Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/TokjghxikFLY9RmnwmzS9o6lhrs.roa
File: TokjghxikFLY9RmnwmzS9o6lhrs.roa (raw, json)
Hash identifier: lYRO5tQAqjrI1a0B7EQbBMe3RBZOvSjpm5qvo76G7f0=
Subject key identifier: 4E:89:23:82:1C:62:90:52:D8:F5:19:A7:C2:6C:D2:F6:8E:A5:86:BB
Certificate issuer: /CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Certificate serial: 019F8089FB8C2A3BB373155AECA52A111A70
Authority key identifier: 6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/TokjghxikFLY9RmnwmzS9o6lhrs.roa
Signing time: Mon 20 Jul 2026 17:19:14 +0000
ROA not before: Mon 20 Jul 2026 17:19:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30860
IP address blocks: 185.255.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.mft
rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:80:89:fb:8c:2a:3b:b3:73:15:5a:ec:a5:2a:11:1a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Validity
Not Before: Jul 20 17:19:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e8923821c629052d8f519a7c26cd2f68ea586bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:31:c9:1e:a6:45:4f:06:23:f3:48:9b:54:22:
ef:08:73:ce:21:c8:51:2c:75:4f:24:1c:75:33:58:
88:be:ec:d9:12:99:b9:f3:3a:ba:8f:d3:0a:2b:79:
7e:75:9c:39:9d:e1:58:bb:86:5d:d9:0f:52:e6:98:
d8:61:c4:f2:cb:9e:ba:57:ae:95:69:5d:ef:31:69:
03:9d:9a:38:cd:4e:d0:d2:4c:95:ed:73:cb:bb:70:
12:8e:72:20:b9:5a:26:31:44:1b:c3:97:a4:24:ed:
0e:c3:47:49:bc:5c:07:e6:45:8f:18:20:49:1c:76:
f8:ce:0a:58:49:ee:34:e2:9a:40:b9:92:24:18:c5:
d1:8f:30:71:28:9c:98:40:8d:25:29:31:46:b2:42:
70:0c:02:5e:16:78:8d:6c:72:f5:46:e9:b5:e9:6f:
dd:25:e6:04:fd:36:88:53:3e:78:40:d6:ca:f0:e7:
b0:7d:f5:99:ef:c4:fb:59:6c:93:9b:6a:9c:ab:d7:
e1:33:ac:73:52:55:31:cc:ba:39:51:c3:9c:1e:da:
10:4b:98:79:47:ba:07:c6:2a:64:eb:35:73:45:5e:
c0:ef:18:f3:aa:76:d7:36:5b:70:0c:ec:bf:a9:24:
99:39:0f:ed:6c:36:42:3c:62:22:59:d4:17:cd:00:
31:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:89:23:82:1C:62:90:52:D8:F5:19:A7:C2:6C:D2:F6:8E:A5:86:BB
X509v3 Authority Key Identifier:
keyid:6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/TokjghxikFLY9RmnwmzS9o6lhrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.120.0/24
Signature Algorithm: sha256WithRSAEncryption
92:55:c5:2c:b7:d0:79:79:28:18:4e:8b:43:df:fd:79:0a:56:
28:d3:27:28:db:2f:ef:a4:a8:2c:1c:d8:55:ec:9d:9c:cb:71:
08:88:03:24:d1:11:70:73:04:fc:fb:fb:88:49:53:51:c0:65:
40:b3:a6:11:be:77:29:d1:af:09:2f:c5:bb:5d:d5:cc:29:58:
23:1e:08:4c:75:95:27:a8:59:de:5e:7c:ef:8d:5d:d6:7e:f9:
11:c3:31:0f:75:6c:58:93:a0:82:a7:ee:7a:da:33:99:46:10:
f9:fe:17:0a:75:35:84:01:6c:8d:48:d1:64:bf:78:b2:72:85:
49:7e:1f:8d:1d:cc:92:87:00:33:dc:b5:56:96:69:53:68:be:
8a:47:ed:72:09:b8:88:3e:e1:2f:39:2a:96:4a:25:6f:57:62:
02:f3:13:06:9d:38:a9:cd:f5:23:71:e7:ac:a0:45:97:06:4f:
6b:f2:7e:cd:b2:23:83:4f:e2:49:a9:d6:d3:b3:32:2e:56:5b:
54:20:46:a6:85:71:b1:c5:36:b5:40:c7:6c:55:e6:e8:49:0f:
6d:ee:9d:39:60:24:20:8f:8a:f0:eb:fd:a2:2c:02:e4:9c:a6:
1e:e4:c8:e4:e7:8c:ad:4d:a6:c7:42:84:64:b0:d8:40:8d:e3:
fc:97:47:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:55:18 2026 by rpki-client