Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/TeEN_g-HN2hPiwNoH322Uht7dE0.roa
File: TeEN_g-HN2hPiwNoH322Uht7dE0.roa (raw, json)
Hash identifier: K8H74GvLNHzRtP0MbhQ/DuIVuXcfUX8899uSVd06/ek=
Subject key identifier: 4D:E1:0D:FE:0F:87:37:68:4F:8B:03:68:1F:7D:B6:52:1B:7B:74:4D
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019FA816CF42382054B9903BDEECC39395CF
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/TeEN_g-HN2hPiwNoH322Uht7dE0.roa
Signing time: Tue 28 Jul 2026 09:38:14 +0000
ROA not before: Tue 28 Jul 2026 09:38:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51722
IP address blocks: 194.62.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:16:cf:42:38:20:54:b9:90:3b:de:ec:c3:93:95:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jul 28 09:38:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4de10dfe0f8737684f8b03681f7db6521b7b744d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a0:c5:c1:60:91:5d:17:e8:af:86:d8:d4:ba:
b2:59:c0:e7:a2:1d:28:ec:a3:b5:d8:9a:ef:96:4a:
e2:e2:a4:f5:dd:e3:06:8b:fe:c1:56:30:2c:ce:41:
43:b9:2a:37:1e:e6:a7:cd:92:fd:38:f3:01:83:2c:
75:d5:52:80:f8:e7:f3:07:24:df:81:65:23:43:60:
18:cf:e8:a6:ca:1a:86:c0:8f:c3:85:d0:56:3c:5f:
20:59:68:61:70:e0:7c:02:b7:2f:c0:e2:07:c3:c4:
0a:ca:e9:97:3d:ce:37:86:d8:67:06:04:7d:c9:00:
0d:bd:4f:69:39:e0:d4:7d:a0:6c:9e:96:16:9e:e7:
03:e0:dc:5a:f1:37:e2:3e:37:d6:af:aa:b1:34:71:
0c:4c:e9:f7:41:42:8d:04:f3:81:81:44:d7:75:0d:
ab:aa:54:74:32:93:bd:ea:4a:32:47:3f:57:69:92:
45:80:7d:ea:0c:d0:6f:25:0c:f7:ca:7d:aa:ff:50:
33:6b:c3:23:60:64:65:79:e6:3c:e5:19:ba:3a:6b:
4e:a8:55:19:60:aa:8f:2f:34:a7:3e:07:51:5c:88:
5f:60:26:68:e8:ce:3b:c9:b3:02:7c:9c:71:8b:26:
8c:e7:e9:ad:e2:a9:2b:53:3f:e0:b5:aa:da:74:45:
60:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E1:0D:FE:0F:87:37:68:4F:8B:03:68:1F:7D:B6:52:1B:7B:74:4D
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/TeEN_g-HN2hPiwNoH322Uht7dE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.54.0/24
Signature Algorithm: sha256WithRSAEncryption
81:bd:6c:ec:7e:a6:51:cb:6f:70:3f:61:07:5d:84:41:85:e2:
b5:84:3d:57:1d:19:6a:fa:d7:27:9d:72:85:f9:c9:65:95:10:
5b:b4:5e:21:6a:76:1b:28:99:93:1d:50:29:95:b2:e4:4d:66:
7c:69:e0:1e:de:32:29:ad:65:2a:d2:3b:44:af:48:fd:23:c2:
71:0a:73:07:d8:15:8c:78:35:25:08:1c:f8:8f:91:99:fe:85:
71:24:3f:4a:13:0d:5f:4e:0f:8a:1f:bc:63:ea:3a:58:60:40:
cc:b7:c0:97:ed:8c:c9:2d:99:65:53:41:fa:b3:b0:04:c8:a9:
f7:54:a3:16:5e:7a:bf:4e:91:b8:fd:a8:22:67:26:2f:c5:3f:
69:b6:b5:a1:68:d8:9f:66:e7:99:df:13:ea:df:1f:4b:92:b8:
00:da:72:65:32:00:07:1a:97:66:db:07:0b:7f:0c:4c:52:86:
44:c8:4f:6b:8a:0a:dc:10:e3:63:34:d2:ee:f7:bd:24:1c:e7:
35:55:a7:93:17:8f:cc:29:9a:cf:d2:0f:ef:0d:42:d7:e6:f6:
4a:7b:07:cc:b4:d8:91:f0:b9:ed:54:c6:16:a1:09:15:53:d4:
1e:f1:f5:b4:e0:0f:37:7c:0b:c6:8f:1d:17:09:40:d9:8f:88:
47:dc:d3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:01:21 2026 by rpki-client