Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/TOGNFoZq_yckleYrm7p8ctbQHSA.roa
File: TOGNFoZq_yckleYrm7p8ctbQHSA.roa (raw, json)
Hash identifier: geoYRBp9ROdMQ+9W3qJQyGVUBpLALtIV92I78qndRKI=
Subject key identifier: 4C:E1:8D:16:86:6A:FF:27:24:95:E6:2B:9B:BA:7C:72:D6:D0:1D:20
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A09E7C1A577A97CFC735FEDFC95244EFBF
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/TOGNFoZq_yckleYrm7p8ctbQHSA.roa
Signing time: Mon 14 Sep 2026 05:55:28 +0000
ROA not before: Mon 14 Sep 2026 05:55:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218829
IP address blocks: 82.110.52.0/24 maxlen: 24
212.134.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:7c:1a:57:7a:97:cf:c7:35:fe:df:c9:52:44:ef:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 14 05:55:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ce18d16866aff272495e62b9bba7c72d6d01d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c6:c3:40:a3:a1:e0:41:ed:49:30:27:9f:9b:
01:44:5e:23:8e:37:99:40:4d:ec:2f:37:fb:02:13:
1c:d7:32:cc:b8:04:7e:2e:0c:90:d2:95:a6:1e:ee:
29:29:41:0a:7c:21:6b:c3:21:22:b1:bc:11:8e:d5:
a2:79:6f:24:29:cf:99:61:63:db:32:e6:09:39:25:
28:74:2a:81:4f:9d:55:01:9c:b3:02:e0:32:ad:48:
43:db:a2:55:2f:3d:6f:51:7e:15:64:bd:11:c2:ea:
f6:7b:9a:79:75:5c:60:ea:b9:23:88:b1:d2:3f:99:
06:7e:41:50:60:7a:65:ff:70:db:40:8e:3c:d2:8a:
d4:f7:be:71:e2:f9:6f:32:7a:9b:95:87:4e:da:10:
38:bd:d1:0f:ff:41:64:e5:6c:39:89:70:63:7f:f7:
09:13:86:e5:f1:bc:d0:08:ec:29:78:5f:15:fd:34:
d6:69:73:fe:a5:bd:ab:0c:8a:cf:91:eb:f9:2f:34:
a5:21:ed:e1:9a:ba:93:4e:4c:e8:e8:68:2f:b4:76:
d7:77:b5:0b:23:7f:c3:98:14:e9:6c:e5:70:5a:39:
3c:83:7c:ce:d9:53:48:78:9e:05:1a:f9:39:14:d1:
53:c7:68:5e:55:3f:b1:c4:64:0a:c0:55:d8:a7:1b:
36:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E1:8D:16:86:6A:FF:27:24:95:E6:2B:9B:BA:7C:72:D6:D0:1D:20
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/TOGNFoZq_yckleYrm7p8ctbQHSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.110.52.0/24
212.134.188.0/24
Signature Algorithm: sha256WithRSAEncryption
28:82:e5:e5:14:61:67:b5:eb:d8:8c:e6:10:2b:a3:1e:14:37:
ed:0c:cd:90:54:ab:7d:0d:d5:6c:18:04:4e:f8:8f:6d:87:bc:
b1:68:16:35:58:01:fa:51:d2:67:a9:e0:c6:b1:64:cf:af:1c:
73:bf:fd:c8:60:4d:09:e9:c6:ad:f8:87:13:7e:13:ee:6c:bb:
78:7c:67:5d:3a:85:90:74:f4:d6:ba:fd:ce:26:1f:a2:fc:ad:
37:d6:95:20:61:69:49:31:e0:9b:d0:3b:a4:8e:d6:c8:04:5b:
e6:59:06:f7:43:9f:34:42:59:5a:69:1f:f1:dd:9f:eb:53:59:
7d:c7:51:d0:6e:fa:00:a2:ad:bd:b2:69:06:e7:80:c9:e8:ea:
3d:82:b7:a4:0b:3a:15:9c:a3:e5:35:e7:af:4d:35:f4:90:7e:
ed:08:be:28:c5:fd:cc:a9:98:0c:c0:7a:68:8a:53:8b:c7:1b:
df:8c:ad:59:a0:ac:7a:e5:49:df:13:73:b7:8b:d4:4c:27:21:
7c:a1:81:51:91:aa:e4:ed:d9:3e:f9:27:22:99:2b:25:b0:95:
89:21:91:4d:7b:7f:3c:78:01:96:ba:c2:82:34:92:96:d5:e3:
a7:d5:26:b6:eb:d8:cd:99:fb:46:e1:6a:5a:41:15:7c:2b:40:
e5:ec:98:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:27:07 2026 by rpki-client