Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/tMjzvfI4cwY1V15WKkb-vsq_FIk.roa
File: tMjzvfI4cwY1V15WKkb-vsq_FIk.roa (raw, json)
Hash identifier: p/Fn10Y6Wh1p62nauWDc9KhIr//oXuRlHUodC/rFcYA=
Subject key identifier: B4:C8:F3:BD:F2:38:73:06:35:57:5E:56:2A:46:FE:BE:CA:BF:14:89
Certificate issuer: /CN=1c30f78f69c4feda757bcf4255df05b315a17034
Certificate serial: 01A0D87706DA94AC8B302DAB40CA1F86223C
Authority key identifier: 1C:30:F7:8F:69:C4:FE:DA:75:7B:CF:42:55:DF:05:B3:15:A1:70:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDD3j2nE_tp1e89CVd8FsxWhcDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/tMjzvfI4cwY1V15WKkb-vsq_FIk.roa
Signing time: Fri 25 Sep 2026 12:07:54 +0000
ROA not before: Fri 25 Sep 2026 12:07:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34696
IP address blocks: 185.128.60.0/24 maxlen: 24
185.128.61.0/24 maxlen: 24
185.128.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/HDD3j2nE_tp1e89CVd8FsxWhcDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/HDD3j2nE_tp1e89CVd8FsxWhcDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDD3j2nE_tp1e89CVd8FsxWhcDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:77:06:da:94:ac:8b:30:2d:ab:40:ca:1f:86:22:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c30f78f69c4feda757bcf4255df05b315a17034
Validity
Not Before: Sep 25 12:07:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4c8f3bdf238730635575e562a46febecabf1489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e9:54:17:36:92:96:e0:e6:85:43:8d:79:0b:
08:b1:a5:31:a3:e6:1f:b2:a7:6f:7b:1d:bc:47:c5:
50:25:10:20:ae:f2:80:1f:57:4b:b4:a8:0a:03:d5:
3a:cd:9c:e5:67:c8:cf:09:5a:16:03:f5:2f:39:15:
97:a0:e0:6e:ea:99:91:21:5d:8c:a4:15:4a:19:3f:
42:f7:80:cd:d2:3a:72:29:a3:bf:c8:58:5e:ec:b1:
b2:12:a5:7e:a9:d4:18:f6:c7:c9:17:e9:1c:33:6c:
67:25:b6:2d:df:81:91:e4:19:9e:ef:a3:71:01:0a:
e7:b9:2b:de:77:48:1f:15:19:fa:35:0a:fe:77:c5:
b6:01:98:0c:73:df:53:0e:33:c3:a9:9f:90:72:25:
0d:75:34:70:7f:f3:5a:88:ca:8d:16:19:35:28:3a:
48:6d:dc:12:90:46:9c:9d:ea:e2:87:8a:85:43:67:
84:a5:7b:1d:05:f4:49:62:cf:3b:6a:09:19:88:20:
c4:4a:de:6d:43:c1:23:6d:4a:b7:b3:92:83:c2:2a:
96:b3:e5:bc:a5:cf:bd:d9:69:78:b7:c5:89:af:10:
d3:04:fa:b8:88:54:d3:4b:c9:0c:d8:97:ba:1a:a5:
0b:ba:24:d4:9b:89:8e:56:38:dd:d0:46:2a:f7:85:
b3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C8:F3:BD:F2:38:73:06:35:57:5E:56:2A:46:FE:BE:CA:BF:14:89
X509v3 Authority Key Identifier:
keyid:1C:30:F7:8F:69:C4:FE:DA:75:7B:CF:42:55:DF:05:B3:15:A1:70:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDD3j2nE_tp1e89CVd8FsxWhcDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/tMjzvfI4cwY1V15WKkb-vsq_FIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/HDD3j2nE_tp1e89CVd8FsxWhcDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.60.0-185.128.62.255
Signature Algorithm: sha256WithRSAEncryption
10:78:6a:57:ac:f8:3c:26:d5:19:45:2e:3a:63:64:35:0d:98:
59:04:bd:ee:2e:27:ce:0a:fa:3a:84:a8:68:82:a9:f7:4e:6e:
25:42:63:8c:77:56:f0:f6:75:25:6e:0d:89:dc:fd:0c:d2:d2:
c2:da:c9:5c:0c:89:26:e0:a1:53:fb:a8:9e:83:a3:bf:ad:ac:
53:b7:31:9c:24:4b:e9:b1:c7:5f:a3:ac:15:49:71:ea:08:4f:
c6:53:da:1d:48:d9:cb:e9:ec:3f:f3:03:66:5c:7e:3d:64:e8:
3e:7a:71:00:dd:78:bf:47:3b:03:60:4a:d9:23:94:be:ca:ea:
6e:97:dc:8f:44:c9:08:0d:2b:26:2d:96:42:73:ff:f4:62:45:
ad:a8:51:c0:96:9e:38:e9:12:28:5e:db:72:39:95:32:7a:1e:
15:77:6d:67:64:bc:1e:d5:ee:8f:5b:c9:b4:fa:2a:12:b6:a7:
b7:25:6b:5a:eb:fe:6e:16:c2:20:52:df:89:52:b0:d4:54:af:
49:c1:43:c3:40:3f:d6:ca:df:f8:07:4e:26:f7:54:8e:f5:85:
e6:df:2e:34:93:f1:b0:f1:2e:c4:ab:99:ad:df:73:fb:ec:24:
cc:db:57:ee:37:45:5e:b1:91:d1:1e:2f:eb:9d:e9:71:1e:10:
77:4b:24:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:42:34 2026 by rpki-client