Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Tfp7MGoGqDWbYv6g2SKdrB58Dto.roa
File: Tfp7MGoGqDWbYv6g2SKdrB58Dto.roa (raw, json)
Hash identifier: oXEGTv2cDXW81H8wftyDiu7tCNSaAk4NfY9joEbEi8M=
Subject key identifier: 4D:FA:7B:30:6A:06:A8:35:9B:62:FE:A0:D9:22:9D:AC:1E:7C:0E:DA
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FA29EF7948843947825AC9D5FFBB615BE
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Tfp7MGoGqDWbYv6g2SKdrB58Dto.roa
Signing time: Mon 27 Jul 2026 08:09:14 +0000
ROA not before: Mon 27 Jul 2026 08:09:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401783
IP address blocks: 86.53.44.0/24 maxlen: 24
86.53.45.0/24 maxlen: 24
86.53.72.0/24 maxlen: 24
86.53.75.0/24 maxlen: 24
212.134.20.0/24 maxlen: 24
213.177.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:9e:f7:94:88:43:94:78:25:ac:9d:5f:fb:b6:15:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 27 08:09:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4dfa7b306a06a8359b62fea0d9229dac1e7c0eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:35:0b:2a:be:84:b6:8e:41:7e:69:36:3c:0e:
90:ed:7a:07:d2:77:c3:c2:17:76:57:d8:59:f4:ca:
c3:6c:c3:7f:34:c9:7e:51:a2:e0:4b:2a:28:a9:95:
5c:5b:9e:d4:c9:60:c0:a7:28:b4:f3:99:a8:fb:bf:
f6:5b:3b:8b:78:73:32:72:60:6a:aa:82:56:b0:19:
2f:24:15:66:77:57:7b:af:ab:68:36:1d:34:41:59:
6f:21:4f:14:2e:fd:0f:84:51:ce:b9:6d:a2:39:f4:
92:38:e7:52:43:c4:fb:78:23:af:0d:ca:10:40:11:
8c:79:ef:b8:8a:eb:ab:bf:93:fe:a2:41:75:c0:20:
9c:c2:0a:26:31:b4:ac:1c:65:30:53:9d:ae:1f:57:
1c:03:f5:98:76:41:c1:6b:c4:3e:bc:15:c1:f4:30:
56:56:75:30:db:58:24:3e:d3:58:94:25:75:4f:58:
06:04:58:8d:7e:27:56:1c:13:b2:9a:3a:0f:cf:e7:
01:79:d0:1a:b6:52:12:30:7e:37:c2:03:5d:f3:af:
40:a8:0e:cb:fe:81:22:d5:37:f9:09:27:0a:f4:27:
c2:40:60:e2:2a:90:2f:9d:4e:67:e6:7f:a4:07:12:
0f:b5:1a:cc:ce:a7:bd:fb:c3:c7:43:4d:11:ef:22:
82:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FA:7B:30:6A:06:A8:35:9B:62:FE:A0:D9:22:9D:AC:1E:7C:0E:DA
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Tfp7MGoGqDWbYv6g2SKdrB58Dto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.53.44.0/23
86.53.72.0/24
86.53.75.0/24
212.134.20.0/24
213.177.255.0/24
Signature Algorithm: sha256WithRSAEncryption
67:ee:dc:96:4e:59:53:68:c6:b1:ef:b6:ac:a7:8c:d5:3e:58:
87:6d:5a:a7:e4:bb:46:7e:88:32:4d:86:7c:88:82:56:19:b5:
94:e2:b4:fd:99:eb:c0:7e:09:bc:de:d2:dd:fe:cb:00:b8:24:
41:e1:1c:bf:2b:98:26:ac:90:79:72:78:04:5c:73:98:32:99:
d9:0b:04:c8:23:1e:de:b6:1e:d0:3c:65:37:af:8b:e5:31:b1:
7a:04:c7:6e:2b:c3:c4:93:c6:8f:34:7d:ff:df:c4:0b:f1:0a:
e3:10:b1:1f:14:e9:a0:fd:55:a2:5c:fc:22:0c:b8:0b:00:f3:
34:9e:04:c7:72:25:ef:bf:9f:0d:95:89:3a:1f:73:ea:37:21:
84:71:72:ec:b9:87:53:6a:df:c5:75:8f:9c:35:31:24:4c:bd:
4a:65:60:fe:e5:09:04:03:01:4d:0b:76:ef:e9:8e:a9:fe:d8:
20:8d:e1:d7:c1:d1:e7:da:a6:2c:4d:0b:15:da:4b:96:6b:6d:
8d:56:40:3d:26:be:e0:00:d8:25:76:51:d9:69:0b:18:2d:99:
4f:33:c0:7e:f9:f3:f8:71:da:7f:d4:21:13:27:11:cf:f7:6c:
d7:cd:e2:42:cb:95:11:8c:94:5f:0d:00:46:f9:b5:af:c1:05:
aa:66:7f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:05:20 2026 by rpki-client