Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/TQr2n5dfaJ2zFhG3O3NqS3QGSnQ.roa
File: TQr2n5dfaJ2zFhG3O3NqS3QGSnQ.roa (raw, json)
Hash identifier: J29HHxpLfkVMAzAZT19sqhhvDUZr7qN6c/Vw50GH2vA=
Subject key identifier: 4D:0A:F6:9F:97:5F:68:9D:B3:16:11:B7:3B:73:6A:4B:74:06:4A:74
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 019CA8F31012B1F8D2CAD8C87257103E94F0
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/TQr2n5dfaJ2zFhG3O3NqS3QGSnQ.roa
Signing time: Sun 01 Mar 2026 10:30:27 +0000
ROA not before: Sun 01 Mar 2026 10:30:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201950
IP address blocks: 45.13.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:f3:10:12:b1:f8:d2:ca:d8:c8:72:57:10:3e:94:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Mar 1 10:30:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d0af69f975f689db31611b73b736a4b74064a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3f:fb:1f:ca:4a:45:24:f5:1c:a0:5b:e9:43:
98:d5:20:31:69:37:cd:a7:1a:95:b2:b5:c5:69:24:
7a:24:c2:3f:5f:02:7a:fb:43:3c:3e:94:a5:30:c6:
c2:60:6c:3a:43:cf:b0:4c:d9:86:5e:9c:25:92:01:
39:d2:38:48:d7:45:03:04:46:1b:44:26:d0:0f:0d:
f5:b3:dd:45:25:76:55:06:62:8f:36:a1:8f:dd:0c:
fd:3e:c5:0b:cf:3d:3b:80:b4:f4:95:bf:83:62:f2:
1d:18:22:21:a1:c6:f2:36:4b:d8:2b:82:4f:ea:e9:
53:21:55:b4:ba:40:c4:8f:66:dd:92:9e:6f:cb:de:
85:b3:79:1a:57:ae:60:21:35:5f:52:83:10:77:e8:
50:d9:2f:12:e9:d5:f9:b8:98:e4:ae:36:5a:3a:13:
34:4c:39:16:ee:f3:a3:a3:18:40:27:a3:25:f3:a5:
20:91:04:f4:8b:8a:41:c2:d6:a2:3a:ae:8f:66:ee:
13:dd:63:7f:b0:24:2d:a5:70:37:cd:0c:25:9c:ce:
d4:e8:93:5f:99:12:25:d0:e6:7f:5b:ed:c2:f5:d3:
78:7d:c7:51:9b:b9:ed:9c:76:07:08:2c:b6:cf:53:
59:21:15:54:65:5b:ca:b1:73:d9:41:b4:3b:a2:f0:
3f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:0A:F6:9F:97:5F:68:9D:B3:16:11:B7:3B:73:6A:4B:74:06:4A:74
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/TQr2n5dfaJ2zFhG3O3NqS3QGSnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.118.0/24
Signature Algorithm: sha256WithRSAEncryption
31:44:58:9e:40:6f:31:ae:67:fd:d7:78:64:fb:01:41:2e:62:
dc:f0:3c:5f:00:83:22:02:a5:50:02:f4:9a:cc:04:5d:20:ea:
ad:f8:2d:ab:57:ea:79:cb:ca:17:83:74:b7:b8:52:ea:b0:4e:
9e:ab:93:49:c9:6e:0a:85:2f:23:67:6d:4e:90:cf:20:e1:13:
75:c0:8b:af:04:af:5f:75:38:6a:5d:a4:61:8e:af:b9:12:79:
ca:9d:4e:c3:36:9b:2e:11:48:57:2b:bd:be:c6:89:51:4b:d1:
d9:65:68:cd:af:d5:37:4d:da:45:3f:69:2f:27:ba:69:f7:89:
09:3f:42:54:74:67:7d:07:72:63:ad:16:90:f4:f1:12:1a:3b:
62:f4:54:e8:78:8a:3b:7d:07:05:b0:c5:6c:b8:ff:b0:9f:fd:
44:b9:0d:79:d1:63:0b:25:b3:8c:f9:08:e9:e9:f6:8a:bd:e1:
3d:81:0c:30:b7:5a:3c:ba:6b:59:7b:06:20:70:1f:f1:0f:4b:
fa:1f:d3:42:14:9c:e0:86:1e:4e:95:17:20:91:1c:09:1e:fd:
88:cd:f5:a6:57:41:df:65:d3:48:54:96:05:5b:bf:f0:d8:69:
f3:d2:16:a9:87:33:83:a4:61:79:c7:72:94:d5:c0:88:eb:e6:
ba:f1:5f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:04:09 2026 by rpki-client