:22:73:d2:93:77:79:b3:8b:
e4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:16:37:71:E6:5D:1E:AB:0E:05:40:35:37:92:81:61:69:C0:D9:0E
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/TBY3ceZdHqsOBUA1N5KBYWnA2Q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.132.124.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:6e:6e:e8:33:a2:10:7a:da:49:9f:cd:48:06:91:7c:ec:cd:
a3:ff:bb:26:b3:fd:a0:4e:b3:2e:f5:be:48:79:ac:74:26:12:
93:ff:80:97:a7:c7:b6:47:44:a4:2e:a4:bf:86:d3:f0:a6:14:
e2:89:83:61:00:4b:d0:0c:c2:0d:83:b6:ea:88:33:40:ab:82:
73:c7:b2:8b:ae:a6:40:dc:98:a2:ed:45:27:61:09:69:42:83:
00:a6:dd:06:78:5a:07:6f:49:e1:eb:60:38:dc:61:49:a8:7b:
2d:3f:bf:be:d2:a8:70:78:aa:4e:da:43:83:88:13:0d:73:e3:
a7:e1:f4:e1:53:d1:67:7e:87:38:f6:2e:61:4c:bf:69:06:42:
ce:58:f5:cb:b9:9f:b8:76:8b:49:7e:4d:84:0c:b6:71:3d:48:
51:59:f2:66:51:7b:b7:78:b7:c4:8d:89:e2:22:3e:36:ef:69:
2e:1c:a1:be:f6:92:75:e2:d4:82:95:6e:e4:88:9a:90:2e:75:
e3:03:05:39:44:32:31:df:97:58:53:4b:59:3a:09:87:3b:76:
a1:70:31:8a:90:ac:a0:6c:7f:cc:44:e5:79:98:e9:ba:0f:fe:
80:64:83:48:b4:d7:2b:b3:f5:80:bc:d7:c6:80:5f:78:fb:25:
bf:9c:e4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:45:28 2026 by rpki-client