Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/btl4GN8vztirW4WSg5aCV4PRy5s.roa
File: btl4GN8vztirW4WSg5aCV4PRy5s.roa (raw, json)
Hash identifier: TmhxDCmAzWn47wjYNPJYsjzmopIz6nDoUhl3u7q0O6c=
Subject key identifier: 6E:D9:78:18:DF:2F:CE:D8:AB:5B:85:92:83:96:82:57:83:D1:CB:9B
Certificate issuer: /CN=4c90bf56078074828256675949a0c23a251784b1
Certificate serial: 019F23685F9716373F508C1C4C8491231695
Authority key identifier: 4C:90:BF:56:07:80:74:82:82:56:67:59:49:A0:C2:3A:25:17:84:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJC_VgeAdIKCVmdZSaDCOiUXhLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/btl4GN8vztirW4WSg5aCV4PRy5s.roa
Signing time: Thu 02 Jul 2026 15:17:50 +0000
ROA not before: Thu 02 Jul 2026 15:17:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203779
IP address blocks: 2.58.24.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/TJC_VgeAdIKCVmdZSaDCOiUXhLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/TJC_VgeAdIKCVmdZSaDCOiUXhLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJC_VgeAdIKCVmdZSaDCOiUXhLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:5f:97:16:37:3f:50:8c:1c:4c:84:91:23:16:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c90bf56078074828256675949a0c23a251784b1
Validity
Not Before: Jul 2 15:17:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ed97818df2fced8ab5b85928396825783d1cb9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8c:70:e5:ea:88:19:41:bc:4c:7f:7f:2d:7b:
81:b8:c7:23:06:06:de:90:b0:40:24:ce:43:e6:15:
32:25:cd:d4:18:75:26:d9:6e:ed:2b:75:8f:4a:ff:
8e:71:2c:72:29:f9:66:e7:6e:2f:bb:0c:04:45:75:
2c:28:fd:c1:e5:58:79:a2:b0:47:f4:50:53:d7:02:
f2:d8:8d:38:16:1f:4d:d4:a1:a4:16:c7:53:59:a7:
e1:12:2d:8a:73:1b:b2:7a:d8:fb:f8:95:d0:fd:83:
e6:ba:54:9b:51:6b:aa:12:14:75:44:03:63:ad:6e:
29:12:87:09:6b:66:6f:7b:7e:a0:9a:65:06:13:62:
2e:4b:68:0e:3b:1b:c5:85:ab:10:b9:04:57:85:27:
fe:9f:97:53:85:b4:81:29:47:e6:34:02:8b:0a:86:
9f:01:47:98:22:4f:82:43:d6:54:1e:1d:31:e5:b0:
b8:8f:b1:16:f9:4e:b7:35:bc:13:3b:49:32:dd:7c:
50:00:6a:ce:d8:ad:6f:a1:43:89:8c:10:69:45:bd:
d8:63:cb:24:71:27:64:b3:8f:27:fc:83:9c:91:c4:
9d:01:e5:b3:9e:0b:19:5e:4f:72:9b:16:0b:0f:5d:
c4:42:d5:76:62:e1:8d:c3:72:16:2b:1f:2f:20:61:
fe:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D9:78:18:DF:2F:CE:D8:AB:5B:85:92:83:96:82:57:83:D1:CB:9B
X509v3 Authority Key Identifier:
keyid:4C:90:BF:56:07:80:74:82:82:56:67:59:49:A0:C2:3A:25:17:84:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJC_VgeAdIKCVmdZSaDCOiUXhLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/btl4GN8vztirW4WSg5aCV4PRy5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/TJC_VgeAdIKCVmdZSaDCOiUXhLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.24.0/23
Signature Algorithm: sha256WithRSAEncryption
71:f2:02:19:5f:89:a4:36:1d:45:7b:c1:85:bc:0c:e9:61:0e:
56:f8:3d:ce:22:ba:90:8a:44:ef:5f:a7:a9:59:86:3b:77:81:
72:29:0c:20:8c:2a:0b:c9:a8:6c:e0:9f:06:1b:9e:8b:9a:77:
1e:81:9f:4a:0a:6d:10:a0:05:99:b9:c0:16:fa:d0:9a:38:70:
65:79:b7:fc:79:9f:73:05:62:32:7d:18:41:19:b7:19:fd:95:
c9:2d:80:40:8d:c6:38:c5:4c:0c:4d:c1:3f:58:0a:4c:0f:b7:
b5:57:4c:8b:87:97:d4:e4:6f:8b:1e:95:58:1c:ba:0b:ba:2d:
d2:15:e1:1c:2c:1d:9e:02:10:bd:4a:be:21:9f:50:46:0b:2d:
7e:0d:72:c7:2a:03:1e:a4:92:7c:70:51:97:27:5c:a3:4f:38:
53:fa:0c:c3:db:d9:b8:a4:ef:7b:7f:f2:c2:07:c6:77:e0:16:
c8:c6:4a:ad:86:f9:5b:fc:1b:90:e6:b8:75:97:fe:f9:c9:13:
b1:45:7d:39:61:8f:4e:6d:5e:a6:09:86:fe:83:bf:08:9a:34:
90:c9:33:9d:d8:b1:fb:f7:f5:ef:c1:4a:d7:b4:a5:c8:25:25:
3a:fa:f3:49:1a:bd:28:5e:62:3d:6e:c3:ca:68:62:9b:87:c4:
57:79:3c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:49:36 2026 by rpki-client