Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/TppGMYL5AY95HxT7KWSJNwroB9I.roa
File: TppGMYL5AY95HxT7KWSJNwroB9I.roa (raw, json)
Hash identifier: UW/gGvAl+7AcDbQiQOkVb8xwYpFuqW92ZJ5DWtpWrtc=
Subject key identifier: 4E:9A:46:31:82:F9:01:8F:79:1F:14:FB:29:64:89:37:0A:E8:07:D2
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 019EC553020D4268EF358EAA800C035C711F
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/TppGMYL5AY95HxT7KWSJNwroB9I.roa
Signing time: Sun 14 Jun 2026 08:50:11 +0000
ROA not before: Sun 14 Jun 2026 08:50:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212607
IP address blocks: 94.184.4.0/24 maxlen: 24
94.184.13.0/24 maxlen: 24
94.184.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c5:53:02:0d:42:68:ef:35:8e:aa:80:0c:03:5c:71:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jun 14 08:50:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e9a463182f9018f791f14fb296489370ae807d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:76:4e:a5:b4:8f:c0:49:96:84:60:c2:58:af:
ca:0f:99:58:3b:74:62:3a:5d:e0:a7:ea:53:b2:a2:
23:ee:48:08:e5:20:9f:4a:c0:f5:5c:5e:a6:c2:a5:
13:a1:78:a4:a8:9b:ce:f3:09:28:5d:14:c4:7e:9a:
7a:5b:d6:c8:1a:34:7f:61:36:cd:d3:1d:62:4a:e3:
eb:5e:4c:99:b2:72:20:7c:95:1a:ec:32:0f:50:17:
0b:5d:de:6b:98:d7:7f:03:3f:fb:ae:3f:87:90:32:
33:7b:88:02:df:c6:9e:d9:af:ff:5d:da:ec:c6:5b:
b5:6d:6a:89:07:96:28:6c:31:3d:0e:81:4c:e0:f1:
c2:7b:5c:5e:af:5d:6c:57:17:c1:a6:a6:08:8a:bf:
bb:da:d3:f5:f2:d4:b3:0c:ec:50:47:48:df:63:7a:
ce:b9:3d:e3:72:a8:67:c4:aa:7b:88:46:de:f6:f6:
f2:fd:bc:c6:bb:d4:38:95:f8:32:c3:5a:7a:88:e6:
36:81:9e:e5:46:85:ba:15:19:42:53:71:7a:1c:6e:
92:2f:f2:aa:39:e4:15:13:6e:5b:26:98:83:d7:39:
e1:b8:09:6a:74:3b:ff:f9:d9:44:43:9a:41:af:04:
31:71:d0:5d:d6:7e:00:2d:fc:37:c4:b1:88:dc:24:
6e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9A:46:31:82:F9:01:8F:79:1F:14:FB:29:64:89:37:0A:E8:07:D2
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/TppGMYL5AY95HxT7KWSJNwroB9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.4.0/24
94.184.13.0/24
94.184.29.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:cf:fe:e0:c4:c3:95:06:ff:09:11:11:2b:b3:59:4e:9d:b7:
49:c9:85:78:be:25:07:78:dd:0c:df:21:aa:7b:8d:62:0a:fe:
d3:07:32:aa:9b:9d:10:4b:43:ef:e0:e2:c9:67:59:f3:d0:47:
6b:c4:db:80:c3:a3:2b:4d:86:59:0f:58:98:bf:d5:28:04:97:
df:4a:6b:21:66:3b:7c:3f:d8:02:b8:50:43:d2:a3:b4:5f:39:
84:ab:d4:57:0a:ec:b5:45:c6:0d:dc:29:b3:49:d7:73:6e:fe:
d8:94:05:5d:22:6e:29:13:7a:9e:11:74:d2:79:0d:3b:60:92:
8b:f9:53:28:88:5e:00:f3:24:49:5b:de:30:86:a5:16:b3:bf:
ef:32:23:57:98:42:9d:be:ca:86:3f:84:c4:6a:2e:29:f1:90:
b7:38:0d:cf:52:4e:95:7c:a0:53:5b:97:87:df:13:40:e0:0c:
db:1c:75:58:13:c0:8d:94:58:80:b0:71:30:99:31:23:47:4f:
58:75:5e:bb:d8:fc:a1:cf:7a:1c:12:cb:fb:32:43:73:26:6e:
c5:46:d2:21:fc:83:5f:0d:93:46:11:67:df:de:ea:66:4f:dc:
e1:f7:a2:86:85:8d:d2:ee:9c:92:9c:44:16:cc:07:2b:fa:72:
44:e3:5e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:31:27 2026 by rpki-client