Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/TL1A_qeZFLWPpsnbfA9cmU0ctYM.roa
File: TL1A_qeZFLWPpsnbfA9cmU0ctYM.roa (raw, json)
Hash identifier: Q8nTZN24u9mJs2w8KPuIp5t3PveHdtJEuDtOyRjriNk=
Subject key identifier: 4C:BD:40:FE:A7:99:14:B5:8F:A6:C9:DB:7C:0F:5C:99:4D:1C:B5:83
Certificate issuer: /CN=65121c3f9207a37345e38702c89d179bf444aa08
Certificate serial: 019C9B7ED736B198BF28AB834CC96E9D09E1
Authority key identifier: 65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/TL1A_qeZFLWPpsnbfA9cmU0ctYM.roa
Signing time: Thu 26 Feb 2026 19:48:26 +0000
ROA not before: Thu 26 Feb 2026 19:48:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132699
IP address blocks: 2a00:ad87:800::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9b:7e:d7:36:b1:98:bf:28:ab:83:4c:c9:6e:9d:09:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65121c3f9207a37345e38702c89d179bf444aa08
Validity
Not Before: Feb 26 19:48:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4cbd40fea79914b58fa6c9db7c0f5c994d1cb583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:73:3c:53:2c:a0:14:d3:fe:f1:0b:89:e6:53:
64:74:fc:96:07:04:f8:36:c1:51:19:87:59:97:a0:
7a:4b:04:9a:ac:14:ea:41:73:40:99:c9:45:87:b9:
d9:9a:bc:aa:e5:17:b2:a6:bb:ce:1f:8f:09:c5:1e:
e3:76:cb:91:0e:31:8b:13:93:33:73:c0:58:5a:46:
ae:62:7c:3e:fe:13:44:15:7a:04:16:9d:78:4a:9c:
1b:58:2a:aa:65:0d:3c:6c:30:4d:28:88:b2:90:5f:
5a:d9:82:7f:b0:99:aa:12:cc:53:21:3f:81:9e:20:
0b:f5:e5:61:cb:83:8a:90:25:b6:4d:5e:96:42:e6:
f2:df:2c:e6:12:45:b0:09:c3:88:5b:97:95:3e:d4:
81:87:c1:22:18:ad:4a:df:8d:25:a7:c4:b6:94:81:
9f:b9:f6:39:da:8d:9c:4b:f9:3a:50:7a:2d:c0:e8:
2e:3b:45:00:eb:85:35:fe:6c:f0:48:f6:7e:d5:ed:
cd:ee:f9:4c:ae:fc:07:eb:ff:55:97:7a:d5:82:e5:
87:7e:06:f0:e0:5b:d9:9c:9d:3b:62:20:83:d4:7a:
fc:39:43:43:24:79:b3:f1:2b:6f:fa:ff:93:56:39:
59:97:13:a0:e1:45:c1:74:97:99:1f:56:47:9b:9d:
c0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:BD:40:FE:A7:99:14:B5:8F:A6:C9:DB:7C:0F:5C:99:4D:1C:B5:83
X509v3 Authority Key Identifier:
keyid:65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/TL1A_qeZFLWPpsnbfA9cmU0ctYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:ad87:800::/48
Signature Algorithm: sha256WithRSAEncryption
90:e8:01:02:45:64:55:df:f1:f5:ec:0b:88:e9:c3:8d:b4:f4:
49:b0:66:dd:a1:6d:e5:7e:0f:c4:4a:70:ae:2c:e4:83:ee:8f:
0d:19:4b:2d:2e:70:79:b4:cf:e2:a3:6c:cc:28:74:3e:17:5d:
f1:98:85:ef:75:f2:c1:20:04:94:1d:53:5e:bc:f5:44:dd:a9:
57:fc:91:b9:19:9b:d5:2a:b0:f4:6e:ae:d0:7b:cc:8c:58:cd:
70:2f:83:23:00:a9:4f:22:25:64:74:12:2e:10:4d:5b:89:72:
e8:b5:83:75:0c:f2:a0:4b:8b:71:d9:16:72:2b:2b:05:5b:dc:
95:27:67:c5:26:3c:d4:0b:4d:51:25:bc:25:fa:c4:f4:0d:9d:
70:bb:f4:55:dd:47:3f:31:4c:81:fb:2c:4f:62:13:1f:f9:c3:
41:d6:2d:8b:72:17:f8:6c:30:9e:51:7c:5a:9a:14:b5:69:23:
97:15:88:1a:1c:64:03:ec:88:3c:bc:b8:3f:27:60:c4:d4:76:
6f:31:c6:d8:a9:2f:d7:86:6d:84:da:90:4d:df:e1:27:ad:12:
c8:9a:03:ce:f1:a2:72:b3:ad:19:9a:f7:ec:97:48:4e:b7:fd:
9a:99:c1:30:d0:be:5d:da:35:d6:a4:e5:b6:56:92:7c:54:6a:
49:ad:38:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:44:03 2026 by rpki-client