Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/TPELq0kn_ta_i9ETuS3ZM7kKsPc.roa
File: TPELq0kn_ta_i9ETuS3ZM7kKsPc.roa (raw, json)
Hash identifier: FOO6hU8H7Yy6zfolKaMVsiISz0kHdFxfABBPX42Q2SY=
Subject key identifier: 4C:F1:0B:AB:49:27:FE:D6:BF:8B:D1:13:B9:2D:D9:33:B9:0A:B0:F7
Certificate issuer: /CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01
Certificate serial: 01A17E98CD7A84D3E5E9A21D3F0AB2C86FFD
Authority key identifier: 2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/TPELq0kn_ta_i9ETuS3ZM7kKsPc.roa
Signing time: Tue 27 Oct 2026 18:21:45 +0000
ROA not before: Tue 27 Oct 2026 18:21:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 194.150.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:98:cd:7a:84:d3:e5:e9:a2:1d:3f:0a:b2:c8:6f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01
Validity
Not Before: Oct 27 18:21:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4cf10bab4927fed6bf8bd113b92dd933b90ab0f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:75:30:63:5f:b2:23:c7:8e:c5:95:71:01:df:
2a:11:77:32:a6:36:78:9d:c7:78:68:61:f1:93:a0:
ae:ea:d4:c4:4e:24:17:1b:f5:49:de:8b:01:4a:12:
73:f1:17:5a:fb:0f:ec:85:f3:7f:0c:4a:fb:ba:cc:
38:7b:61:d8:d5:f2:d1:cb:cd:aa:b0:af:17:57:37:
61:2e:af:ef:39:45:09:4c:cc:44:de:3e:34:e6:30:
ef:26:f5:cc:f4:bd:5d:82:e1:f0:1b:31:23:82:6d:
fc:05:da:45:b5:e4:be:67:90:67:4a:98:4d:3d:ff:
5b:5a:b5:97:f1:3b:c6:16:4e:16:f8:82:31:ed:6e:
5c:77:85:49:4b:86:57:d2:b7:82:60:e7:2d:d8:0c:
1a:08:33:da:b8:a0:84:c9:4d:a2:25:97:59:5b:a7:
7c:1f:9a:09:37:b6:fe:1c:c4:55:6d:87:6d:51:14:
c7:e7:b1:cd:80:31:31:02:39:a6:bd:49:22:38:6d:
54:39:d9:7f:bb:e3:e2:5b:01:bb:d4:00:94:1d:a8:
ef:bf:a6:6c:12:3c:fe:41:19:56:9a:5a:ef:a6:2c:
d6:dc:27:f1:1f:96:97:1d:93:f6:1f:11:16:8d:19:
80:fe:24:ed:7a:7b:b4:49:69:10:54:8f:f7:70:35:
cc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F1:0B:AB:49:27:FE:D6:BF:8B:D1:13:B9:2D:D9:33:B9:0A:B0:F7
X509v3 Authority Key Identifier:
keyid:2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/TPELq0kn_ta_i9ETuS3ZM7kKsPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.73.0/24
Signature Algorithm: sha256WithRSAEncryption
af:84:2f:2e:c8:72:5a:2d:ed:ff:81:d8:25:70:92:1c:fb:6e:
00:59:a3:cb:b0:84:63:c2:5b:cc:f0:e1:b8:5b:71:00:ce:50:
24:4d:39:6d:5f:90:7b:03:f8:6d:72:d2:62:2f:d3:01:29:7f:
f6:22:08:31:a3:26:38:d4:4a:42:6c:6c:00:f8:83:af:87:52:
f5:d2:60:e9:72:cc:92:6b:c4:a9:52:7c:37:7f:0c:a1:18:67:
8e:0c:3b:9d:f9:fa:ae:a0:d7:ea:70:ff:6e:96:aa:ba:10:86:
7b:d3:86:c5:d8:24:71:2c:b0:84:01:27:f4:e0:d3:66:91:6a:
8d:00:92:52:54:ed:e1:98:dc:fb:30:e9:ed:20:4b:b9:31:31:
0b:b6:b0:cf:80:2c:6a:d3:42:80:9a:f9:b7:b4:02:21:2a:98:
d8:c3:a7:dc:0a:11:6e:ba:59:c4:1b:46:35:f2:ae:87:7f:81:
f9:f5:14:cd:ae:0e:0f:1c:3a:99:bc:b9:55:c7:23:a5:af:04:
1d:6b:2b:b2:45:82:0d:29:9d:11:ea:cb:8a:15:55:d3:99:92:
28:c7:87:13:a8:f0:44:d4:03:e7:fc:04:c2:3b:00:c5:a4:21:
5b:67:bb:3e:40:47:fd:52:db:b3:82:04:65:6d:92:13:a9:4a:
78:10:80:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:59:05 2026 by rpki-client