Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/TY1a2ZAkFEl0qTY7HBy735a1Pu8.roa
File: TY1a2ZAkFEl0qTY7HBy735a1Pu8.roa (raw, json)
Hash identifier: TDLnxjBWXy9wFmrYJ2gK1yOk/jhcRw4BwGltzlJqJSc=
Subject key identifier: 4D:8D:5A:D9:90:24:14:49:74:A9:36:3B:1C:1C:BB:DF:96:B5:3E:EF
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019D85BDCA6F41298070BDF731F03252B8EC
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/TY1a2ZAkFEl0qTY7HBy735a1Pu8.roa
Signing time: Mon 13 Apr 2026 07:28:21 +0000
ROA not before: Mon 13 Apr 2026 07:28:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62390
IP address blocks: 109.176.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:85:bd:ca:6f:41:29:80:70:bd:f7:31:f0:32:52:b8:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 13 07:28:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d8d5ad99024144974a9363b1c1cbbdf96b53eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:62:0f:5e:0c:58:39:0e:3e:f3:25:8e:75:2f:
c9:3c:70:5d:e9:c6:e6:2c:b9:67:81:11:a6:14:9a:
90:0c:f5:2b:5a:ee:b8:a5:26:98:7b:83:96:eb:fa:
0c:86:73:69:39:da:20:59:29:13:16:67:b8:1f:f6:
ff:6f:9b:b0:c9:27:ff:5f:d7:3a:05:ba:a6:77:99:
a2:24:65:41:1d:de:76:93:df:c7:ef:80:8f:a1:8b:
3f:85:c0:07:f7:32:d7:ab:e8:29:33:a8:09:00:e1:
4d:4d:d9:46:fd:a4:89:59:31:bd:61:79:b7:5a:58:
2d:00:ef:c3:cc:18:90:1a:65:8e:22:7e:78:af:96:
d4:26:f7:af:72:27:d3:b2:b7:29:bc:8f:dd:33:06:
6e:99:38:e0:0c:64:4c:d5:bc:bc:ce:8b:3f:fe:f4:
ca:79:e2:40:04:ab:e3:00:27:4a:ab:e8:6a:25:e9:
a8:f7:ea:af:8a:6b:61:a1:14:34:ab:cf:c6:c5:26:
a7:ab:17:3a:b5:7d:63:32:cb:91:14:3d:9a:28:c4:
0c:52:59:e9:f3:5a:ba:eb:c3:d4:c1:ca:d5:67:9a:
b1:04:fc:b0:40:6a:71:11:cb:6a:e5:06:86:07:0b:
38:bc:49:e4:de:0f:b5:3e:8b:a5:ca:04:04:8b:55:
6e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8D:5A:D9:90:24:14:49:74:A9:36:3B:1C:1C:BB:DF:96:B5:3E:EF
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/TY1a2ZAkFEl0qTY7HBy735a1Pu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.246.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:77:f5:12:c5:f0:75:cd:a3:76:4d:80:f5:fc:1d:4c:aa:cd:
15:8a:83:50:a0:a9:5b:0b:ea:de:6b:11:db:78:87:c2:35:70:
02:39:3a:9f:b3:d6:da:9b:f7:14:e3:e8:e4:4f:c4:47:6a:71:
1f:a0:c9:1f:2d:b1:a2:6e:bf:6a:4a:5c:3b:a6:46:10:0c:68:
f4:80:1d:4d:c5:61:43:28:f9:db:ac:07:a1:c0:dd:8d:ee:8b:
73:a2:f9:6b:45:14:f4:1e:64:92:92:31:fd:cf:4b:03:b8:37:
10:36:26:15:00:b2:03:54:81:5f:ae:ce:60:53:14:01:5c:dc:
83:73:de:53:12:be:1c:bc:6b:08:99:7a:d3:50:fb:61:5d:31:
15:81:bf:d3:f2:f9:62:81:72:7c:de:12:4c:8c:2e:d0:a4:cb:
89:94:05:8b:ee:03:60:0f:ab:af:a4:08:fe:d5:a0:88:cb:56:
9d:ae:ec:c6:f5:dd:d1:0a:35:85:ba:49:03:1a:0d:8f:61:69:
55:45:cf:9f:c3:12:83:56:24:d3:33:02:67:51:7c:10:31:7b:
be:9a:a7:c3:43:e9:de:98:5a:c5:37:d0:01:e0:11:c1:11:dd:
60:87:e9:df:3d:6d:9e:16:15:3f:3c:d4:3c:6a:22:55:70:44:
f3:0f:c3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:12:31 2026 by rpki-client