Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/Tq4nexBl7Bhl88T7x0Q2h2tatk4.roa
File: Tq4nexBl7Bhl88T7x0Q2h2tatk4.roa (raw, json)
Hash identifier: pFK6MA84kt09PJZi3gnwpQ1THUutVL/OXU5GSC2uBmo=
Subject key identifier: 4E:AE:27:7B:10:65:EC:18:65:F3:C4:FB:C7:44:36:87:6B:5A:B6:4E
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 019EA6C68B93ABCD234E756414E617E2ED56
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/Tq4nexBl7Bhl88T7x0Q2h2tatk4.roa
Signing time: Mon 08 Jun 2026 10:28:10 +0000
ROA not before: Mon 08 Jun 2026 10:28:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209630
IP address blocks: 91.92.40.0/24 maxlen: 24
91.92.41.0/24 maxlen: 24
91.92.42.0/24 maxlen: 24
93.152.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a6:c6:8b:93:ab:cd:23:4e:75:64:14:e6:17:e2:ed:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jun 8 10:28:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4eae277b1065ec1865f3c4fbc74436876b5ab64e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:13:33:9e:a8:62:f9:cb:fd:bc:5d:8d:c0:48:
56:82:e8:5f:22:b8:9c:32:43:2e:75:d6:af:c9:a7:
33:65:87:7c:6a:a5:d8:73:ab:8b:78:5f:f9:3a:5c:
a5:b7:33:11:c6:df:f6:8d:e8:91:12:4e:36:be:8b:
93:b9:c8:46:2d:a0:f7:ba:30:a5:4b:ec:1e:1e:f9:
6a:88:6f:69:99:fa:6e:e9:ea:65:08:cb:2b:f2:37:
0d:04:07:0b:5c:6c:15:3b:db:61:9d:09:1a:4c:ab:
6d:90:ae:4d:d5:80:4a:57:5b:2e:98:42:89:69:4b:
d4:58:4e:bd:eb:da:25:a8:be:f0:91:41:4e:08:6b:
eb:32:1e:11:2a:78:1c:3c:9d:85:da:07:bc:80:f2:
7b:11:43:ee:56:8b:4f:a0:99:dd:b4:a3:91:f9:80:
53:d1:45:ee:02:fa:86:2f:9c:2b:de:26:9a:8d:4e:
c8:4e:17:7c:99:3a:a2:06:30:49:a7:fc:56:25:dd:
1f:53:96:45:f3:09:46:b0:ea:d4:3d:71:24:02:f4:
5d:6c:bc:1d:39:6f:ca:d8:5d:96:2b:14:0c:79:a8:
00:60:6e:5d:ac:97:01:67:b6:98:52:c8:02:c8:e0:
c4:8e:29:81:ef:59:88:0f:7f:82:87:d6:81:da:a7:
14:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AE:27:7B:10:65:EC:18:65:F3:C4:FB:C7:44:36:87:6B:5A:B6:4E
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/Tq4nexBl7Bhl88T7x0Q2h2tatk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.40.0-91.92.42.255
93.152.233.0/24
Signature Algorithm: sha256WithRSAEncryption
68:38:40:43:fe:14:b5:73:f6:ee:06:5a:e7:9b:7c:dc:ed:cc:
d5:36:ca:8a:91:38:8b:43:90:f7:29:56:fe:90:9b:66:94:74:
49:d5:7f:f8:1c:9e:82:10:f2:dd:0c:09:3c:b7:5c:82:74:e2:
33:57:e2:b3:64:5b:8f:1d:ee:83:60:84:1c:fc:36:3a:6c:c1:
56:cb:66:06:a3:e8:ef:ce:76:8e:df:69:e2:80:de:f6:b3:34:
bc:94:07:78:1a:83:43:02:e3:56:ec:44:87:18:26:26:c9:5d:
b3:45:79:0e:70:a2:a6:cd:4a:84:b2:82:4d:2e:14:9f:2c:3e:
66:76:19:a1:05:35:cc:6d:b1:c8:20:4f:ac:97:d6:a7:a8:0f:
3a:a2:fe:9d:b5:09:55:6f:49:a2:7d:84:23:24:9a:d7:84:a3:
da:54:d1:ee:77:4f:1b:0a:9a:36:e9:f6:ec:ea:36:5b:a6:d3:
d9:db:24:18:44:80:47:a8:49:4f:e2:a2:51:e0:bd:b3:e5:3c:
63:07:cf:63:85:b5:43:b1:02:54:cc:82:af:64:dd:e0:f6:d2:
94:bb:a0:7b:aa:e6:60:15:56:31:81:c6:91:dc:f8:1d:19:fb:
5c:86:30:bf:a4:5b:1f:13:cc:12:13:19:82:6c:24:3f:c7:fd:
dd:a4:5f:63
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 11 20:07:00 2026 by rpki-client