Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/TLQXMGafOIsR5ApnOvsp_icpd_8.roa
File: TLQXMGafOIsR5ApnOvsp_icpd_8.roa (raw, json)
Hash identifier: 86sTIzyyyoy2QmRIQfdCQ3OfBh5rzP1QPdMk+v5vtd8=
Subject key identifier: 4C:B4:17:30:66:9F:38:8B:11:E4:0A:67:3A:FB:29:FE:27:29:77:FF
Certificate issuer: /CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Certificate serial: 019B7B36BEE6337ED30C865755D89A56787B
Authority key identifier: 3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/TLQXMGafOIsR5ApnOvsp_icpd_8.roa
Signing time: Thu 01 Jan 2026 20:19:03 +0000
ROA not before: Thu 01 Jan 2026 20:19:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200924
IP address blocks: 185.50.122.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:be:e6:33:7e:d3:0c:86:57:55:d8:9a:56:78:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Validity
Not Before: Jan 1 20:19:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4cb41730669f388b11e40a673afb29fe272977ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fc:d0:22:07:9c:f9:d2:b2:be:f1:e9:42:ec:
f5:df:a0:8b:05:09:b5:aa:c5:c1:5a:e2:c3:6f:9a:
8d:7c:61:d2:67:69:e7:a8:0a:21:c6:b6:9a:b7:e2:
0c:3c:b8:f4:97:e0:26:97:d1:fb:ec:51:75:29:a5:
d6:29:59:6a:51:b0:1e:1c:60:18:c9:43:ef:ae:52:
e5:bc:0e:38:fa:47:74:d7:84:94:dd:30:84:53:1a:
d5:1a:06:40:a7:aa:fb:6d:7d:96:98:ef:0b:5c:fd:
2f:6e:69:7a:c1:00:4b:51:b2:59:ce:fa:c5:f1:23:
2b:7c:fd:a7:20:bc:e9:54:67:47:b0:af:06:91:04:
c9:6a:d9:60:ad:01:66:b3:bf:9e:5b:96:b6:12:eb:
ee:39:11:b1:f9:9d:29:f9:e3:0e:d9:a1:eb:18:37:
86:5e:60:a2:80:c9:99:46:2f:59:85:99:7c:07:61:
6d:a7:5f:55:87:74:bb:76:e5:c7:24:b0:44:9f:a1:
ed:b9:85:a8:19:47:15:cd:d1:75:ac:7d:50:f0:2d:
f9:d7:9e:cf:7b:fc:7e:e1:17:f6:77:15:e4:65:03:
33:65:6a:e9:ac:0a:eb:18:98:61:ee:3a:d6:1f:a4:
76:7d:98:c4:8c:b3:fa:95:61:85:7f:71:3e:85:90:
0f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B4:17:30:66:9F:38:8B:11:E4:0A:67:3A:FB:29:FE:27:29:77:FF
X509v3 Authority Key Identifier:
keyid:3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/TLQXMGafOIsR5ApnOvsp_icpd_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.122.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:73:da:10:07:e6:e4:fc:07:3a:28:21:d2:a7:ea:b7:7a:29:
0c:a5:fc:d3:1c:4f:83:33:76:06:93:51:03:ae:10:d6:93:dd:
5e:fa:4e:7c:4a:d8:2e:ee:7e:1c:ea:41:3f:bb:02:ad:5a:b9:
a2:8b:ad:e6:8b:de:27:6f:86:aa:ea:70:6c:ea:05:37:af:ff:
3c:73:23:d9:c2:f2:26:c0:b9:42:ec:2e:1c:e4:ec:55:6c:af:
f6:62:8f:09:ea:f8:30:48:ac:ef:2f:fa:f2:26:12:b4:ec:ea:
32:48:94:73:b8:11:62:14:e7:dd:95:e8:ea:38:37:bc:31:c3:
29:13:ad:56:c1:22:c3:f6:82:82:ec:27:9f:08:f9:7b:e4:f4:
18:67:3b:72:ee:cb:77:78:11:3a:2b:27:38:89:48:7f:ec:52:
d4:90:2e:52:0d:fa:98:b3:10:83:0e:94:db:d9:69:45:56:8b:
74:73:07:1e:8b:10:5f:dc:82:10:2d:00:e9:7a:77:e0:23:c0:
b9:12:1b:58:59:94:4c:e3:98:52:75:5d:25:66:ce:5e:48:95:
60:9e:ef:ee:a2:13:12:23:29:df:7a:e7:a9:7a:e8:96:f6:fc:
1e:7d:6c:59:82:3e:2d:eb:68:44:75:83:bc:69:ad:b7:38:33:
1f:3d:3e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:52:27 2026 by rpki-client