Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/TVHzZj95rrtu1Cd7VMCoXVfcb9k.roa
File: TVHzZj95rrtu1Cd7VMCoXVfcb9k.roa (raw, json)
Hash identifier: waoZ8hObt50UnfyAaiBCrQb75JLKYhIN/rXa7FIwcb4=
Subject key identifier: 4D:51:F3:66:3F:79:AE:BB:6E:D4:27:7B:54:C0:A8:5D:57:DC:6F:D9
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019D217A56CCCA3B524FD7B26D7DCE012AE6
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/TVHzZj95rrtu1Cd7VMCoXVfcb9k.roa
Signing time: Tue 24 Mar 2026 20:12:38 +0000
ROA not before: Tue 24 Mar 2026 20:12:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 138.249.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:21:7a:56:cc:ca:3b:52:4f:d7:b2:6d:7d:ce:01:2a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Mar 24 20:12:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d51f3663f79aebb6ed4277b54c0a85d57dc6fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ab:19:82:6c:1c:4a:55:c4:a6:05:a7:7d:5e:
59:e2:17:23:80:81:56:5a:70:5f:2b:a0:29:20:a0:
db:8d:d0:b5:9c:b0:5e:fe:26:cc:a8:aa:ec:17:17:
8d:f3:64:a6:65:a3:57:81:79:b6:ec:c3:a6:52:f0:
57:db:ce:e8:68:9a:bc:13:e3:6b:cb:ae:73:98:d0:
83:78:d5:d7:54:ae:18:d2:d7:e8:06:61:7c:c4:3f:
d6:89:2a:0e:b7:b6:39:a1:54:22:8f:b8:7b:b9:1f:
ea:cd:5d:ac:a9:0f:01:6c:97:3e:58:2d:1f:59:75:
e3:95:4c:d6:90:a6:90:49:b8:a1:fc:a4:e5:36:1f:
f0:a2:58:7a:68:49:ea:d9:aa:d4:ab:2e:a4:7f:2d:
b8:26:e9:e3:ea:d9:83:66:80:17:ff:58:98:a9:bf:
9b:8b:42:41:47:36:ab:79:c9:d4:eb:0a:62:ec:f0:
38:8f:04:c4:93:7d:d7:3d:40:ac:f6:71:ee:bf:45:
a0:25:30:65:4d:52:90:e7:6a:18:21:68:3b:90:40:
e9:6e:78:15:18:9e:b0:33:2b:a8:98:76:70:2f:de:
64:1f:1f:ef:64:38:47:a2:fd:f6:77:e8:f8:65:64:
a7:bf:69:5c:50:dc:04:4d:0f:38:84:e3:7a:64:75:
f2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:51:F3:66:3F:79:AE:BB:6E:D4:27:7B:54:C0:A8:5D:57:DC:6F:D9
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/TVHzZj95rrtu1Cd7VMCoXVfcb9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.249.2.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:fa:90:37:cb:1d:7d:1d:0f:9d:a8:81:21:04:01:70:a6:bb:
27:2e:ab:23:96:17:3e:ba:3e:ba:5a:25:06:7d:16:a8:14:a4:
7f:56:e6:4d:57:44:b4:f2:89:0d:d6:dc:c5:9a:b4:b8:6f:ce:
84:94:ff:da:76:ac:2a:17:0a:11:00:c1:64:f1:25:0e:f1:0f:
9c:f2:09:c0:29:74:7f:99:cc:02:58:0d:d0:a0:9d:27:89:a6:
51:61:42:e8:92:d5:cb:34:94:26:ea:90:08:09:de:59:c5:b9:
29:10:3d:af:06:6e:29:1c:c7:f0:2e:63:f6:29:a5:4f:47:86:
a9:dc:8d:76:b1:77:aa:5e:33:58:95:5e:91:39:1d:d2:a8:b1:
f6:43:cc:73:32:d8:40:b5:f7:57:0a:44:86:96:fb:37:6c:f2:
b6:a8:10:51:a3:fe:54:ca:73:1d:6d:f8:3c:35:84:b0:c7:ae:
a3:20:30:5d:d0:b6:90:99:63:77:f5:00:4f:53:ab:ca:c4:e1:
84:f5:e1:0e:69:1a:7a:5c:1c:bc:30:14:70:cc:72:4a:ff:9e:
65:b6:47:cb:e0:48:79:96:8f:c4:c7:09:31:3b:e4:07:a3:31:
8d:42:e5:65:71:2a:a9:b4:c3:71:2a:4c:a4:af:ec:77:1d:75:
7e:73:4e:89
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0helbMyjtST9eybX3OASrmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh
MGYwY2UwHhcNMjYwMzI0MjAxMjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDUxZjM2NjNmNzlhZWJiNmVkNDI3N2I1NGMwYTg1ZDU3ZGM2ZmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlasZgmwcSlXEpgWnfV5Z4hcjgIFW
WnBfK6ApIKDbjdC1nLBe/ibMqKrsFxeN82SmZaNXgXm27MOmUvBX287oaJq8E+Nr
y65zmNCDeNXXVK4Y0tfoBmF8xD/WiSoOt7Y5oVQij7h7uR/qzV2sqQ8BbJc+WC0f
WXXjlUzWkKaQSbih/KTlNh/wolh6aEnq2arUqy6kfy24Junj6tmDZoAX/1iYqb+b
i0JBRzarecnU6wpi7PA4jwTEk33XPUCs9nHuv0WgJTBlTVKQ52oYIWg7kEDpbngV
GJ6wMyuomHZwL95kHx/vZDhHov32d+j4ZWSnv2lcUNwETQ84hON6ZHXyuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE1R82Y/ea67btQne1TAqF1X3G/ZMB8GA1UdIwQY
MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et
YTY2N2JiNzY1MDYwLzEvVFZIelpqOTVycnR1MUNkN1ZNQ29YVmZjYjlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw
LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAivkCMA0G
CSqGSIb3DQEBCwUAA4IBAQBq+pA3yx19HQ+dqIEhBAFwprsnLqsjlhc+uj66WiUG
fRaoFKR/VuZNV0S08okN1tzFmrS4b86ElP/adqwqFwoRAMFk8SUO8Q+c8gnAKXR/
mcwCWA3QoJ0niaZRYULoktXLNJQm6pAICd5ZxbkpED2vBm4pHMfwLmP2KaVPR4ap
3I12sXeqXjNYlV6ROR3SqLH2Q8xzMthAtfdXCkSGlvs3bPK2qBBRo/5UynMdbfg8
NYSwx66jIDBd0LaQmWN39QBPU6vKxOGE9eEOaRp6XBy8MBRwzHJK/55ltkfL4Eh5
lo/ExwkxO+QHozGNQuVlcSqptMNxKkykr+x3HXV+c06J
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:59:18 2026 by rpki-client