Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/TJmjHk7-IfOVndDk-rv5dxnB-Hg.roa
File: TJmjHk7-IfOVndDk-rv5dxnB-Hg.roa (raw, json)
Hash identifier: Y93GXNgXRGo/l+Ahm8qFGyYePtPybIuW3rty/z9Parw=
Subject key identifier: 4C:99:A3:1E:4E:FE:21:F3:95:9D:D0:E4:FA:BB:F9:77:19:C1:F8:78
Certificate issuer: /CN=2f2606492d4edbbdacce6dc921f386d6274cf116
Certificate serial: 019D0D7512FC04E5E2FD9FC5BFF7408F0A63
Authority key identifier: 2F:26:06:49:2D:4E:DB:BD:AC:CE:6D:C9:21:F3:86:D6:27:4C:F1:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyYGSS1O272szm3JIfOG1idM8RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/TJmjHk7-IfOVndDk-rv5dxnB-Hg.roa
Signing time: Fri 20 Mar 2026 22:54:29 +0000
ROA not before: Fri 20 Mar 2026 22:54:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50882
IP address blocks: 194.28.8.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyYGSS1O272szm3JIfOG1idM8RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0d:75:12:fc:04:e5:e2:fd:9f:c5:bf:f7:40:8f:0a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2606492d4edbbdacce6dc921f386d6274cf116
Validity
Not Before: Mar 20 22:54:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c99a31e4efe21f3959dd0e4fabbf97719c1f878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:24:97:88:8c:9c:dc:25:ab:9a:c1:e1:1f:25:
9f:5b:47:72:8b:b1:69:f9:bf:e7:7d:7a:aa:f4:d2:
c6:0d:02:0a:fd:10:74:16:b2:68:f6:13:50:3d:57:
a8:a4:22:27:53:cd:07:8b:08:8c:62:1b:48:a3:68:
54:34:57:7b:25:1e:d5:41:2c:52:95:c5:fa:20:0e:
72:4a:ea:92:af:80:87:91:06:44:aa:d6:ac:bd:6b:
65:43:55:17:90:46:4f:4c:73:9e:9c:15:ea:77:72:
36:0d:8d:32:05:d6:d8:f8:6e:c7:70:66:f4:5d:22:
4b:33:8e:63:0e:54:49:0f:4f:39:42:52:10:55:69:
83:f4:d4:a3:e1:bb:7b:21:6f:e7:24:ba:81:cc:2e:
a9:28:86:ed:80:5e:c7:28:20:b3:05:aa:1a:c1:1f:
01:a1:0a:d4:4f:e7:27:4b:b2:71:c3:38:68:10:b8:
af:cc:42:c1:01:70:df:da:f9:88:e5:12:9e:8f:df:
22:59:9e:fc:97:40:70:00:03:e4:00:a3:e6:d7:83:
5e:17:07:93:f6:87:b3:38:19:c6:e5:60:41:5b:53:
c7:3f:d5:51:4c:03:8b:2c:8b:08:0c:fc:3e:f6:62:
38:8a:29:9d:f0:e2:13:f3:40:7f:ef:da:c0:32:af:
6e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:99:A3:1E:4E:FE:21:F3:95:9D:D0:E4:FA:BB:F9:77:19:C1:F8:78
X509v3 Authority Key Identifier:
keyid:2F:26:06:49:2D:4E:DB:BD:AC:CE:6D:C9:21:F3:86:D6:27:4C:F1:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyYGSS1O272szm3JIfOG1idM8RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/TJmjHk7-IfOVndDk-rv5dxnB-Hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/61acf5-baf7-4455-b761-094ffe00b879/1/LyYGSS1O272szm3JIfOG1idM8RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.8.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:26:b8:e0:65:5e:b3:d1:ab:0c:d0:37:b0:25:5e:fc:cd:4b:
9e:c5:1a:1e:20:e4:24:f1:34:16:a2:1b:87:28:3c:60:0b:4b:
47:dd:88:f1:d7:3b:fb:cc:b3:6b:55:fb:78:cb:0b:37:cb:df:
ea:9a:4e:af:af:1c:11:3f:d9:50:6e:13:17:0a:40:4e:de:b4:
59:e2:4e:aa:a7:e7:a3:1f:01:9f:09:ce:a7:c2:de:24:c2:58:
ff:95:9c:c4:a1:b9:27:6f:49:bf:03:d7:75:38:4f:28:e5:ab:
7d:09:41:ce:1c:67:68:13:7a:99:c2:9b:d5:93:4b:3f:04:00:
77:7a:97:7d:f6:32:f5:f8:14:d9:f7:86:92:55:b7:34:13:1a:
a0:5e:26:69:2d:c9:1a:94:6a:f7:8b:25:7e:a8:a3:72:0f:c5:
30:0b:b7:81:3b:69:6a:64:fe:25:4f:c9:1c:e7:0d:bc:84:a8:
53:5a:3d:7f:5d:a2:b6:53:e9:bb:1b:8b:59:a9:b9:d7:09:be:
c0:bb:50:ef:62:f5:26:fd:c5:08:84:60:47:3c:f1:e1:ce:6b:
c6:90:3d:f7:3c:e3:f6:9b:c1:f3:d2:4f:ab:39:2d:3f:10:b1:
be:59:e3:59:30:c8:97:69:d9:3c:5a:25:ce:c6:d4:47:7f:36:
d1:fe:e6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:18:53 2026 by rpki-client