Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/tiWoclLyoubi_eH2eBTEmg_nRPQ.roa
File: tiWoclLyoubi_eH2eBTEmg_nRPQ.roa (raw, json)
Hash identifier: v7vNaiqbe+aP8/SaLVbx8mliFyA9s414yzNmBa2a+SI=
Subject key identifier: B6:25:A8:72:52:F2:A2:E6:E2:FD:E1:F6:78:14:C4:9A:0F:E7:44:F4
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 019EB18091B055F5320E01B965DC0E6C9408
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/tiWoclLyoubi_eH2eBTEmg_nRPQ.roa
Signing time: Wed 10 Jun 2026 12:27:33 +0000
ROA not before: Wed 10 Jun 2026 12:27:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62610
IP address blocks: 2a11:c40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b1:80:91:b0:55:f5:32:0e:01:b9:65:dc:0e:6c:94:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Jun 10 12:27:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b625a87252f2a2e6e2fde1f67814c49a0fe744f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:11:cb:9e:9f:62:b8:da:c3:d2:97:71:44:33:
95:6a:c1:d6:c8:40:c5:ad:4b:9c:9e:36:97:d3:f3:
f5:bc:a3:64:09:a3:cb:d3:ff:da:12:b8:2f:dc:ae:
87:62:14:c9:19:17:79:39:0f:cf:ff:d4:4a:90:09:
78:6b:47:eb:be:63:89:da:6a:16:5a:49:55:23:41:
92:29:e5:20:df:7e:26:92:83:5e:69:c4:8d:e3:26:
72:6c:d3:60:04:33:71:2d:6a:7c:4d:c1:41:ac:c8:
11:a9:6b:0c:7b:69:fa:82:e1:c0:06:08:c4:d4:bb:
25:5d:c2:47:a1:e6:d1:59:04:f3:58:7c:2b:3c:a7:
46:1f:84:a2:78:b7:76:d0:86:66:df:27:a8:18:0d:
20:2a:c9:b5:43:d2:3f:56:ac:77:c0:ef:e4:57:64:
0d:6f:56:de:5d:98:9e:dc:ea:d4:4c:05:6c:20:7e:
3a:6c:21:4a:3e:40:6e:f8:fb:26:32:5c:92:09:49:
17:44:d4:1a:48:ae:45:a3:c4:bf:cf:3c:ac:6e:9d:
b3:cb:5c:03:31:19:6e:45:e4:02:57:a5:94:bc:6f:
15:98:87:24:5b:5e:62:a7:13:cc:96:17:4f:45:ea:
f6:0e:9b:1c:bb:4d:c0:dd:7c:94:2d:3a:68:8c:d2:
6f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:25:A8:72:52:F2:A2:E6:E2:FD:E1:F6:78:14:C4:9A:0F:E7:44:F4
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/tiWoclLyoubi_eH2eBTEmg_nRPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:c40::/29
Signature Algorithm: sha256WithRSAEncryption
15:27:c2:61:2a:cf:3a:69:ea:79:18:08:49:6f:e8:fc:7e:58:
80:c7:7a:9d:e7:5a:41:0c:da:9a:36:aa:ce:a1:1e:2b:cb:9a:
b2:15:de:01:fa:01:7c:e6:6d:f5:23:6b:35:cb:f8:43:01:05:
57:3a:b4:e0:18:21:15:66:90:34:0c:ad:b0:aa:02:88:0d:d9:
3f:99:df:b6:08:cf:03:e4:e9:dc:71:66:be:28:ca:00:d7:f7:
5e:a2:97:1f:02:57:e6:3a:de:aa:63:5a:ae:a6:7b:38:2b:86:
78:f9:9e:d5:a9:1e:2b:44:15:e3:83:34:23:2e:82:bb:12:88:
31:8c:0a:da:36:a4:42:3c:11:72:b5:83:b2:50:a7:a4:2e:21:
e4:94:88:a2:96:33:ae:59:ed:40:4e:ad:c3:88:4e:22:0f:e1:
e4:4b:40:d2:82:f1:7c:63:5b:e0:ce:27:63:0a:d8:76:d6:89:
f1:24:f1:cb:63:80:75:88:48:aa:aa:c3:48:d4:e6:7b:ff:1a:
21:32:f3:3b:97:48:a4:55:af:64:4a:0a:9a:9b:0e:68:ca:07:
29:6c:c5:61:0c:39:ad:83:73:7c:87:80:2f:30:95:b2:71:d1:
84:71:37:43:7a:84:c5:a7:b6:c6:15:bf:33:3b:31:52:e6:18:
b3:48:55:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:08:43 2026 by rpki-client