Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/TLkhYvB_0fOJmvHAbVxEWOk6UQw.roa
File: TLkhYvB_0fOJmvHAbVxEWOk6UQw.roa (raw, json)
Hash identifier: ZWzClnMcGGFGtMbpsn+E+OuooMoEwSvfdPtrMSA105w=
Subject key identifier: 4C:B9:21:62:F0:7F:D1:F3:89:9A:F1:C0:6D:5C:44:58:E9:3A:51:0C
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019D19E634501DADCD274EDA0D3F86C1AAE0
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/TLkhYvB_0fOJmvHAbVxEWOk6UQw.roa
Signing time: Mon 23 Mar 2026 08:53:30 +0000
ROA not before: Mon 23 Mar 2026 08:53:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 87.229.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:19:e6:34:50:1d:ad:cd:27:4e:da:0d:3f:86:c1:aa:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Mar 23 08:53:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4cb92162f07fd1f3899af1c06d5c4458e93a510c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b0:51:c7:65:d6:fa:11:3d:c0:f1:92:cc:3d:
fa:84:4a:e4:d3:c4:55:bd:35:dd:e7:d1:79:ee:e9:
9a:44:59:bf:54:e6:a8:17:24:7d:c5:75:9b:f2:89:
4a:c9:4d:ec:b6:20:8d:d9:8a:43:44:99:83:a4:2f:
2f:ef:e6:8c:41:e6:42:13:13:4e:16:04:b9:10:35:
44:0a:a7:07:a8:b4:91:f5:76:8d:97:70:14:71:55:
13:9c:8d:fb:a6:a6:2c:93:aa:b5:7d:d7:dd:24:be:
50:d6:1a:d2:b1:da:e1:86:50:c0:f5:7a:90:d2:f7:
cf:a3:21:a5:fb:4d:7e:76:90:a1:81:f4:eb:5c:71:
71:50:03:a5:6c:e5:28:e0:05:fb:7d:7f:75:f0:e5:
c4:f5:f5:bd:73:de:b6:06:a6:c7:05:01:41:c6:6a:
72:5f:34:e3:37:7c:ca:48:56:3b:d5:bf:76:68:9a:
4a:77:03:32:91:b6:6d:e3:a8:56:91:47:ec:f1:57:
73:37:2b:81:81:c7:c3:1a:b1:fc:45:f6:b3:18:11:
22:04:05:7c:e0:b8:32:48:e2:b4:43:fe:82:1e:08:
3b:7f:b4:e1:cf:59:4e:dd:d0:c1:f4:ac:72:dc:34:
d6:c0:ba:5e:c5:8b:4f:dc:cb:c6:7a:43:cb:bb:20:
04:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B9:21:62:F0:7F:D1:F3:89:9A:F1:C0:6D:5C:44:58:E9:3A:51:0C
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/TLkhYvB_0fOJmvHAbVxEWOk6UQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.23.0/24
Signature Algorithm: sha256WithRSAEncryption
23:96:0e:74:b1:b4:f6:af:5b:0a:d3:c2:89:af:b5:67:81:01:
d3:03:8c:2a:b4:3b:b8:a6:c1:e9:64:7e:33:e6:0e:83:b3:e0:
de:e4:3b:11:34:06:41:ba:dd:3e:1f:28:43:6c:e8:46:df:05:
0a:cf:5c:8f:de:d4:ba:bd:1f:05:05:e7:21:28:ca:91:b0:42:
9c:10:7a:7c:57:f7:f8:17:43:c7:7e:43:1e:1c:b5:aa:e0:5d:
18:e6:50:7a:de:7b:a2:33:96:c6:b1:bc:62:86:4d:8e:6d:d8:
2b:a6:43:30:47:3d:0c:35:16:e0:92:99:5b:c8:9b:ca:c5:27:
6b:a4:15:2c:d4:c7:3e:4b:f6:2b:aa:c6:ea:43:2f:66:03:bf:
81:fe:4e:8a:77:62:b7:2c:fb:8b:58:3c:a2:b7:05:af:0c:e8:
38:64:72:8b:10:20:45:b1:46:50:59:99:af:3a:2e:df:a0:00:
59:ff:34:f3:ca:89:0c:55:de:f5:16:85:74:17:9a:d4:da:9c:
6a:23:92:47:2d:e7:13:55:49:2f:d6:42:2b:f2:e5:c9:fb:ef:
a6:2a:c1:9c:3d:01:c1:e4:9a:d3:b9:c1:bb:58:dc:71:a6:73:
84:8a:8c:da:36:93:2c:37:f0:6e:27:cf:e9:26:af:ec:0c:39:
36:20:f2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:07:36 2026 by rpki-client