Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/TkIn1Z31fefHVyASH61RxdOZjhY.roa
File: TkIn1Z31fefHVyASH61RxdOZjhY.roa (raw, json)
Hash identifier: VMkkVbdoZo9VvQYcTxkOMluwoI1+QtDTQB+HyaNwU90=
Subject key identifier: 4E:42:27:D5:9D:F5:7D:E7:C7:57:20:12:1F:AD:51:C5:D3:99:8E:16
Certificate issuer: /CN=a92dc7bdbc9d097336de6243b550ab173375ea39
Certificate serial: 019C99AA168E490B8EC9BC4F891F64B8306F
Authority key identifier: A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/TkIn1Z31fefHVyASH61RxdOZjhY.roa
Signing time: Thu 26 Feb 2026 11:16:26 +0000
ROA not before: Thu 26 Feb 2026 11:16:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3301
IP address blocks: 212.39.32.0/24 maxlen: 24
212.39.34.0/24 maxlen: 24
212.39.35.0/24 maxlen: 24
212.39.36.0/24 maxlen: 24
212.39.37.0/24 maxlen: 24
212.39.38.0/24 maxlen: 24
212.39.39.0/24 maxlen: 24
2a12:1587::/48 maxlen: 48
2a12:1587:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:99:aa:16:8e:49:0b:8e:c9:bc:4f:89:1f:64:b8:30:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92dc7bdbc9d097336de6243b550ab173375ea39
Validity
Not Before: Feb 26 11:16:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e4227d59df57de7c75720121fad51c5d3998e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a6:6c:c7:98:a7:c8:af:c7:f9:68:af:62:19:
13:74:aa:0d:99:c0:0b:04:fd:17:af:09:23:8d:dc:
a2:ac:6b:6e:94:98:af:90:96:31:60:65:69:1a:3c:
1a:2b:d6:5f:66:90:dd:b5:b1:c1:b9:0b:11:f7:00:
92:f8:37:b5:78:8a:14:d0:52:99:71:c1:20:28:52:
c6:5a:f9:d9:70:83:b1:15:2c:af:b1:db:50:8a:52:
5f:4d:58:e1:68:78:45:19:7c:14:a5:c2:bd:c7:71:
2e:97:bd:ec:d1:96:30:83:7d:d9:19:19:5c:31:6a:
a3:3e:54:77:7c:62:57:6c:1a:95:b7:de:4c:a1:10:
8e:09:8e:ce:77:58:e3:b3:5e:c5:b1:96:52:0f:05:
6e:4f:60:ee:73:88:6f:2e:90:9f:ff:7b:8a:df:d1:
bf:c8:72:2b:53:5c:e1:d1:9f:cf:ca:d6:7e:3c:8f:
18:f1:11:67:d8:47:ec:fb:71:50:af:a7:49:4e:00:
94:53:52:e6:95:01:ea:dd:31:22:9f:e6:58:89:10:
84:d5:61:4a:bb:11:62:1e:e4:37:f7:e6:a6:77:46:
ba:ca:86:68:d2:d5:31:50:6c:a5:ef:ee:67:7d:d1:
f9:cb:b0:c2:7c:a6:f4:16:ca:52:c2:b0:23:66:23:
96:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:42:27:D5:9D:F5:7D:E7:C7:57:20:12:1F:AD:51:C5:D3:99:8E:16
X509v3 Authority Key Identifier:
keyid:A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/TkIn1Z31fefHVyASH61RxdOZjhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.39.32.0/24
212.39.34.0-212.39.39.255
IPv6:
2a12:1587::/47
Signature Algorithm: sha256WithRSAEncryption
47:77:ee:bd:15:88:f1:77:ac:2e:13:94:c1:fd:47:12:a0:26:
27:64:22:2f:68:65:82:a2:d9:68:e8:b4:64:fd:b5:a0:77:2f:
33:5a:db:63:7d:f9:9b:3b:c7:4c:fc:01:8f:7f:74:92:c6:4d:
f2:01:9a:57:e4:c2:9d:d7:cd:40:6b:a3:02:85:6f:5a:fb:47:
cd:91:23:2f:47:ed:aa:81:34:ea:12:9c:df:27:72:f7:46:ef:
15:6e:39:ee:97:68:5a:fe:8d:23:03:b1:2e:be:2b:9b:46:02:
ff:a5:c1:58:67:72:f7:0c:be:3c:a9:ac:af:5f:fc:42:22:ca:
0b:ec:57:50:d2:f5:32:38:0c:fb:5f:8a:71:0d:c3:47:63:59:
a0:f2:63:39:d0:86:52:0b:a2:69:1e:d7:be:60:73:34:3d:c3:
3a:2f:d9:fb:4d:a0:93:91:11:cd:f2:0a:df:21:fa:8b:b5:b1:
86:aa:c6:a7:b1:b0:07:73:96:2d:2a:0e:59:46:7a:96:f1:7a:
e6:94:9a:79:46:80:8f:c7:da:29:82:37:cf:c6:f7:a2:1a:86:
90:d9:b4:40:76:59:60:ed:f2:93:11:0f:35:1d:d0:81:4f:66:
c0:2f:a1:70:39:08:18:bd:a9:81:47:11:b3:92:a8:a1:34:a0:
6c:24:03:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:02 2026 by rpki-client