Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/TcN8RStvDz9FIQuAdkzblZdsG78.roa
File: TcN8RStvDz9FIQuAdkzblZdsG78.roa (raw, json)
Hash identifier: z896uR9lThbveZZ6pUuBRtEJ9tuIO7tyyr47bGki+qI=
Subject key identifier: 4D:C3:7C:45:2B:6F:0F:3F:45:21:0B:80:76:4C:DB:95:97:6C:1B:BF
Certificate issuer: /CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Certificate serial: 01A05D560043B78C572BEAB83B83B08C1FFB
Authority key identifier: C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/TcN8RStvDz9FIQuAdkzblZdsG78.roa
Signing time: Tue 01 Sep 2026 14:18:32 +0000
ROA not before: Tue 01 Sep 2026 14:18:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219182
IP address blocks: 194.143.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:56:00:43:b7:8c:57:2b:ea:b8:3b:83:b0:8c:1f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Validity
Not Before: Sep 1 14:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4dc37c452b6f0f3f45210b80764cdb95976c1bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:be:aa:4e:69:45:09:a9:2b:2c:0a:dd:8d:0b:
40:9b:7e:32:58:60:5f:54:1c:1a:9a:9c:34:48:12:
d1:ab:1b:b5:ff:d7:17:14:36:fa:e2:58:b3:c4:dc:
08:43:4d:30:e3:ae:40:0b:38:d7:a7:03:dc:68:af:
0d:53:2e:0c:ec:b3:c9:c0:3a:36:52:5f:fc:ed:8c:
b1:0b:b3:9a:54:87:95:d0:9d:c7:56:4a:de:05:53:
ab:81:48:c6:fb:f2:d4:3a:80:f0:f7:d6:29:a4:00:
63:6d:39:b0:84:bf:97:e6:90:c7:c0:8c:73:8f:24:
91:71:d9:26:28:20:a4:f8:d7:d4:11:a3:4a:85:30:
8a:a3:51:17:f1:b3:2f:1c:56:2f:f6:dc:9d:6b:e8:
ca:37:22:87:e5:40:1d:77:db:8d:13:6d:2d:55:a6:
c4:f5:4d:c6:51:0e:1f:f9:e5:12:22:fe:55:04:7c:
41:5b:40:4c:50:fc:de:4b:74:59:af:ff:6f:1a:2b:
5d:52:c0:a1:62:5d:19:53:34:65:68:9a:fc:01:5c:
0c:08:68:f2:19:19:26:0d:63:63:14:1d:0b:bc:e4:
3b:d7:9d:06:0d:c7:04:dc:7f:10:37:1b:36:4e:f7:
f1:8f:0a:38:2f:ba:6c:49:5a:19:9d:ec:9b:fe:d9:
d5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C3:7C:45:2B:6F:0F:3F:45:21:0B:80:76:4C:DB:95:97:6C:1B:BF
X509v3 Authority Key Identifier:
keyid:C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/TcN8RStvDz9FIQuAdkzblZdsG78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.217.0/24
Signature Algorithm: sha256WithRSAEncryption
73:5f:2a:15:51:db:f6:0b:35:e7:24:29:1d:f6:c0:d4:af:63:
be:53:da:14:59:20:0d:7e:4a:47:ac:e6:c4:09:c5:b8:a0:ea:
ef:a5:c6:7e:2e:db:eb:79:fe:3d:21:f4:ea:0c:b6:21:74:23:
b2:4e:47:dd:86:b3:bd:32:dd:86:46:47:3d:b1:0b:7c:e9:b7:
13:6b:06:c3:96:24:d3:39:81:61:54:ea:93:81:52:42:70:a9:
7e:13:be:e0:cd:36:de:d3:62:61:c8:c8:d1:81:b9:4e:9c:c1:
70:fc:7c:97:f7:8a:d5:12:65:4c:15:dd:06:75:a1:9a:6a:b1:
4c:0a:ac:d9:9a:3e:55:7a:48:0c:f1:4c:fa:d0:c3:12:19:8f:
75:5e:b0:aa:d6:14:fe:91:ef:3b:96:bd:be:39:1f:c7:94:68:
4a:ed:2b:75:e1:08:28:77:db:aa:a4:b0:f1:5a:36:36:26:42:
e7:3f:10:50:b2:bd:be:ac:f0:b8:1f:ce:48:12:b9:9a:00:38:
38:e9:e4:df:08:2b:12:cc:14:a4:f4:bf:f8:08:7e:03:71:d1:
df:36:67:f3:28:2a:89:b4:c3:92:5c:7f:72:4b:da:e4:f9:07:
dd:c8:6a:f6:2d:a5:af:d2:cb:cb:75:b4:3c:d0:24:63:40:f3:
0f:22:31:60
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBdVgBDt4xXK+q4O4OwjB/7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNjBkNDZkMWQ4MDQ2YjRkNzRlNGQ4MTU4MThjOGUzNjU5
ZWRiZTkwHhcNMjYwOTAxMTQxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGMzN2M0NTJiNmYwZjNmNDUyMTBiODA3NjRjZGI5NTk3NmMxYmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjL6qTmlFCakrLArdjQtAm34yWGBf
VBwampw0SBLRqxu1/9cXFDb64lizxNwIQ00w465ACzjXpwPcaK8NUy4M7LPJwDo2
Ul/87YyxC7OaVIeV0J3HVkreBVOrgUjG+/LUOoDw99YppABjbTmwhL+X5pDHwIxz
jySRcdkmKCCk+NfUEaNKhTCKo1EX8bMvHFYv9tyda+jKNyKH5UAdd9uNE20tVabE
9U3GUQ4f+eUSIv5VBHxBW0BMUPzeS3RZr/9vGitdUsChYl0ZUzRlaJr8AVwMCGjy
GRkmDWNjFB0LvOQ7150GDccE3H8QNxs2Tvfxjwo4L7psSVoZneyb/tnVmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE3DfEUrbw8/RSELgHZM25WXbBu/MB8GA1UdIwQY
MBaAFMBg1G0dgEa0105NgVgYyONlntvpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0dEVWJSMkFSclRYVGsyQldCakk0MldlMi1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt
MWRkZWM0Y2NlMjRjLzEvVGNOOFJTdHZEejlGSVF1QWRremJsWmRzRzc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj
LzEvd0dEVWJSMkFSclRYVGsyQldCakk0MldlMi1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwo/ZMA0G
CSqGSIb3DQEBCwUAA4IBAQBzXyoVUdv2CzXnJCkd9sDUr2O+U9oUWSANfkpHrObE
CcW4oOrvpcZ+Ltvref49IfTqDLYhdCOyTkfdhrO9Mt2GRkc9sQt86bcTawbDliTT
OYFhVOqTgVJCcKl+E77gzTbe02JhyMjRgblOnMFw/HyX94rVEmVMFd0GdaGaarFM
CqzZmj5VekgM8Uz60MMSGY91XrCq1hT+ke87lr2+OR/HlGhK7St14Qgod9uqpLDx
WjY2JkLnPxBQsr2+rPC4H85IErmaADg46eTfCCsSzBSk9L/4CH4DcdHfNmfzKCqJ
tMOSXH9yS9rk+QfdyGr2LaWv0svLdbQ80CRjQPMPIjFg
-----END CERTIFICATE-----
Generated at Wed Sep 2 11:03:47 2026 by rpki-client