Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/TFZlBHShfot0RjRtsqEXmcm9fis.roa
File: TFZlBHShfot0RjRtsqEXmcm9fis.roa (raw, json)
Hash identifier: qynQeHyrBzAsNtTsSQ6l4tRNwQSgMQVRp8D4+enCqT4=
Subject key identifier: 4C:56:65:04:74:A1:7E:8B:74:46:34:6D:B2:A1:17:99:C9:BD:7E:2B
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0BB43F48D694BC5D39281E6E92368AB1C
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/TFZlBHShfot0RjRtsqEXmcm9fis.roa
Signing time: Sat 19 Sep 2026 20:03:07 +0000
ROA not before: Sat 19 Sep 2026 20:03:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402265
IP address blocks: 62.105.195.0/24 maxlen: 24
194.122.80.0/24 maxlen: 24
194.231.136.0/24 maxlen: 24
194.231.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bb:43:f4:8d:69:4b:c5:d3:92:81:e6:e9:23:68:ab:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 19 20:03:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c56650474a17e8b7446346db2a11799c9bd7e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:62:ae:3d:75:87:15:b7:f8:0e:95:dc:27:0a:
85:fa:76:71:ce:70:8b:a1:f0:bc:89:93:2d:39:e3:
14:0b:32:e0:e3:cc:4b:a2:b0:a0:10:36:9c:45:9b:
c1:03:d9:1a:7d:20:ad:c0:85:01:b6:8c:7b:2d:72:
a2:67:14:99:e1:79:90:c2:09:8e:d8:d1:10:50:e6:
77:34:f5:33:54:e3:57:64:51:4c:ce:60:48:07:11:
26:a7:95:66:05:d0:c0:7f:80:48:c0:49:81:59:64:
28:6b:bd:20:ac:b1:33:1c:34:36:06:f4:92:82:a9:
56:20:c3:f3:b0:01:6f:f6:17:f5:99:80:a7:54:26:
d0:2d:e7:ef:92:2e:9f:fa:7f:56:01:1e:f9:ea:8f:
ff:bd:ab:74:d5:af:be:74:08:a5:4a:dd:fc:d9:51:
d9:d1:5d:78:a8:14:35:81:ae:17:d3:b8:a4:91:e0:
ca:8d:11:28:65:03:01:67:1b:84:15:3f:04:83:cf:
8e:b8:d2:4e:13:2c:cc:c1:46:eb:55:70:35:dd:df:
d0:78:90:bd:80:ba:ca:3f:a1:79:3f:20:14:d1:93:
2a:50:93:36:b1:f3:ec:af:4e:46:b4:b2:88:54:3f:
af:d3:5d:94:c3:f7:d0:ce:c6:3e:ed:30:c2:e4:69:
ed:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:56:65:04:74:A1:7E:8B:74:46:34:6D:B2:A1:17:99:C9:BD:7E:2B
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/TFZlBHShfot0RjRtsqEXmcm9fis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.195.0/24
194.122.80.0/24
194.231.136.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:34:ba:23:8b:bd:eb:0b:0a:fb:27:8d:d1:65:47:e4:8d:6f:
44:ca:92:c7:8c:84:b2:d5:e3:40:f6:68:5b:8a:b6:7e:73:c4:
84:0a:0c:57:1e:b9:69:cd:a0:7b:cb:c3:39:54:7f:3d:25:19:
5e:51:57:c6:b9:8b:0e:2b:7c:28:ca:8e:03:2a:40:8b:cc:72:
9e:dd:54:bb:2d:28:62:51:44:3e:3f:56:ff:2c:0c:9b:5c:03:
6d:7c:d3:aa:78:6e:30:43:4a:ac:f8:5d:7a:e2:4b:73:1b:97:
4c:28:ad:8d:e0:f0:fb:f9:51:1b:d7:cc:56:dc:3f:e6:36:f2:
cf:de:e9:42:2d:82:00:40:40:94:ca:2f:00:ea:9b:92:ac:06:
22:1d:61:09:62:1e:23:72:d6:fc:23:81:0b:e8:bd:34:8f:ac:
1c:c9:e4:e5:3b:ed:c7:d0:42:28:55:77:70:f3:2b:88:6e:b4:
68:6a:db:14:07:df:ca:33:8e:33:1e:cf:ea:f3:a8:3b:fd:5e:
a2:eb:7a:72:3f:53:cd:79:87:1d:b5:f5:4c:0c:66:7f:c6:ee:
f7:af:ea:25:97:c3:cc:a4:50:66:96:34:6a:06:80:2e:cc:df:
88:55:9d:69:ff:18:b9:c2:69:34:d5:fa:f7:a8:d0:6a:1d:8f:
a6:7c:f7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:03:20 2026 by rpki-client