Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/tnPaXTyswkX357A39kelPR3li7M.roa
File: tnPaXTyswkX357A39kelPR3li7M.roa (raw, json)
Hash identifier: 1eq/iOnEjhYgGBLROWfpw18V6R7LJTeC8nJiWr/RJf4=
Subject key identifier: B6:73:DA:5D:3C:AC:C2:45:F7:E7:B0:37:F6:47:A5:3D:1D:E5:8B:B3
Certificate issuer: /CN=cd626bbb7b69eec9f6790b03705545b892fa2e8a
Certificate serial: 01A1A7B6D02BAE913AC3820378BAA7972E8D
Authority key identifier: CD:62:6B:BB:7B:69:EE:C9:F6:79:0B:03:70:55:45:B8:92:FA:2E:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/tnPaXTyswkX357A39kelPR3li7M.roa
Signing time: Wed 04 Nov 2026 17:58:58 +0000
ROA not before: Wed 04 Nov 2026 17:58:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198380
IP address blocks: 134.90.240.0/21 maxlen: 24
134.90.240.0/22 maxlen: 22
134.90.244.0/22 maxlen: 22
217.196.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 20:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a7:b6:d0:2b:ae:91:3a:c3:82:03:78:ba:a7:97:2e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd626bbb7b69eec9f6790b03705545b892fa2e8a
Validity
Not Before: Nov 4 17:58:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b673da5d3cacc245f7e7b037f647a53d1de58bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:78:bb:53:d3:60:4f:ab:a6:60:20:13:d0:b0:
4d:0a:fa:10:e7:01:40:3e:3a:f9:93:ba:3c:5f:d2:
7e:5d:e8:53:42:2a:a5:54:c2:03:84:c7:ae:b4:6d:
1e:86:a6:78:a5:5e:9e:0c:9d:1f:95:b2:5c:a1:bd:
04:f0:c5:1f:53:3c:06:9e:3f:2b:7a:64:4c:f6:f8:
9e:3f:42:ad:9a:22:44:78:26:a9:1b:0d:43:cb:21:
21:69:78:50:e6:37:cd:3c:84:7a:c2:47:16:9f:58:
3a:f2:9c:ef:b7:0f:bd:ae:71:b4:03:c0:67:f4:cc:
23:ab:95:23:a5:28:15:7a:c1:cc:60:f8:8f:df:fa:
9b:cd:f2:47:a6:5e:6a:8d:3b:13:5b:7a:fa:b5:59:
87:72:ac:d1:56:54:05:07:c7:ba:31:66:ef:a5:41:
c9:24:d1:66:83:b6:bd:a0:39:f7:c7:28:69:1b:bf:
63:f4:f8:2d:36:f0:c7:fb:96:67:d5:87:7d:e9:30:
cf:e0:13:cf:64:dd:de:4a:e6:66:15:e8:21:8d:df:
c8:59:fd:db:1d:cc:e1:d8:fa:fe:79:6e:dd:4d:d9:
fb:74:da:e2:1c:cc:d3:18:7d:f4:58:36:0d:de:d3:
bb:75:a0:bd:1b:33:49:c8:fa:a5:02:35:26:be:e2:
67:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:73:DA:5D:3C:AC:C2:45:F7:E7:B0:37:F6:47:A5:3D:1D:E5:8B:B3
X509v3 Authority Key Identifier:
keyid:CD:62:6B:BB:7B:69:EE:C9:F6:79:0B:03:70:55:45:B8:92:FA:2E:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/tnPaXTyswkX357A39kelPR3li7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.90.240.0/21
217.196.138.0/23
Signature Algorithm: sha256WithRSAEncryption
d3:33:d3:17:1d:d6:f2:7f:71:a5:3e:57:61:b2:82:1a:45:64:
9b:59:98:31:29:9d:54:9f:10:69:8b:7a:30:bb:3b:52:99:6d:
36:0c:57:07:a9:01:fc:36:32:b6:ca:95:1e:0c:1b:13:16:b1:
51:73:c8:8a:81:d5:78:ac:90:07:58:d9:6d:32:0e:2f:35:a5:
9c:19:b5:c1:cc:c2:8b:8d:7c:66:f6:10:0e:52:6a:76:34:61:
02:c4:7f:f2:ba:2d:5d:94:96:f8:73:a1:4c:46:1a:cf:d1:74:
61:31:2c:39:fb:8a:a4:57:73:a1:65:69:36:cc:8b:be:af:f4:
26:2b:25:35:0e:fd:ce:b6:66:63:85:e3:90:a8:9a:72:ef:78:
34:d8:6e:3e:10:c4:d9:ea:b4:a9:68:9a:71:f0:92:e6:17:d3:
92:d1:9d:84:94:be:54:ac:21:38:78:3d:24:ee:57:07:34:47:
44:21:76:1d:5a:e2:fb:bb:e9:ad:d9:7b:e7:bd:a3:96:87:45:
d0:1a:7c:4f:29:d3:9b:cc:fd:e2:0c:ae:0f:f4:18:55:c6:f3:
f5:d8:22:9d:5e:3d:17:c2:6d:8e:7e:91:6b:c9:b1:e4:02:54:
6c:e6:f3:62:37:fc:4a:cb:f0:50:fa:b5:d6:21:2c:71:57:9d:
63:e0:58:f1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaGnttArrpE6w4IDeLqnly6NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNjI2YmJiN2I2OWVlYzlmNjc5MGIwMzcwNTU0NWI4OTJm
YTJlOGEwHhcNMjYxMTA0MTc1ODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjczZGE1ZDNjYWNjMjQ1ZjdlN2IwMzdmNjQ3YTUzZDFkZTU4YmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHi7U9NgT6umYCAT0LBNCvoQ5wFA
Pjr5k7o8X9J+XehTQiqlVMIDhMeutG0ehqZ4pV6eDJ0flbJcob0E8MUfUzwGnj8r
emRM9vieP0KtmiJEeCapGw1DyyEhaXhQ5jfNPIR6wkcWn1g68pzvtw+9rnG0A8Bn
9Mwjq5UjpSgVesHMYPiP3/qbzfJHpl5qjTsTW3r6tVmHcqzRVlQFB8e6MWbvpUHJ
JNFmg7a9oDn3xyhpG79j9PgtNvDH+5Zn1Yd96TDP4BPPZN3eSuZmFeghjd/IWf3b
Hczh2Pr+eW7dTdn7dNriHMzTGH30WDYN3tO7daC9GzNJyPqlAjUmvuJnqQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLZz2l08rMJF9+ewN/ZHpT0d5YuzMB8GA1UdIwQY
MBaAFM1ia7t7ae7J9nkLA3BVRbiS+i6KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveldKcnUzdHA3c24yZVFzRGNGVkZ1Skw2TG9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yYjM3ZGYtOGZmZS00MWU1LWFjMDct
YzBmODlhZDM2YmNhLzEvdG5QYVhUeXN3a1gzNTdBMzlrZWxQUjNsaTdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8yYjM3ZGYtOGZmZS00MWU1LWFjMDctYzBmODlhZDM2YmNh
LzEveldKcnUzdHA3c24yZVFzRGNGVkZ1Skw2TG9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDhlrwAwQB
2cSKMA0GCSqGSIb3DQEBCwUAA4IBAQDTM9MXHdbyf3GlPldhsoIaRWSbWZgxKZ1U
nxBpi3owuztSmW02DFcHqQH8NjK2ypUeDBsTFrFRc8iKgdV4rJAHWNltMg4vNaWc
GbXBzMKLjXxm9hAOUmp2NGECxH/yui1dlJb4c6FMRhrP0XRhMSw5+4qkV3OhZWk2
zIu+r/QmKyU1Dv3OtmZjheOQqJpy73g02G4+EMTZ6rSpaJpx8JLmF9OS0Z2ElL5U
rCE4eD0k7lcHNEdEIXYdWuL7u+mt2XvnvaOWh0XQGnxPKdObzP3iDK4P9BhVxvP1
2CKdXj0Xwm2OfpFrybHkAlRs5vNiN/xKy/BQ+rXWISxxV51j4Fjx
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:12:31 2026 by rpki-client