Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/TUjQx-SCeFceGAtPQxFXJNzqxpo.roa
File: TUjQx-SCeFceGAtPQxFXJNzqxpo.roa (raw, json)
Hash identifier: gK+ZRgHX462dQbtKVmO0TKz0Zq0HpGa0egijOyBQn+c=
Subject key identifier: 4D:48:D0:C7:E4:82:78:57:1E:18:0B:4F:43:11:57:24:DC:EA:C6:9A
Certificate issuer: /CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Certificate serial: 019FFBE1CF566C6E339DEE7A9B12B6A4B177
Authority key identifier: C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/TUjQx-SCeFceGAtPQxFXJNzqxpo.roa
Signing time: Thu 13 Aug 2026 16:08:27 +0000
ROA not before: Thu 13 Aug 2026 16:08:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210928
IP address blocks: 212.15.44.0/24 maxlen: 24
212.15.47.0/24 maxlen: 24
212.15.50.0/24 maxlen: 24
212.15.54.0/24 maxlen: 24
212.15.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:e1:cf:56:6c:6e:33:9d:ee:7a:9b:12:b6:a4:b1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Validity
Not Before: Aug 13 16:08:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d48d0c7e48278571e180b4f43115724dceac69a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9d:d8:77:e7:d0:2b:f7:1e:5d:29:ba:e4:4f:
b8:57:6a:b3:6d:8a:a0:9e:f0:fd:c4:14:4d:c0:6b:
bd:da:df:5a:52:07:4f:1c:d8:02:64:80:d5:0d:dc:
b2:e6:65:5b:f6:bf:2c:18:87:02:1e:b3:17:26:74:
0b:96:ce:0e:94:e1:bb:bb:e1:90:de:ba:72:09:a7:
e5:84:1d:cf:1e:77:c6:f4:88:d0:74:28:72:a7:a3:
f3:13:7b:5c:ff:a4:7b:6f:6d:e2:c9:6e:38:12:6a:
bd:16:6b:b6:74:18:1e:77:17:80:0a:8d:89:4e:cf:
0e:c3:ae:75:ad:66:a7:97:0a:8a:5f:b7:15:a0:5f:
fa:17:3e:b9:29:e1:59:b5:a8:72:8b:0a:90:c4:2c:
c1:7b:85:53:58:28:a7:57:40:c3:51:fd:a1:2d:18:
c8:6f:59:c2:27:3c:b8:40:1a:a6:ab:e5:03:de:e7:
58:5f:dc:3b:7d:46:f2:ee:ca:ec:fc:fa:3a:ef:8a:
37:9b:19:3c:6c:76:f7:38:25:80:63:bf:14:c1:09:
7b:8f:b9:d6:e9:2f:27:78:1f:5e:0a:fd:3a:d5:14:
b3:37:5c:a7:d5:74:0c:b9:ca:2e:27:b4:c5:44:71:
a9:b6:a3:3d:40:7c:1a:87:7c:07:ef:b7:8b:b9:5d:
b3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:48:D0:C7:E4:82:78:57:1E:18:0B:4F:43:11:57:24:DC:EA:C6:9A
X509v3 Authority Key Identifier:
keyid:C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/TUjQx-SCeFceGAtPQxFXJNzqxpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.15.44.0/24
212.15.47.0/24
212.15.50.0/24
212.15.54.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:1b:3b:c2:8c:1d:bc:b5:e1:dc:cd:b5:4f:d1:65:b8:02:f4:
80:b9:c3:ad:2e:69:f5:0a:72:47:57:0b:5f:df:f4:78:fb:69:
55:48:24:a5:43:69:67:3d:a5:ba:43:51:2b:ba:93:8b:99:6c:
b3:c6:6f:ed:49:07:49:2a:30:17:6d:cd:79:4b:8f:92:d2:f6:
29:3c:c0:f1:fb:15:05:18:58:86:21:c8:dc:16:da:91:23:59:
f2:9d:6a:93:87:bd:29:a6:65:13:4a:cd:d5:ff:7b:4c:a9:2f:
11:e8:a1:76:75:fc:b4:bf:14:72:fc:a4:52:e1:11:8c:8e:d4:
7b:8f:d2:b8:3b:f2:f9:df:06:65:c8:9b:6a:d4:f3:52:67:b7:
30:99:28:ce:d6:c5:68:38:27:bd:ea:b9:60:bc:eb:f6:67:71:
43:7f:09:ad:a7:91:96:d5:2b:6e:3e:75:ad:cb:b4:b3:9f:dc:
d4:c8:4e:a0:c0:bc:d8:ed:92:e1:46:c5:42:78:b4:36:b7:0f:
1e:f9:3a:96:ed:5c:5c:e4:bd:91:b7:e3:bd:14:d9:ef:b1:db:
2d:b8:92:f2:0b:7b:df:3b:a5:a1:72:00:b7:90:f3:c3:aa:e2:
74:3b:9e:74:85:46:9a:7c:a9:92:d3:67:e4:2c:08:90:32:8f:
01:ae:7c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:11:40 2026 by rpki-client