Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/TLjlpZ6K0CIdHq9uBYywByHi_TU.roa
File: TLjlpZ6K0CIdHq9uBYywByHi_TU.roa (raw, json)
Hash identifier: 42dAOOKCGYqP3dzK0ban4NSBxSJdUm3ZTiz91uk/Ans=
Subject key identifier: 4C:B8:E5:A5:9E:8A:D0:22:1D:1E:AF:6E:05:8C:B0:07:21:E2:FD:35
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0B56FA5B8793E43B8BDCCD718730EA419
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/TLjlpZ6K0CIdHq9uBYywByHi_TU.roa
Signing time: Fri 18 Sep 2026 16:53:07 +0000
ROA not before: Fri 18 Sep 2026 16:53:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215030
IP address blocks: 62.41.26.0/24 maxlen: 24
77.67.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:6f:a5:b8:79:3e:43:b8:bd:cc:d7:18:73:0e:a4:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 18 16:53:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4cb8e5a59e8ad0221d1eaf6e058cb00721e2fd35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f9:95:9b:a3:69:70:fc:c2:ce:1b:a2:34:ad:
67:d5:3a:f9:3c:6f:9b:4f:ea:93:6d:d1:bb:8e:bb:
85:10:3c:79:63:9d:c0:ca:d0:21:51:4c:87:3e:91:
bc:4e:9a:8a:99:c3:5c:07:94:ca:4e:18:5a:ed:b6:
86:e7:c9:ca:d4:48:b3:c1:07:26:4a:10:41:94:66:
58:a0:1e:33:08:4a:d1:53:01:8e:3e:7d:ff:21:6b:
b9:d7:41:4b:6c:bf:57:f0:8a:13:4c:7c:3f:02:e7:
40:95:60:8b:38:5f:7b:62:fd:b9:f4:48:22:14:18:
b8:ef:3e:0a:ec:2a:b1:75:23:11:ab:10:81:ee:ff:
cc:8a:8c:0e:ae:1c:c2:39:fd:67:dc:4e:2a:61:5d:
4f:da:94:bf:97:97:70:3e:ef:bf:be:50:b4:48:d5:
27:33:99:08:0e:40:21:2b:b0:c7:b6:c2:d3:e8:28:
a2:a2:fc:1c:3a:8a:1f:62:9a:d4:61:9c:61:94:fb:
69:77:ce:af:97:34:ba:e9:f7:c7:90:5f:c8:e0:29:
e4:a2:57:1b:67:b0:f3:84:cf:5e:ff:cc:bb:cc:0a:
e2:b2:0c:b8:2f:6b:67:69:44:7b:2f:24:c8:a0:51:
c9:63:38:3a:1b:4f:88:e8:18:bf:02:7f:de:34:de:
e5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B8:E5:A5:9E:8A:D0:22:1D:1E:AF:6E:05:8C:B0:07:21:E2:FD:35
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/TLjlpZ6K0CIdHq9uBYywByHi_TU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.41.26.0/24
77.67.1.0/24
Signature Algorithm: sha256WithRSAEncryption
44:52:e2:2c:67:82:36:85:fd:35:9a:b5:cc:87:00:43:fb:7a:
8c:34:2e:bc:e1:d0:69:c8:1d:a1:ac:24:ab:23:78:95:7b:28:
11:ac:d1:77:0a:d2:87:21:f4:f6:48:10:c9:6a:96:db:f7:a4:
63:e1:5b:64:ae:77:8a:cd:df:a2:e3:00:88:6b:f8:c8:53:56:
e1:da:42:c7:66:be:4b:b6:d1:9e:2a:0c:75:62:95:8a:e9:e9:
51:c6:9c:f8:76:55:0c:60:ef:ac:4c:e9:00:90:e3:78:8a:9f:
e4:58:f0:61:19:08:e0:d8:ef:5a:77:f7:0f:7e:f8:98:80:b2:
44:71:3c:3d:63:94:f1:35:27:82:8b:7c:22:95:2f:44:5c:d4:
2f:8e:5e:3c:7b:ab:63:1d:22:41:d9:ad:cc:1a:46:92:e4:31:
9b:4f:26:8d:8e:9d:39:8d:d3:2c:05:b3:c8:83:dc:57:a9:dc:
30:ac:56:76:8d:33:bd:c5:48:a8:4a:97:bf:99:44:4f:80:d1:
32:44:b5:5e:b2:1b:9a:0d:4b:46:2c:39:38:78:92:49:24:17:
c0:a0:50:9d:fb:66:b5:c7:b6:d0:5c:29:af:6e:16:69:e6:5c:
62:25:af:ec:2f:91:35:5a:69:88:24:f6:29:44:3e:9a:5b:05:
45:28:01:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:14:05 2026 by rpki-client