Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/tv1MIiLBWtTep28xgfUncRsRxQo.roa
File: tv1MIiLBWtTep28xgfUncRsRxQo.roa (raw, json)
Hash identifier: SVQkW7iwcVnllH25dvnpgtPlezpSLw31gKgc/3GpQME=
Subject key identifier: B6:FD:4C:22:22:C1:5A:D4:DE:A7:6F:31:81:F5:27:71:1B:11:C5:0A
Certificate issuer: /CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Certificate serial: 019B7EA73B93B8384667218DF7C60E80F24E
Authority key identifier: F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/tv1MIiLBWtTep28xgfUncRsRxQo.roa
Signing time: Fri 02 Jan 2026 12:20:47 +0000
ROA not before: Fri 02 Jan 2026 12:20:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209217
IP address blocks: 92.119.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a7:3b:93:b8:38:46:67:21:8d:f7:c6:0e:80:f2:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Validity
Not Before: Jan 2 12:20:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b6fd4c2222c15ad4dea76f3181f527711b11c50a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ec:0a:f5:8a:2d:f3:f2:7f:6f:13:6e:6a:1b:
d4:a6:eb:fc:96:57:55:fd:21:24:b5:d6:dc:85:a8:
84:77:aa:00:fe:a8:a2:34:18:b2:fd:c7:cc:aa:57:
6c:33:6f:56:dc:46:fb:0d:81:ad:3e:8b:7a:43:29:
df:48:33:22:c8:86:74:66:46:cd:f7:61:94:06:70:
5f:9f:f7:19:67:d8:cf:d6:27:6f:cd:15:7b:39:85:
62:dd:31:b5:b8:43:d1:b9:27:5a:b5:61:c4:19:ee:
32:c6:1c:dd:56:54:c8:76:7d:82:d5:77:28:12:f4:
75:e1:67:5e:19:fa:a4:1a:1f:05:48:3d:ad:3b:1b:
bc:ed:2e:6f:62:75:ab:06:16:51:ad:7d:c4:51:fa:
d1:1f:2e:8f:eb:d7:e5:99:1c:4f:a7:46:c6:eb:dc:
35:0d:88:bf:29:fd:7a:50:7d:33:76:38:fa:b2:6a:
99:00:49:01:6c:6c:68:9c:7e:8a:35:fa:37:12:7c:
0f:66:85:89:33:1e:5f:dd:ee:8b:a9:af:14:19:e7:
96:54:d3:a2:4f:60:97:b8:1d:39:78:02:be:f0:bb:
56:5d:3a:37:73:1e:3a:d0:64:99:d3:84:f5:33:cc:
20:5d:40:cc:3a:8d:d9:a4:6e:8e:c2:5a:b4:94:cd:
97:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FD:4C:22:22:C1:5A:D4:DE:A7:6F:31:81:F5:27:71:1B:11:C5:0A
X509v3 Authority Key Identifier:
keyid:F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/tv1MIiLBWtTep28xgfUncRsRxQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.219.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:07:ee:80:3f:0b:80:c7:f1:f6:ba:a5:97:d3:f8:f2:a6:82:
cc:65:1f:19:b1:29:59:0a:0b:e7:08:a4:79:95:eb:11:61:8b:
ed:73:fb:ff:04:58:24:d2:b3:94:56:d0:ec:2d:61:c6:23:1f:
2a:fd:42:e0:d8:b5:e5:88:20:7e:29:ad:c5:3b:3b:89:bf:fb:
4c:ea:b0:ea:65:23:4c:31:e1:a5:ff:b1:ab:b8:ca:96:c5:03:
6d:37:8e:c3:50:0d:d5:41:14:8a:1b:d2:e7:03:9b:6c:6e:1d:
1f:ca:4f:a7:35:54:3d:0b:6c:c5:9a:8d:5b:d9:69:c4:f4:01:
a1:74:ff:ae:80:60:38:50:05:8b:fd:03:16:87:f4:35:fc:62:
b0:19:5d:ca:9b:f2:8a:22:65:87:56:92:b5:3d:5b:1a:55:83:
c2:cc:8b:6e:8c:53:36:99:e1:1e:35:ce:ae:7d:a6:ad:3f:95:
56:de:87:48:56:dd:6d:be:78:1b:31:48:ef:9c:77:65:80:2a:
51:12:dc:0c:22:fb:a4:c0:f2:ce:93:33:ea:59:50:e6:96:4c:
8e:dc:53:77:ff:fa:32:6f:59:3d:65:9e:31:73:ff:24:c2:7d:
e9:57:1f:b5:93:b7:5d:34:ab:d8:6a:56:0d:10:d0:16:6e:01:
6f:ae:5a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:52:37 2026 by rpki-client