Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tFNoCvw9HYCrtZV5yr-M-6rUHmA.roa
File: tFNoCvw9HYCrtZV5yr-M-6rUHmA.roa (raw, json)
Hash identifier: Xnq4r13lagE2sQ4IPeUB5jj7VyVhoMHz0umUI4YNTLY=
Subject key identifier: B4:53:68:0A:FC:3D:1D:80:AB:B5:95:79:CA:BF:8C:FB:AA:D4:1E:60
Certificate issuer: /CN=b66779f2055b254f5d5b3292eeaf0dd5797737a6
Certificate serial: 019B7EA6E9828D3E7CA7083A8BE6BE5E30DD
Authority key identifier: B6:67:79:F2:05:5B:25:4F:5D:5B:32:92:EE:AF:0D:D5:79:77:37:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tFNoCvw9HYCrtZV5yr-M-6rUHmA.roa
Signing time: Fri 02 Jan 2026 12:20:26 +0000
ROA not before: Fri 02 Jan 2026 12:20:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198425
IP address blocks: 194.31.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a6:e9:82:8d:3e:7c:a7:08:3a:8b:e6:be:5e:30:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66779f2055b254f5d5b3292eeaf0dd5797737a6
Validity
Not Before: Jan 2 12:20:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b453680afc3d1d80abb59579cabf8cfbaad41e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6e:58:00:fe:53:c6:e8:55:ce:cc:a7:5c:4b:
79:8a:f8:4d:3b:b4:81:8e:58:50:b5:03:56:be:31:
c1:d6:d0:bb:50:fe:57:f4:09:b8:d9:71:04:35:60:
e2:65:f7:d9:6b:4d:7a:6e:67:c6:e9:66:85:dd:c9:
11:f9:0c:c4:cf:ce:29:28:d1:7a:0d:74:c8:63:92:
a5:6b:87:7a:d5:bb:b7:7b:80:8b:d7:8c:d1:08:74:
ba:dd:6f:d1:dc:2c:57:0e:f6:e3:32:23:ea:b3:65:
b8:d0:d0:1a:5f:b1:e6:2c:21:c2:73:94:5d:07:0b:
69:03:aa:4b:e8:da:29:d0:00:4b:5e:09:32:a4:03:
3b:02:c2:d0:08:ef:cc:71:ae:3f:81:f7:f2:d2:62:
d7:8d:28:13:b2:f1:de:e3:3b:3c:82:17:59:6b:c8:
6a:54:8e:f5:2f:ed:38:29:b4:72:77:5d:b3:61:4a:
f6:79:23:e9:68:c3:7e:87:15:2c:9b:d1:6d:0e:5d:
c1:bf:7c:ea:a0:0d:5d:07:4c:e3:8c:c1:0b:25:6d:
6c:bb:87:ec:11:bf:57:7e:c6:7d:30:d3:c7:d7:5a:
29:5d:1b:a7:36:3c:33:8e:9d:b6:1a:6c:0a:d6:1c:
9a:81:4f:45:0b:37:be:d9:1f:c9:4e:4b:a2:d4:5f:
a4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:53:68:0A:FC:3D:1D:80:AB:B5:95:79:CA:BF:8C:FB:AA:D4:1E:60
X509v3 Authority Key Identifier:
keyid:B6:67:79:F2:05:5B:25:4F:5D:5B:32:92:EE:AF:0D:D5:79:77:37:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tFNoCvw9HYCrtZV5yr-M-6rUHmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.58.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:9f:a7:e9:28:93:a6:1e:4f:aa:02:25:00:12:b5:b6:1f:68:
1a:a1:70:5a:a1:6f:2a:79:e8:17:72:b1:8b:a4:a8:e2:8e:32:
79:de:1d:5b:0c:a5:07:f6:eb:0b:63:40:d6:5c:5a:c1:8e:7b:
80:b4:ee:25:7b:79:88:c6:4d:4c:d8:93:43:30:41:2c:77:bf:
6a:fe:04:b6:ca:64:6f:d3:b1:f1:c7:3d:83:7c:72:d4:72:58:
d7:b7:d2:5e:d3:c0:a5:bc:0c:93:bc:09:b9:c4:41:19:1c:79:
fb:87:08:e5:f4:dc:89:ce:d2:49:e8:84:78:9f:0b:c8:04:a2:
d2:5b:e0:14:0f:ea:68:b5:e6:5c:9f:57:ce:49:6e:bb:29:99:
63:0c:37:76:40:9a:bf:b1:92:1a:b0:18:70:d0:76:5e:1c:47:
e7:fe:c8:05:b3:a0:f8:e4:87:e5:91:37:ce:8c:56:79:f3:af:
c0:2e:21:06:87:cc:17:02:cd:6c:95:f0:c9:7e:a9:ca:7d:ec:
43:e1:65:aa:03:24:a9:20:72:6f:40:76:db:ff:65:16:d2:84:
e7:33:f9:fc:d7:d0:6d:9a:ee:26:41:7a:e6:ee:ee:77:11:ae:
96:94:21:08:0e:22:be:35:f3:12:73:e2:6a:06:33:5c:01:13:
85:e6:d1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:34:05 2026 by rpki-client