Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/_TQA3DaHi33-kcVw47n7VlGKNYM.roa
File: _TQA3DaHi33-kcVw47n7VlGKNYM.roa (raw, json)
Hash identifier: 55WFfRlQOcBvN56rtMErkYgOyBcWRjE4WY7WLvG7TY4=
Subject key identifier: FD:34:00:DC:36:87:8B:7D:FE:91:C5:70:E3:B9:FB:56:51:8A:35:83
Certificate issuer: /CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Certificate serial: 019FA432B5392D78ED9DCCFC3FE59741E14F
Authority key identifier: 4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/_TQA3DaHi33-kcVw47n7VlGKNYM.roa
Signing time: Mon 27 Jul 2026 15:30:14 +0000
ROA not before: Mon 27 Jul 2026 15:30:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219166
IP address blocks: 2a07:e000:f::/48 maxlen: 48
2a07:e000:30::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 09:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:32:b5:39:2d:78:ed:9d:cc:fc:3f:e5:97:41:e1:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Validity
Not Before: Jul 27 15:30:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd3400dc36878b7dfe91c570e3b9fb56518a3583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:64:09:c8:f9:96:b0:bf:54:50:6e:ef:79:f8:
ed:f3:93:cd:c2:4b:fc:5e:98:e0:64:24:a4:00:09:
66:b6:67:e4:72:e8:56:6f:51:d6:0c:dc:db:78:22:
43:ea:7f:e3:b8:91:60:39:08:8e:35:66:96:26:68:
1b:84:03:19:55:88:ae:9a:60:f7:64:bd:ee:0d:f5:
72:4c:96:80:fb:01:bf:4a:eb:99:2f:66:5a:2d:f9:
11:52:72:df:31:db:dc:a5:10:bb:6d:47:15:98:91:
d2:b0:33:7d:5c:7a:4c:08:51:46:43:92:10:a3:12:
93:e0:67:56:6b:30:fa:4c:43:6d:77:bc:35:4b:33:
09:39:c0:97:b1:ee:de:c1:7f:fe:ed:04:89:2e:c0:
3d:c1:ec:81:0a:4f:e6:af:b6:09:0c:a4:c1:c3:33:
9a:e6:ee:f3:6b:dc:8a:bc:20:21:04:c5:10:d4:bb:
90:89:af:c6:13:d2:6f:23:4f:d2:1e:a3:bd:dc:14:
f9:ca:0a:21:b6:ab:b7:3e:75:9e:d1:30:02:65:f7:
f4:3b:a5:fa:0e:0c:6d:60:93:aa:cc:21:1e:c9:bd:
2e:33:6d:3e:3d:f2:ab:39:d4:d1:7b:0a:09:e9:68:
0f:f7:81:b3:a3:20:4f:1b:ea:a5:36:33:d4:70:c5:
15:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:34:00:DC:36:87:8B:7D:FE:91:C5:70:E3:B9:FB:56:51:8A:35:83
X509v3 Authority Key Identifier:
keyid:4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/_TQA3DaHi33-kcVw47n7VlGKNYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:e000:f::/48
2a07:e000:30::/48
Signature Algorithm: sha256WithRSAEncryption
3d:71:bb:8d:ad:94:7e:78:2b:8c:5c:0d:58:63:6a:09:e6:0e:
01:a2:01:95:ad:91:b9:ba:ef:77:f1:93:75:40:2e:65:0b:e8:
cd:1b:1a:98:4a:d1:4a:30:bf:5c:be:92:74:2d:aa:d9:77:3e:
4f:34:4c:85:09:dc:0d:7c:46:1c:2d:4c:f9:f6:76:ca:0f:2c:
98:47:c2:c4:77:51:58:f1:7e:c8:4b:81:26:0b:48:3b:b8:da:
46:dd:c4:fc:58:69:bc:08:fd:6e:e7:dc:e9:81:a8:f3:79:c4:
d9:f1:9d:26:8d:c9:5d:47:ce:77:3e:3e:e0:31:f2:e7:e8:82:
34:d2:e2:64:f8:c3:c0:90:b6:23:fc:2f:ce:d0:88:81:56:64:
56:ec:cd:bf:e7:27:f1:9c:6a:1b:91:51:50:e5:3e:2e:97:a6:
06:5b:c5:a6:6f:80:b7:84:67:ab:17:05:96:1f:14:bd:23:74:
d5:08:ae:a0:10:9f:b9:ed:bd:1c:c7:ad:99:2e:45:10:0c:4b:
63:4c:2e:ae:a9:33:6d:52:42:3e:d2:22:d0:2b:61:d0:20:36:
d5:7e:7e:24:22:c7:89:ce:34:ad:ec:5a:60:1f:6a:9c:3d:6b:
9f:e8:53:9d:34:46:46:eb:42:ae:87:43:07:eb:43:ff:74:b1:
0a:bd:84:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:44:11 2026 by rpki-client