Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/Tx69HmMEl-OD_2fomg4xYESCEDw.roa
File: Tx69HmMEl-OD_2fomg4xYESCEDw.roa (raw, json)
Hash identifier: e9adL/NCOts/hcwANwzxhinlwjJUFzDD4VQlpoRq8gQ=
Subject key identifier: 4F:1E:BD:1E:63:04:97:E3:83:FF:67:E8:9A:0E:31:60:44:82:10:3C
Certificate issuer: /CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
Certificate serial: 019E847DD19812DD89F84F81C709E0719D3D
Authority key identifier: 1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/Tx69HmMEl-OD_2fomg4xYESCEDw.roa
Signing time: Mon 01 Jun 2026 18:41:38 +0000
ROA not before: Mon 01 Jun 2026 18:41:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 109.232.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 17:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:84:7d:d1:98:12:dd:89:f8:4f:81:c7:09:e0:71:9d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
Validity
Not Before: Jun 1 18:41:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f1ebd1e630497e383ff67e89a0e31604482103c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ca:99:a5:63:49:8e:52:2a:52:5b:87:b9:64:
b8:68:10:68:80:fe:1c:a4:24:73:4a:ff:1b:ae:52:
b6:17:fd:87:ff:d4:22:35:63:81:42:4b:c0:7a:25:
31:85:69:ed:41:d4:87:97:41:d5:5c:bd:04:90:68:
9d:51:9c:31:c2:e7:31:fb:c9:87:1b:f0:7d:32:fc:
61:ec:54:4e:2f:12:4b:36:39:5b:2b:c4:6b:4c:0a:
3e:d0:4a:91:9c:f6:6c:5b:55:0b:3b:86:16:e8:72:
6b:bb:70:86:aa:9b:e0:5c:1e:cb:ad:9a:d9:67:1d:
ab:cd:b2:d9:c4:d4:94:91:7e:1e:48:04:49:e3:7a:
ec:0c:76:67:04:9f:63:2b:58:a0:fe:32:c6:fb:ef:
2a:2b:d2:62:c0:7a:16:eb:d9:6a:da:26:7d:fe:40:
58:39:09:79:49:26:a4:02:9f:b6:c6:d2:94:ad:99:
8a:f4:55:29:57:2b:7a:5e:45:0e:c5:16:09:05:34:
23:93:4f:95:81:1a:b1:57:ed:76:96:bc:3c:70:29:
70:dd:f1:65:cd:f8:2d:0f:93:32:a3:e8:11:d0:ba:
a1:50:1e:2b:4f:94:f0:43:9b:7a:9d:98:c1:89:5c:
47:ad:cb:0a:77:25:ed:fb:e2:f1:7d:10:e6:17:59:
56:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1E:BD:1E:63:04:97:E3:83:FF:67:E8:9A:0E:31:60:44:82:10:3C
X509v3 Authority Key Identifier:
keyid:1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/Tx69HmMEl-OD_2fomg4xYESCEDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.232.88.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:7f:00:f4:8f:ee:3e:8d:c2:5e:09:ae:ce:88:a6:3f:dd:02:
6d:f8:fd:dd:d6:d3:49:49:d0:1d:75:e0:65:f9:1f:9b:b3:57:
a6:61:0e:f6:4e:6f:06:41:5a:3d:00:25:91:1b:8a:4f:3c:f8:
6d:70:fe:1c:b0:5c:65:3c:f9:c5:2b:a8:dc:24:21:f8:d5:27:
10:51:2d:b1:ab:1f:ef:6c:0c:d9:e3:2e:ec:42:d5:2b:54:0c:
aa:b7:b9:18:18:1b:55:75:2b:d1:6e:92:30:fc:0e:2a:cc:e4:
00:1e:6d:83:a9:a6:65:d5:3b:f5:96:3f:61:bb:df:ed:ed:26:
9a:e3:2a:30:d7:3d:09:cb:29:a2:ae:e5:ca:2b:6d:96:d0:bf:
d6:76:a3:05:bf:c4:1d:89:60:35:1f:cf:4a:b4:17:40:05:94:
4d:98:94:58:3b:3a:e1:37:50:d1:77:54:e2:79:84:32:37:d5:
3a:8a:52:7d:68:91:da:75:9f:46:16:62:c8:b4:7b:93:e7:00:
44:14:69:43:ba:91:22:ba:47:a3:4e:47:8b:07:07:aa:8c:c6:
fd:d6:11:55:c9:a7:f2:7d:4a:21:f5:5c:82:6f:25:1b:11:d2:
6e:78:99:5a:76:51:42:b2:bf:b1:f3:a5:3f:06:c5:5b:d9:af:
de:f3:9e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 03:25:09 2026 by rpki-client