Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/tjswD-6lJT2x6a8VrKj6etjZivs.roa
File: tjswD-6lJT2x6a8VrKj6etjZivs.roa (raw, json)
Hash identifier: jOy9r92Qvna11s/nzMQc7n6pVL+CaKBPWOjXRxkltJE=
Subject key identifier: B6:3B:30:0F:EE:A5:25:3D:B1:E9:AF:15:AC:A8:FA:7A:D8:D9:8A:FB
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 019C4BFD8B91EC18B4522696F0CE18D02E95
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/tjswD-6lJT2x6a8VrKj6etjZivs.roa
Signing time: Wed 11 Feb 2026 09:17:13 +0000
ROA not before: Wed 11 Feb 2026 09:17:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21273
IP address blocks: 193.5.252.0/24 maxlen: 24
194.209.118.0/24 maxlen: 24
212.243.54.0/24 maxlen: 24
2001:918:ff22::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4b:fd:8b:91:ec:18:b4:52:26:96:f0:ce:18:d0:2e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Feb 11 09:17:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b63b300feea5253db1e9af15aca8fa7ad8d98afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4c:10:ff:f2:16:18:a0:cf:53:84:7b:3f:05:
88:4c:4d:b2:02:08:b8:2d:d6:3c:12:c7:81:8f:75:
77:67:6e:52:3c:10:b4:4b:cf:5d:ec:a4:1b:ee:4e:
92:68:fd:ed:d3:ce:ba:54:b6:54:de:8a:e6:03:d6:
c8:3b:69:b4:cf:fc:f2:30:71:97:42:eb:ea:6c:3c:
8c:b4:bc:b2:85:4b:37:85:41:d3:3d:24:4f:01:b8:
ad:73:70:8d:63:57:dd:bd:38:1b:c6:dd:e6:6f:df:
a2:b6:dd:dd:5e:f3:e3:be:01:d6:a0:fd:af:2f:50:
80:fa:94:b1:cf:53:fc:e7:b1:27:b1:31:01:f2:13:
0a:b9:54:d2:b7:6b:ed:b1:65:7d:ca:f3:de:75:5f:
dd:49:d2:27:94:13:93:d2:ba:a9:1a:c6:88:31:7c:
28:22:bf:6a:e7:2c:c5:dc:22:57:af:6d:92:26:7d:
f0:47:a3:98:9c:e0:ce:f9:3c:28:9b:cc:13:a8:3d:
3c:23:63:49:bd:52:00:24:b4:c7:a0:21:e4:b0:e0:
a5:c3:1e:92:3c:ed:83:7a:3b:99:ad:d7:c8:57:97:
dd:71:84:1e:e8:be:82:99:22:7f:d4:a4:34:f3:14:
ef:79:88:11:07:10:de:da:bd:78:2a:98:c6:9b:65:
de:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3B:30:0F:EE:A5:25:3D:B1:E9:AF:15:AC:A8:FA:7A:D8:D9:8A:FB
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/tjswD-6lJT2x6a8VrKj6etjZivs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.252.0/24
194.209.118.0/24
212.243.54.0/24
IPv6:
2001:918:ff22::/48
Signature Algorithm: sha256WithRSAEncryption
6f:9e:fb:2e:97:4a:9c:5b:2f:2c:46:56:7a:d3:eb:41:a1:c4:
56:2e:0b:93:e8:40:02:f3:c8:c5:a3:e5:8b:b3:c6:4f:ec:b5:
ce:2b:5b:df:91:13:ca:cc:4b:7c:9c:23:e0:6b:2f:06:12:5d:
7e:6a:ea:e6:b1:95:83:2f:c4:88:cf:b5:9c:f3:95:b5:d0:ef:
64:d0:73:a7:df:e6:5e:43:9d:46:ce:4d:d0:15:d6:b8:bf:f2:
d3:f0:97:d4:08:e7:7a:0c:56:ec:83:07:eb:f6:81:b4:fc:ab:
45:75:4a:93:46:2d:60:28:0f:aa:63:e9:75:45:9c:cb:8d:29:
77:8d:24:b6:ef:f5:f3:69:b2:c7:1c:16:58:a4:a7:53:0b:dd:
98:20:46:91:24:b4:90:32:96:49:62:ad:b8:1b:a1:a1:f9:4c:
3c:a1:08:c6:52:be:9a:4d:d8:83:89:1d:a0:26:36:0a:19:f1:
08:c9:c8:7a:39:19:07:4f:ec:8e:c1:5c:04:83:1e:0a:4f:a5:
31:c0:c6:65:87:65:d4:d5:1d:cd:dd:0e:47:02:2e:ce:1a:07:
39:3b:b8:e9:cf:71:43:94:33:32:fc:7c:8b:8d:10:c0:bc:bd:
48:3b:96:87:fe:84:45:57:79:04:d2:4c:0b:0e:5f:8a:b3:39:
d8:d2:8d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:34:49 2026 by rpki-client