Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TIGLIQimGNFDN1tCuxoCJuluwvM.roa
File: TIGLIQimGNFDN1tCuxoCJuluwvM.roa (raw, json)
Hash identifier: YLC4OxByAWXtpLYjpgeGHUmJR8Y3zx4YbHboDc/uKH8=
Subject key identifier: 4C:81:8B:21:08:A6:18:D1:43:37:5B:42:BB:1A:02:26:E9:6E:C2:F3
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A0C87D93B18453E07529D9394C71AE74EE
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TIGLIQimGNFDN1tCuxoCJuluwvM.roa
Signing time: Tue 22 Sep 2026 09:41:07 +0000
ROA not before: Tue 22 Sep 2026 09:41:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218688
IP address blocks: 45.13.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 18:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:7d:93:b1:84:53:e0:75:29:d9:39:4c:71:ae:74:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 22 09:41:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c818b2108a618d143375b42bb1a0226e96ec2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c3:d9:63:65:74:37:92:33:31:a7:02:e0:cf:
09:8d:09:7c:05:46:d9:18:bd:dc:d3:54:4d:c3:f9:
c8:eb:6a:7e:e8:9b:69:9a:c8:41:ca:9e:1f:f1:c9:
66:b4:13:28:1a:c3:9b:d5:f3:0a:19:cc:5c:0a:70:
c6:73:7f:88:23:55:d1:8b:06:21:65:3c:82:60:21:
f9:00:d8:45:e4:22:3e:fe:b4:59:63:c7:24:34:cf:
1e:54:ae:e5:7c:8e:fc:5d:c9:35:ce:02:a4:16:32:
d5:29:69:40:78:15:d5:0c:68:19:b2:c1:08:52:d2:
e8:94:a7:ad:c0:ac:1c:e7:2d:fa:67:6a:11:a0:2f:
10:a4:6e:7c:50:37:c7:0f:bf:9a:a8:47:c6:cc:90:
0a:3d:3b:d6:d8:3c:d9:4d:e2:2a:ef:c4:51:5f:13:
e5:af:8a:5d:10:ad:cd:78:7c:79:96:f5:51:8f:ca:
32:27:f2:05:66:57:07:d9:49:7d:a1:33:e1:ee:27:
fd:ce:d8:52:b1:13:9a:b9:d2:01:52:c3:07:b2:77:
08:67:f3:5e:09:b4:13:19:f6:64:2f:c1:f6:cb:4c:
73:52:23:a1:b1:b3:69:36:7b:07:ee:4c:e5:b8:c7:
83:26:db:45:2e:09:a4:93:3d:7f:ca:b6:2d:c2:66:
44:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:81:8B:21:08:A6:18:D1:43:37:5B:42:BB:1A:02:26:E9:6E:C2:F3
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TIGLIQimGNFDN1tCuxoCJuluwvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.186.0/24
Signature Algorithm: sha256WithRSAEncryption
15:e4:0f:f7:14:96:8a:1a:10:58:29:63:fe:a6:f5:f9:82:0e:
b5:bf:47:70:bc:1f:f8:db:03:40:b7:2f:c8:4c:de:c4:d2:4c:
03:22:60:cf:a4:5f:f4:f6:a2:df:a7:0d:cc:6e:ff:1c:25:60:
04:9f:76:95:49:85:12:73:35:9d:5e:1b:0c:97:5f:b8:1a:54:
67:fe:7d:71:83:30:b3:e4:08:75:56:f1:7f:b0:a8:52:2c:36:
4e:05:9c:f4:3e:1f:1b:b4:1b:e9:b6:62:9e:53:3e:57:6b:c7:
6f:6e:b4:f0:f4:4d:0d:2f:57:04:28:63:ee:c0:58:f0:11:23:
0c:33:0f:8d:d1:b4:b2:2b:86:bb:8b:a5:06:1c:29:ce:f8:b0:
21:5c:5d:39:11:c3:3e:ff:a4:93:70:33:7d:5e:d9:57:9c:6b:
8d:c5:59:e7:30:e5:a8:21:a1:82:be:1c:2a:b3:07:1c:ec:c1:
7a:87:5a:68:7a:ad:ff:c9:30:e8:1c:56:ef:f5:1b:c5:2f:f0:
68:40:bb:d7:99:bd:82:a3:13:6c:0a:1e:5c:26:55:58:67:61:
7d:8c:c1:48:02:6d:39:98:e7:f8:ef:b8:79:04:c8:d3:f7:80:
6a:12:9f:0d:3c:3c:ef:d2:54:78:44:3b:99:ae:8f:f0:80:88:
00:29:87:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:47:53 2026 by rpki-client