Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/tyGZCQrGLjpgKj4WkbXHS2b4tMc.roa
File: tyGZCQrGLjpgKj4WkbXHS2b4tMc.roa (raw, json)
Hash identifier: ItE7bOguG+BdS6odPM38WwfaltkIQcsRe3Hme/srpYs=
Subject key identifier: B7:21:99:09:0A:C6:2E:3A:60:2A:3E:16:91:B5:C7:4B:66:F8:B4:C7
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 019F76B8DCA6A92E0C603B26B1BE699160F4
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/tyGZCQrGLjpgKj4WkbXHS2b4tMc.roa
Signing time: Sat 18 Jul 2026 19:34:14 +0000
ROA not before: Sat 18 Jul 2026 19:34:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199884
IP address blocks: 130.49.185.0/24 maxlen: 24
138.16.140.0/24 maxlen: 24
138.16.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 10:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:76:b8:dc:a6:a9:2e:0c:60:3b:26:b1:be:69:91:60:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jul 18 19:34:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b72199090ac62e3a602a3e1691b5c74b66f8b4c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2d:c8:b7:8d:da:5a:b9:65:cb:ac:d7:21:34:
b9:65:be:3e:c1:f7:0e:06:8c:31:f5:56:9b:02:a8:
6a:9b:92:79:8f:1b:f6:88:14:01:8a:b4:05:2e:88:
5f:b3:e6:e3:02:4a:d7:fb:41:d2:d1:9f:ca:1c:d4:
64:5d:4b:b7:7d:4b:b4:03:35:33:9f:50:8a:ed:85:
e9:51:ab:d0:33:49:c4:e3:78:9a:08:be:95:93:88:
c4:5e:3d:93:4b:5d:5a:84:9a:fb:39:af:74:cd:3a:
5f:4a:a9:59:a0:4b:83:b2:e6:34:e8:9e:ca:15:26:
0b:c0:2d:e7:a0:2d:41:34:20:6d:42:59:bf:b2:03:
8a:ff:47:88:7b:4a:7b:6a:77:a8:69:36:7f:30:20:
38:93:0b:6d:84:d0:12:3e:50:38:12:a2:c0:d2:51:
cb:26:36:d0:54:43:73:90:73:bb:c0:53:ce:a6:f6:
7f:3e:ba:d1:9d:2a:0d:58:a8:d5:a7:f7:8b:37:1b:
86:64:1d:8b:d9:e8:6f:08:81:d4:5b:32:e8:b8:47:
ad:2e:29:66:6e:ae:15:5d:14:7b:c1:3d:4d:75:ab:
bc:7b:39:b0:b2:c5:c6:fa:d5:e5:56:d8:2e:75:31:
b3:60:e1:03:59:7f:e5:e9:71:c1:68:8d:4a:d3:e2:
ef:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:21:99:09:0A:C6:2E:3A:60:2A:3E:16:91:B5:C7:4B:66:F8:B4:C7
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/tyGZCQrGLjpgKj4WkbXHS2b4tMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.49.185.0/24
138.16.140.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:d8:c7:f5:f9:0b:ac:3a:87:05:87:e7:94:68:e0:6b:3c:cc:
d8:e5:69:df:a4:65:9a:eb:af:fa:aa:60:cb:50:5c:70:38:91:
80:7e:19:7b:f6:3b:7f:ae:dc:02:9a:5c:bc:74:88:eb:41:eb:
20:5c:40:f4:25:79:69:d2:9e:87:00:f3:7b:90:7f:a8:94:de:
f3:b8:2d:fc:ea:27:54:e8:18:68:50:7e:31:8f:04:3d:eb:6b:
77:34:8d:8b:d2:6b:d3:2e:df:e7:4b:b0:d5:24:02:85:3b:bb:
e6:94:c1:0b:de:f4:8b:cf:df:50:d8:03:be:08:43:15:4b:e7:
b7:5a:48:23:27:bd:1a:51:6c:d6:44:7d:ef:d6:7b:e6:60:b2:
9b:2a:92:c7:3c:cd:cf:89:41:95:bf:de:04:fc:4f:5c:f8:cb:
07:02:67:8b:1b:33:07:6d:1c:95:3e:20:d9:e2:b4:08:21:a8:
3c:0c:41:75:03:c6:9f:78:97:50:5c:eb:85:bd:8f:e2:9c:8a:
8b:16:9d:84:fa:dc:e1:50:88:74:80:10:64:33:85:9b:5a:ef:
49:22:5e:26:f8:7d:a1:ce:49:67:21:21:f3:f4:49:8e:d9:76:
59:c8:1a:66:83:9b:f7:54:98:4e:05:52:ce:bd:f3:1b:f6:cb:
c2:27:90:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:49:19 2026 by rpki-client