Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/TguuQZO9I1_7-VqoQL5wsWb9jPA.roa
File: TguuQZO9I1_7-VqoQL5wsWb9jPA.roa (raw, json)
Hash identifier: sLoYLNBugvAeAbkeqi4GS5CpT4/CERXu2yJ09Zh9oGs=
Subject key identifier: 4E:0B:AE:41:93:BD:23:5F:FB:F9:5A:A8:40:BE:70:B1:66:FD:8C:F0
Certificate issuer: /CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Certificate serial: 01A0ABC0B3214EFED55680AF179A8AB8510B
Authority key identifier: E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/TguuQZO9I1_7-VqoQL5wsWb9jPA.roa
Signing time: Wed 16 Sep 2026 19:45:27 +0000
ROA not before: Wed 16 Sep 2026 19:45:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200902
IP address blocks: 195.58.152.0/24 maxlen: 24
2a13:d200::/29 maxlen: 48
2a13:d201:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ab:c0:b3:21:4e:fe:d5:56:80:af:17:9a:8a:b8:51:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Validity
Not Before: Sep 16 19:45:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e0bae4193bd235ffbf95aa840be70b166fd8cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:43:13:06:c1:56:6a:38:fa:93:33:18:7f:97:
2f:44:7f:6f:93:ba:59:77:08:d0:4c:05:f8:8b:ac:
9a:d8:d2:1e:db:d5:8a:9e:a4:ff:d9:08:20:6f:69:
f0:32:3d:6c:ab:a8:7a:a6:2c:0b:ab:03:9c:fa:20:
e5:9a:09:06:8f:ca:db:7e:ff:a0:a7:3b:a9:30:52:
bd:91:dc:f7:93:a4:f9:c5:b5:bf:37:a1:45:80:22:
6e:a9:00:52:30:64:d8:88:7c:12:73:18:8e:da:ce:
6e:b3:52:af:a7:00:6e:ce:27:36:31:3f:bc:1c:c9:
ed:4a:0d:84:9f:90:40:c8:29:53:bd:d8:63:b9:65:
b9:c4:c0:cd:07:da:28:13:19:3a:a4:99:0a:88:c7:
cd:28:ca:cf:dd:8a:2d:3a:e3:ff:31:f0:09:55:ec:
56:5c:aa:89:9b:86:50:0e:0d:cf:ce:33:f7:b8:d8:
0a:7c:d5:6a:7a:03:60:01:89:bd:64:0b:bb:16:ee:
54:96:36:b8:b7:3f:f9:e4:5c:d4:2b:92:4a:59:98:
ee:4a:80:20:ae:3d:bc:4d:4b:1f:3d:70:bb:2b:99:
28:af:f7:c8:d2:38:06:2a:15:b8:12:0d:c6:3e:93:
24:7a:68:be:de:55:a3:e0:0d:cb:81:9a:20:bf:64:
56:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0B:AE:41:93:BD:23:5F:FB:F9:5A:A8:40:BE:70:B1:66:FD:8C:F0
X509v3 Authority Key Identifier:
keyid:E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/TguuQZO9I1_7-VqoQL5wsWb9jPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.152.0/24
IPv6:
2a13:d200::/29
Signature Algorithm: sha256WithRSAEncryption
5c:e6:32:df:70:71:00:a7:73:2f:0b:a7:c9:9f:bf:93:48:c7:
44:0b:cf:8d:84:10:ff:65:db:69:f0:9a:e0:2e:f2:66:85:fa:
d9:60:bf:9a:a4:16:bc:80:98:37:f5:ad:c3:0a:3d:8c:f5:e7:
df:b3:12:18:41:70:2d:b5:11:35:bb:b7:7c:c3:ce:77:c2:3f:
7f:94:0d:0e:6b:b8:07:6e:cb:98:77:12:26:aa:ea:6a:3d:df:
2d:19:dd:6b:1a:4a:24:5e:2e:5a:b7:e8:1f:5e:fc:7e:8a:a1:
30:0e:d5:d3:dc:18:dd:22:ca:f1:59:6e:2d:10:88:28:24:90:
01:2a:16:8d:cd:32:65:c2:3a:a5:d0:10:1b:da:4e:86:88:6f:
5c:23:88:a2:9c:05:92:55:41:e2:9f:5a:ea:87:ec:47:15:23:
98:42:8e:12:44:01:92:de:57:dd:ae:08:65:67:b9:22:1f:42:
59:d3:c7:f6:f8:27:a0:c8:89:2e:f4:b2:da:e5:83:d5:81:fb:
4b:d1:1a:48:09:0c:f5:cf:9e:ed:e6:fc:d7:80:dd:1a:d9:ca:
07:87:ab:e6:d5:c6:c5:80:43:01:03:31:8a:4e:15:d8:c3:be:
58:35:c4:cd:b7:87:01:a7:d9:83:ec:65:41:fc:4d:92:74:0f:
c8:df:d2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:49:55 2026 by rpki-client