Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TFlIJTVLA_w_R-Xyncb6fvSU4Jo.roa
File: TFlIJTVLA_w_R-Xyncb6fvSU4Jo.roa (raw, json)
Hash identifier: EUdU8Ft3AyvAvH7lAb/H59FoDti913i/Twht59Tb7uk=
Subject key identifier: 4C:59:48:25:35:4B:03:FC:3F:47:E5:F2:9D:C6:FA:7E:F4:94:E0:9A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019EB0BBB80FE3A3CB190608F585A769169B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TFlIJTVLA_w_R-Xyncb6fvSU4Jo.roa
Signing time: Wed 10 Jun 2026 08:52:32 +0000
ROA not before: Wed 10 Jun 2026 08:52:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213817
IP address blocks: 193.124.201.0/24 maxlen: 24
194.58.60.0/24 maxlen: 24
195.58.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b0:bb:b8:0f:e3:a3:cb:19:06:08:f5:85:a7:69:16:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 10 08:52:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c594825354b03fc3f47e5f29dc6fa7ef494e09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:53:62:47:f1:29:2c:db:d4:5e:a4:f8:32:bf:
04:65:29:48:84:72:45:98:59:7a:d2:c2:87:46:58:
53:52:7f:57:79:93:a5:55:43:cf:6d:2e:e3:46:12:
97:24:cd:31:e6:d8:03:20:49:99:8c:5a:a5:71:0f:
c2:79:a5:fd:85:6f:b6:44:e3:b1:10:a4:87:79:02:
bd:85:d8:d0:38:da:45:1a:7f:60:cb:76:a4:db:53:
a6:59:09:c7:b8:b2:38:ed:35:92:94:38:45:1b:42:
65:b6:f0:f7:9f:dd:65:a0:96:b6:8b:7b:be:8e:25:
89:f9:d8:56:f4:a6:ab:87:a4:94:a7:ed:8d:e6:81:
53:db:53:56:41:cc:4f:56:cc:d0:6a:97:13:3a:78:
4b:de:a3:a1:f6:44:5e:c3:0a:62:2b:78:90:40:e2:
29:ed:bd:e1:41:4b:fb:48:75:ea:32:4b:4b:3f:4b:
57:af:c1:af:b1:1c:48:26:92:5c:2f:55:84:d4:30:
60:3c:8b:5a:f1:ef:36:6d:df:10:be:b5:19:ab:28:
57:87:d2:c5:f3:1d:4a:7e:a6:95:79:9e:62:9c:7e:
3e:25:57:80:8b:0e:c1:05:04:64:bc:e2:71:17:14:
90:69:15:08:7e:19:d9:76:4e:60:bf:91:f9:04:e7:
55:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:59:48:25:35:4B:03:FC:3F:47:E5:F2:9D:C6:FA:7E:F4:94:E0:9A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TFlIJTVLA_w_R-Xyncb6fvSU4Jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.201.0/24
194.58.60.0/24
195.58.44.0/24
Signature Algorithm: sha256WithRSAEncryption
80:14:ad:27:b4:39:55:04:3e:87:13:a8:c9:71:33:b7:21:58:
9f:f5:3f:5c:1f:2c:d2:37:c2:dd:4d:df:02:bf:0e:35:fb:59:
ed:c6:bb:df:9e:5b:5b:03:18:48:bc:09:3f:fe:09:e2:44:8e:
be:be:43:bc:d5:05:68:de:d3:65:48:3f:1e:14:fa:58:eb:e1:
a0:4c:9d:a0:f7:ee:af:5c:37:e6:3f:e5:09:06:15:d0:9a:a2:
95:1d:9f:24:21:6a:ec:ec:a4:1b:ce:f3:22:37:0b:47:83:23:
2b:0d:0d:5e:72:fc:53:ea:54:e2:84:fd:1d:00:c6:06:dc:a4:
6b:15:a7:70:58:3e:24:58:23:6a:87:1a:4f:e1:15:db:61:38:
6e:3e:b8:9f:a6:a8:42:32:92:a0:60:b4:05:13:50:e2:d9:05:
e7:74:43:37:85:15:41:bf:18:db:c2:37:64:52:63:96:03:d5:
e6:cf:86:c8:94:fe:b8:92:ba:d4:9f:4a:5b:a6:74:38:10:e8:
07:4d:0b:7b:bd:f3:3e:22:db:5d:44:e5:b0:d6:08:1d:8c:b3:
ef:5e:01:6c:cd:72:33:c3:58:19:3c:83:77:58:f6:8f:a4:54:
94:f9:59:d2:e4:fa:06:ce:dd:ed:4e:6e:ae:a5:7b:fb:93:52:
49:51:bb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:16:43 2026 by rpki-client