Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/TlPz1MKXq4927Vc3_arKhGUAAcA.roa
File: TlPz1MKXq4927Vc3_arKhGUAAcA.roa (raw, json)
Hash identifier: YOYsyfWYAf/3wOj2WHCnmybZslDaiohPCuzvv0FjhwU=
Subject key identifier: 4E:53:F3:D4:C2:97:AB:8F:76:ED:57:37:FD:AA:CA:84:65:00:01:C0
Certificate issuer: /CN=b1ee17ac206c106ed2401bceb492591d456605f8
Certificate serial: 019F2368DD38E29A86AE6427779FD4460D01
Authority key identifier: B1:EE:17:AC:20:6C:10:6E:D2:40:1B:CE:B4:92:59:1D:45:66:05:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/se4XrCBsEG7SQBvOtJJZHUVmBfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/TlPz1MKXq4927Vc3_arKhGUAAcA.roa
Signing time: Thu 02 Jul 2026 15:18:22 +0000
ROA not before: Thu 02 Jul 2026 15:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16740
IP address blocks: 130.43.163.0/24 maxlen: 24
2a11:46c0::/32 maxlen: 48
2a11:46c0::/48 maxlen: 48
2a11:46c0:21::/48 maxlen: 48
2a11:46c0:2e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/se4XrCBsEG7SQBvOtJJZHUVmBfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/se4XrCBsEG7SQBvOtJJZHUVmBfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/se4XrCBsEG7SQBvOtJJZHUVmBfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:dd:38:e2:9a:86:ae:64:27:77:9f:d4:46:0d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1ee17ac206c106ed2401bceb492591d456605f8
Validity
Not Before: Jul 2 15:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e53f3d4c297ab8f76ed5737fdaaca84650001c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d0:d2:a0:e3:42:50:8a:be:2f:83:d3:eb:49:
ea:1c:f3:5a:00:36:aa:69:d9:bc:78:fb:78:78:3f:
7e:ac:b0:a4:fe:8a:b0:b3:ed:58:b9:df:89:cb:f1:
d4:66:27:3b:23:a7:cf:e4:30:e4:af:f7:86:8d:3b:
56:83:e4:14:b8:08:e6:df:0c:f5:5a:2e:c9:0e:61:
14:40:76:f3:61:66:c9:a5:52:f2:3f:bf:b0:a8:5d:
50:55:de:11:d4:6f:90:e2:36:4c:00:c1:c0:41:63:
5c:e8:3d:ad:17:c8:59:1b:f9:a8:fd:d0:1f:ca:98:
d8:3c:bd:50:6c:51:be:83:38:9c:41:b4:42:9f:14:
08:fe:30:fd:d7:99:7f:8c:00:a6:09:5b:96:c1:d4:
a3:eb:98:d9:09:29:97:be:6b:1e:fe:78:65:4c:e6:
4d:27:f4:45:16:81:85:88:49:c4:30:0a:1c:3c:67:
6f:a0:f3:68:b9:aa:19:47:25:f7:66:89:5d:7d:14:
9a:fe:8d:34:57:0f:85:2a:52:90:8d:50:aa:29:56:
85:64:50:86:53:85:fe:49:c2:0d:5c:e8:22:36:c6:
98:de:f3:f1:76:c9:d8:89:9e:2a:a1:0a:45:cb:b9:
36:a7:26:f0:95:e6:fc:89:ec:19:d0:b8:b1:42:60:
eb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:53:F3:D4:C2:97:AB:8F:76:ED:57:37:FD:AA:CA:84:65:00:01:C0
X509v3 Authority Key Identifier:
keyid:B1:EE:17:AC:20:6C:10:6E:D2:40:1B:CE:B4:92:59:1D:45:66:05:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se4XrCBsEG7SQBvOtJJZHUVmBfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/TlPz1MKXq4927Vc3_arKhGUAAcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/se4XrCBsEG7SQBvOtJJZHUVmBfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.43.163.0/24
IPv6:
2a11:46c0::/32
Signature Algorithm: sha256WithRSAEncryption
7b:ec:58:c2:c1:95:32:53:c7:31:7c:e6:ae:e6:39:e0:2b:7f:
e4:17:a3:06:24:25:cf:73:22:eb:6b:c4:5a:ef:2b:f5:f0:da:
6b:b3:82:68:15:54:e8:f2:75:43:69:45:28:82:e7:fe:93:77:
f5:7a:34:d9:22:6f:98:5a:ce:84:5c:8b:cb:2c:15:0d:c9:56:
df:fa:78:64:1a:5f:c4:d5:e6:6b:76:1a:3c:0d:95:f9:cc:d7:
14:d9:3c:c3:bc:4e:e4:f9:82:3d:bd:66:3d:94:c2:99:ee:d2:
52:23:75:32:b2:f6:cd:98:4c:62:6c:08:34:52:ae:98:c2:c3:
16:29:82:88:46:44:1a:c1:6d:79:db:a4:1a:91:16:23:fa:2b:
ee:01:d8:39:bb:a4:bc:a7:d8:87:9e:ec:65:a6:31:2e:56:4e:
45:7a:28:f7:f2:5a:2c:91:99:82:82:f6:67:42:d2:89:d1:0d:
cf:97:1a:f7:18:57:26:91:1d:fb:46:c7:c2:70:5e:4d:32:33:
17:12:a4:1f:a7:37:7b:0d:f2:6c:e7:67:c4:9a:6d:7f:df:7c:
97:c8:7b:8c:6c:68:32:8e:ff:a2:ca:fb:d6:45:f0:6a:e5:6e:
4d:a8:6b:59:75:68:e1:f1:fa:48:20:45:43:06:af:8f:7d:60:
e1:e4:72:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:04:04 2026 by rpki-client