Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/tj_CjIgpw0hkrTLgLSHAOAJcEDk.roa
File: tj_CjIgpw0hkrTLgLSHAOAJcEDk.roa (raw, json)
Hash identifier: LMA1kS1Sj94sVHiUOqG4VkqMRzEXHUg3yv6i2BIKdEk=
Subject key identifier: B6:3F:C2:8C:88:29:C3:48:64:AD:32:E0:2D:21:C0:38:02:5C:10:39
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019F0D1DAE5F90C4DE493DBA2AF52A539A46
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/tj_CjIgpw0hkrTLgLSHAOAJcEDk.roa
Signing time: Sun 28 Jun 2026 07:24:36 +0000
ROA not before: Sun 28 Jun 2026 07:24:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 147.90.192.0/20 maxlen: 20
147.90.200.0/21 maxlen: 21
2a04:30c0::/32 maxlen: 32
2a06:25c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0d:1d:ae:5f:90:c4:de:49:3d:ba:2a:f5:2a:53:9a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jun 28 07:24:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b63fc28c8829c34864ad32e02d21c038025c1039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5f:b3:f0:92:8c:02:e2:9f:61:10:68:bc:59:
9d:8c:e9:b0:06:3e:74:26:a8:fe:79:b8:25:5a:0f:
da:c4:65:8e:b4:05:e2:8e:aa:4c:a6:30:22:08:d8:
a1:c5:ff:26:cd:5e:b2:82:7d:aa:45:81:d3:13:82:
57:4d:4e:ca:e5:fc:7f:67:ac:e4:f5:ab:56:85:8e:
88:d2:2b:41:19:52:c4:78:9d:50:b4:4d:d3:d0:fb:
84:78:0c:a3:0f:78:35:ee:14:e0:ea:72:66:27:f4:
b1:ce:ea:fb:6a:21:85:60:a6:51:6a:81:01:a0:54:
5b:92:2a:9d:27:69:0c:15:39:2f:27:fc:e6:46:63:
b6:42:1f:72:45:04:a9:e5:7e:7f:c5:7a:f1:87:50:
2a:26:77:ee:39:bf:09:68:97:bf:ff:ae:63:df:d0:
91:32:e6:1b:07:1f:a1:d6:fc:ae:2e:76:d3:c3:d2:
e3:3a:08:ae:bc:f0:90:c5:61:8a:2d:23:d5:0b:4e:
f1:03:96:a1:4a:2d:e7:d4:9d:fc:f4:81:c1:64:7c:
af:2d:ac:1c:07:63:d7:f9:d3:3c:c6:e3:47:fa:d4:
ca:ca:b0:d0:b2:bd:74:b9:7e:99:9c:28:05:29:de:
10:58:8f:51:66:94:dc:3b:21:d6:d4:dd:9e:31:26:
44:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3F:C2:8C:88:29:C3:48:64:AD:32:E0:2D:21:C0:38:02:5C:10:39
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/tj_CjIgpw0hkrTLgLSHAOAJcEDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.192.0/20
IPv6:
2a04:30c0::/32
2a06:25c0::/32
Signature Algorithm: sha256WithRSAEncryption
06:31:f9:48:15:cd:f1:c2:37:77:1d:01:14:e5:63:a2:cd:0f:
ed:d1:9b:bc:a8:b6:3e:68:39:1e:ca:a8:59:9d:89:5a:e9:17:
9b:e1:cb:19:d6:66:81:1d:c7:0b:84:09:69:cd:8e:9a:b7:0b:
19:7f:c4:24:3e:a5:44:8d:19:5f:0b:dc:b2:7d:33:cd:84:14:
7b:02:b1:c5:9e:09:e7:17:32:ac:3e:5e:00:ce:18:ec:31:04:
d2:1f:44:f3:37:81:b8:b6:b5:f7:c2:8f:8d:25:32:58:c6:2f:
a5:88:4b:a6:2f:a2:c9:27:f7:81:39:6b:17:80:9b:76:8a:a9:
05:86:fe:bb:2e:eb:15:87:62:e5:0c:f5:b4:f1:3f:65:96:57:
e8:bf:30:85:bc:84:da:d7:b3:1d:69:d0:af:8b:0c:84:ce:74:
a9:0b:85:88:0f:ff:30:a9:28:8f:c3:96:57:9a:41:2c:9d:8c:
58:42:16:f5:99:2f:5a:89:a2:79:38:cd:8e:ed:6d:00:81:5b:
fa:1e:ab:2c:5b:ee:cd:1a:61:55:e4:b4:6c:0c:87:af:a2:f5:
22:2c:cf:59:84:16:69:94:44:83:f8:22:2a:d2:d5:ad:b1:d2:
b2:c5:f2:3a:95:ce:34:80:03:b9:7f:67:4c:5b:a0:b9:33:68:
2d:4d:e8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:30:58 2026 by rpki-client