Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/TnhSrFJYwDPBWTRMAUAFcGWZS_s.roa
File: TnhSrFJYwDPBWTRMAUAFcGWZS_s.roa (raw, json)
Hash identifier: F5f9esjy8DE66HeLw6apcYbtvzF+c/KGlm2Q2ZGKKhE=
Subject key identifier: 4E:78:52:AC:52:58:C0:33:C1:59:34:4C:01:40:05:70:65:99:4B:FB
Certificate issuer: /CN=fa758fbd62c6eabaa3c9875305f207805e37cdcb
Certificate serial: 019EAC496547070ACFC5F5D30B36FAC5BABF
Authority key identifier: FA:75:8F:BD:62:C6:EA:BA:A3:C9:87:53:05:F2:07:80:5E:37:CD:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nWPvWLG6rqjyYdTBfIHgF43zcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/TnhSrFJYwDPBWTRMAUAFcGWZS_s.roa
Signing time: Tue 09 Jun 2026 12:09:11 +0000
ROA not before: Tue 09 Jun 2026 12:09:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200233
IP address blocks: 2a13:181::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-nWPvWLG6rqjyYdTBfIHgF43zcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ac:49:65:47:07:0a:cf:c5:f5:d3:0b:36:fa:c5:ba:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa758fbd62c6eabaa3c9875305f207805e37cdcb
Validity
Not Before: Jun 9 12:09:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e7852ac5258c033c159344c0140057065994bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8b:47:36:5d:22:a0:a5:03:e6:93:46:36:d3:
f7:48:02:68:92:b2:35:2c:b9:e6:ce:d0:b8:46:bf:
c8:56:12:70:d2:d2:5f:21:6d:ef:24:17:d7:60:2d:
ef:2a:2a:c0:35:a4:1c:a0:05:19:0d:23:32:84:3f:
7a:ef:87:c3:51:e2:f6:bb:2a:9a:fd:56:28:c6:ce:
65:1c:f4:90:91:93:b8:e1:5a:d7:a1:48:7b:5e:15:
65:a6:28:b8:5a:ee:77:d6:eb:77:cd:54:5f:e2:ca:
ba:2d:76:94:db:65:a6:07:9f:be:52:f3:f5:bb:6d:
ee:91:88:3f:6a:00:c5:cd:9d:61:9f:43:d5:41:dd:
0f:17:b7:c7:9b:9f:cd:c3:6f:b6:4b:8a:27:49:ad:
8d:21:a4:bf:28:76:f3:94:a2:f5:df:62:9a:d6:63:
43:8a:ca:5a:29:81:ed:08:10:d7:1a:c3:f3:c3:23:
fa:e5:96:6e:7c:b1:e1:a9:01:8d:64:e3:d7:5c:20:
87:8f:d1:1c:80:30:5a:6c:42:a1:6c:3e:d4:a4:6d:
11:fc:4d:02:14:d4:a4:df:02:c4:e5:a0:9e:8a:a0:
58:e6:fb:3d:30:b0:3f:6f:d3:8e:e0:8e:9f:0c:46:
23:59:f0:50:6c:10:7b:19:12:a6:ef:58:6c:6b:1a:
4a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:78:52:AC:52:58:C0:33:C1:59:34:4C:01:40:05:70:65:99:4B:FB
X509v3 Authority Key Identifier:
keyid:FA:75:8F:BD:62:C6:EA:BA:A3:C9:87:53:05:F2:07:80:5E:37:CD:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nWPvWLG6rqjyYdTBfIHgF43zcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/TnhSrFJYwDPBWTRMAUAFcGWZS_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:181::/32
Signature Algorithm: sha256WithRSAEncryption
3f:3a:cb:72:56:f5:f4:7c:b5:6b:62:ff:52:92:66:0c:09:1c:
e0:8f:36:7e:0e:62:b3:f9:e0:a8:32:98:0a:ba:30:12:d9:23:
8f:4b:a8:fe:be:89:2b:63:b5:3b:1a:9d:33:6f:c0:c2:ae:e9:
17:7a:a0:0d:ae:a4:5d:b5:0e:e5:84:98:c2:65:98:cd:77:b5:
3b:51:50:52:b1:38:c0:38:dc:bf:34:7c:cb:15:40:62:e1:b4:
7a:8f:2a:c0:08:56:6c:5c:c2:46:aa:89:c0:1f:13:3d:34:1f:
58:17:51:9b:7f:17:da:1c:22:a0:2f:89:14:bc:e9:ce:10:1c:
13:1e:3f:54:58:87:1d:08:ad:19:b0:5b:5e:52:c7:9e:60:8b:
a7:00:27:a9:00:51:d7:0e:6a:a9:1b:8a:e1:c5:66:ad:87:a3:
3f:c4:7f:51:e5:05:e4:a4:ed:f2:a7:13:2d:4b:44:1e:e7:5a:
18:dc:18:61:24:9d:e4:ad:4c:8a:84:b6:19:b4:0d:2c:86:38:
42:c6:e7:84:bc:ee:1b:f0:66:51:14:97:cf:30:02:3b:d7:b3:
3b:aa:a6:b8:7b:a7:79:fe:35:6c:57:00:1e:6a:b9:b4:fd:d5:
f8:f2:55:50:f8:da:54:65:97:6f:8d:1c:a7:57:48:c5:83:09:
a6:05:63:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:18:59 2026 by rpki-client