Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/tkHTxtLmTuyg4dowXbSAsheQB3A.roa
File: tkHTxtLmTuyg4dowXbSAsheQB3A.roa (raw, json)
Hash identifier: KKwnNkUUKESPG6r0NpzttgGHPYgCVn7fYIt5seyv1Ic=
Subject key identifier: B6:41:D3:C6:D2:E6:4E:EC:A0:E1:DA:30:5D:B4:80:B2:17:90:07:70
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 019D06A06E21FD50AEB25D265698F5F3DF35
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/tkHTxtLmTuyg4dowXbSAsheQB3A.roa
Signing time: Thu 19 Mar 2026 15:04:30 +0000
ROA not before: Thu 19 Mar 2026 15:04:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213999
IP address blocks: 103.82.102.0/24 maxlen: 24
109.69.61.0/24 maxlen: 24
194.31.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:a0:6e:21:fd:50:ae:b2:5d:26:56:98:f5:f3:df:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Mar 19 15:04:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b641d3c6d2e64eeca0e1da305db480b217900770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:84:08:93:34:46:a6:51:28:4d:ff:7c:1e:18:
bc:6b:5e:34:32:3a:6a:73:07:57:d3:0e:60:06:7b:
22:c4:0d:9f:48:d0:3e:89:a2:cc:f2:6c:3a:4e:96:
8f:f9:cf:5e:ef:99:05:2f:cf:cf:fd:da:46:d2:53:
87:82:26:1d:fb:59:8a:56:3e:8d:71:d2:d1:0c:f9:
93:fe:af:e8:86:cc:3f:11:c1:e8:72:d9:51:3e:32:
98:33:f7:44:a9:64:b3:52:b3:61:98:fe:7d:f7:29:
46:cb:25:24:6e:57:84:55:57:fe:9e:50:fd:52:dd:
6f:c7:58:2d:5a:e1:00:8f:a4:21:27:59:e8:13:11:
5a:35:d1:60:d7:51:02:24:e2:e8:e8:84:6a:22:7b:
82:39:55:ad:89:74:45:85:33:0f:a1:cb:ba:66:ba:
88:a2:a4:96:3d:43:c2:ad:fd:59:04:f6:07:d0:6e:
65:e8:93:af:32:4e:68:52:83:70:3a:a3:66:af:a0:
5b:f0:dc:d9:f2:7d:7e:54:84:d1:3a:2b:7d:a4:fe:
56:a5:52:c8:1e:95:79:47:49:1f:b9:4f:7a:d1:e6:
8b:38:1f:f7:41:d5:28:8c:04:d3:3e:5f:aa:ec:17:
70:11:59:61:28:6c:fb:8e:0e:f4:41:b1:cc:b3:1e:
0a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:41:D3:C6:D2:E6:4E:EC:A0:E1:DA:30:5D:B4:80:B2:17:90:07:70
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/tkHTxtLmTuyg4dowXbSAsheQB3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.82.102.0/24
109.69.61.0/24
194.31.73.0/24
Signature Algorithm: sha256WithRSAEncryption
82:11:12:6f:50:97:f8:41:9c:5f:11:bf:00:39:23:28:98:e2:
05:24:a6:f3:8b:72:f2:72:3e:1f:4d:b1:43:99:43:19:c9:17:
3b:35:77:ad:9a:87:4b:65:c7:4e:ec:11:d5:49:bf:44:56:4f:
6c:7c:87:b3:3e:df:a0:cf:c3:27:a1:40:a7:73:f5:92:e2:b8:
98:6b:0f:1c:8e:3c:54:0c:3c:43:cc:50:49:ce:77:61:3a:ba:
e7:d3:7f:ce:8d:ed:25:a8:d7:ea:0a:b4:19:52:6a:3c:f0:f4:
30:f0:1e:c5:ba:ad:60:79:cf:3a:2e:49:c7:fe:b1:da:30:10:
6d:27:2f:42:01:c3:e8:00:d7:89:4a:32:4a:29:df:b9:e1:89:
1b:b2:3d:e3:30:bd:33:0a:07:b4:1b:4b:fc:92:bd:9b:59:7b:
f7:5a:1d:d4:35:8c:b7:4a:5e:a2:65:2d:3f:e2:4f:00:d5:a1:
07:06:35:4e:de:0b:5f:9f:d2:d5:fd:21:1e:92:6e:35:74:97:
35:85:54:2e:9b:bf:4c:4d:a7:ba:6b:19:43:f5:91:fc:6e:08:
f7:cd:30:09:8e:37:09:71:73:3f:5d:4f:fe:ff:e0:fb:d4:2f:
bc:50:dc:f2:be:49:1b:48:6b:2c:0d:ca:a2:ad:de:e5:41:0e:
ac:c0:97:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:36:50 2026 by rpki-client