Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/tkpI4a7BODes-88GtAQdhnzS798.roa
File: tkpI4a7BODes-88GtAQdhnzS798.roa (raw, json)
Hash identifier: zIdCwkr5D5smrnKU0e1WUc5h5nK/k/2+0cwlpE/n340=
Subject key identifier: B6:4A:48:E1:AE:C1:38:37:AC:FB:CF:06:B4:04:1D:86:7C:D2:EF:DF
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019DCB58CB531EFDB78B024AB1C959A0BDA4
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/tkpI4a7BODes-88GtAQdhnzS798.roa
Signing time: Sun 26 Apr 2026 19:51:27 +0000
ROA not before: Sun 26 Apr 2026 19:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60064
IP address blocks: 2a12:f440::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:35:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cb:58:cb:53:1e:fd:b7:8b:02:4a:b1:c9:59:a0:bd:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 26 19:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b64a48e1aec13837acfbcf06b4041d867cd2efdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f0:68:17:ca:41:77:1c:b8:29:de:9a:1c:73:
99:54:f5:e4:e1:1c:0f:b7:77:8f:00:b6:32:81:a9:
ab:18:b2:7d:01:a3:f4:4c:49:49:d6:0f:06:81:99:
17:a5:27:e9:c2:73:82:99:42:94:c1:6a:b8:db:99:
2d:a8:98:ed:7c:32:eb:c2:49:2b:50:3e:58:9f:86:
1f:30:47:1c:ac:56:40:be:c0:8b:6d:ba:27:3a:c9:
25:d1:54:dc:dc:66:71:ab:97:e8:94:91:09:c6:d1:
69:a5:a7:4d:e6:eb:13:ea:27:8e:ca:34:b5:3d:dd:
ae:6d:95:81:56:b8:9e:5b:99:31:98:7e:c4:bb:e8:
e5:b6:b1:34:c3:4e:9b:57:d4:0c:48:eb:fc:f6:93:
ab:e7:e0:57:66:08:30:96:67:5c:74:fa:94:aa:9e:
9a:0b:f6:ee:14:f1:94:8a:91:4e:67:74:1c:23:be:
f2:2b:77:38:db:d7:80:6c:40:35:bd:5c:8a:fb:ad:
0b:9c:bc:a5:05:90:f1:e1:b5:77:7c:56:64:e5:be:
ea:c5:20:da:4e:d2:5c:f6:cb:f8:09:29:59:0a:aa:
56:28:77:8c:8a:d4:96:57:04:ab:e3:56:44:ab:50:
9f:bf:ad:b5:65:98:e5:26:7e:01:89:ae:0b:9f:1a:
f4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4A:48:E1:AE:C1:38:37:AC:FB:CF:06:B4:04:1D:86:7C:D2:EF:DF
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/tkpI4a7BODes-88GtAQdhnzS798.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f440::/29
Signature Algorithm: sha256WithRSAEncryption
7d:65:68:1e:f6:d7:1c:2a:b6:1a:50:d1:71:05:5b:7e:d2:97:
a5:c5:af:39:9f:50:4f:c2:eb:73:dd:5b:f9:d0:12:4e:2a:aa:
77:e5:1b:4c:36:0a:be:93:bf:41:d6:f2:47:95:76:70:1c:c4:
79:a4:27:34:6f:41:1a:d2:c5:ff:4a:d7:8c:5a:a0:09:99:b0:
ed:5f:7a:ad:33:d3:87:3c:85:12:c2:d6:12:be:c6:75:bd:9b:
f6:4e:b5:83:25:b8:17:40:83:30:49:e2:d3:08:c5:dc:ad:66:
6c:82:b7:ae:a9:9f:eb:ab:a3:cb:f8:28:62:1a:13:0f:e1:3b:
b0:b3:68:63:45:5c:36:8b:a8:81:f1:76:d1:16:39:a9:db:fb:
70:97:dc:82:87:1d:0e:4c:e5:46:29:b3:47:9a:a0:31:4a:6e:
00:4a:82:bb:b9:43:1f:3b:8c:bf:c5:1e:b6:48:8e:44:fb:e2:
de:53:4b:fa:be:0b:ec:b7:67:1a:f4:0c:9d:eb:5a:29:80:80:
ca:5b:42:85:31:d4:7e:ac:b8:31:f4:51:d4:12:f5:4a:2d:5f:
d1:fd:40:1a:f2:3b:9b:b8:4b:85:66:39:43:c4:f4:40:07:6c:
a3:f5:f0:68:11:7d:a6:ef:16:ef:36:07:30:1a:1f:e4:6e:49:
a3:2b:63:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:48:11 2026 by rpki-client