Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/TOJ03U-pk8ZKfSmj2VROvQgDtnY.roa
File: TOJ03U-pk8ZKfSmj2VROvQgDtnY.roa (raw, json)
Hash identifier: EpZhvdW8kSRP3l2H/Fnes0x88lVH2bOzwjHn3A0hFLU=
Subject key identifier: 4C:E2:74:DD:4F:A9:93:C6:4A:7D:29:A3:D9:54:4E:BD:08:03:B6:76
Certificate issuer: /CN=65121c3f9207a37345e38702c89d179bf444aa08
Certificate serial: 019C9B6E5CA6B6D657CAC8ABA06F28C7F396
Authority key identifier: 65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/TOJ03U-pk8ZKfSmj2VROvQgDtnY.roa
Signing time: Thu 26 Feb 2026 19:30:26 +0000
ROA not before: Thu 26 Feb 2026 19:30:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400242
IP address blocks: 132.186.88.0/24 maxlen: 24
2a00:ad87:400::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9b:6e:5c:a6:b6:d6:57:ca:c8:ab:a0:6f:28:c7:f3:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65121c3f9207a37345e38702c89d179bf444aa08
Validity
Not Before: Feb 26 19:30:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ce274dd4fa993c64a7d29a3d9544ebd0803b676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:24:8e:f4:ca:66:3c:66:01:b1:c3:1b:90:45:
da:17:99:56:77:0d:72:5b:81:fc:ee:bc:bc:1f:d3:
69:dd:63:af:56:c0:2a:92:af:68:81:02:1c:bd:c5:
ce:dc:08:bc:6a:9a:62:10:4e:45:46:81:b0:0a:97:
f2:21:29:75:a9:99:2a:e0:64:92:58:f8:6c:7c:47:
b0:8c:4b:03:99:6d:5b:a8:f7:9a:68:9a:f9:22:03:
70:1b:30:7d:fe:52:5f:56:04:b5:97:22:9d:4c:b0:
51:3c:84:65:09:2f:0b:3b:7b:d5:d0:91:2a:35:a9:
37:22:78:2f:5f:c9:ca:2b:b3:de:d6:e2:81:af:98:
86:14:57:cc:3b:bb:5e:09:95:32:d5:24:52:25:75:
9e:ef:2e:ff:b8:94:c1:44:eb:e9:3e:2a:18:7f:8c:
a7:49:15:0c:48:26:b5:0f:18:30:5d:95:4e:5c:01:
ee:12:63:0f:a5:93:d2:78:4e:6a:a9:30:60:41:c6:
9d:00:75:7b:2b:d6:02:9c:d6:3c:72:86:62:8f:c8:
1c:a8:38:86:e8:a7:0e:c7:b5:ea:e4:14:4d:43:e0:
bb:3e:2e:66:e1:d2:63:ca:48:56:1f:ab:20:84:0e:
2d:6d:02:ce:89:8a:29:98:53:ae:4a:8c:30:a2:76:
89:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E2:74:DD:4F:A9:93:C6:4A:7D:29:A3:D9:54:4E:BD:08:03:B6:76
X509v3 Authority Key Identifier:
keyid:65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/TOJ03U-pk8ZKfSmj2VROvQgDtnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.186.88.0/24
IPv6:
2a00:ad87:400::/48
Signature Algorithm: sha256WithRSAEncryption
0e:f0:7e:34:da:71:71:88:47:d8:10:49:e3:92:2c:e5:d1:92:
b4:28:0a:e6:ef:54:6b:f8:84:64:78:a6:4c:2b:61:77:a6:87:
f7:24:63:77:2b:8f:0e:e1:f8:b8:96:2e:bf:06:69:4f:b6:2a:
db:c0:6a:3e:56:04:bf:a3:e2:5b:c3:15:a5:c6:fc:42:c6:3b:
22:42:d3:cd:46:11:53:4a:86:6a:f5:45:39:3b:88:d0:2b:49:
94:4f:25:ab:9a:df:35:22:27:61:de:66:7a:c0:ba:7d:ac:2e:
50:c4:12:fc:5a:b1:a9:cb:f3:30:c4:4f:c2:0d:a7:c1:9a:b2:
ba:29:0b:22:bc:99:41:1d:5b:c0:a8:54:9f:85:84:39:df:13:
c4:ca:e4:e7:10:72:a4:30:c1:26:3b:85:3b:15:a8:77:83:28:
bf:f7:71:0c:bb:b7:da:da:0f:9b:1e:73:12:c2:22:a1:0f:cc:
c5:f5:66:36:8e:93:cb:9e:07:64:81:b7:69:40:38:34:11:09:
bb:ea:b4:6a:b5:9c:2c:c4:e6:5c:17:ff:ba:ec:f0:b9:f9:c2:
77:2a:e3:2b:1e:b6:d5:65:25:99:6f:d5:d7:5c:cf:d6:3e:e9:
7e:29:69:a2:3a:40:a4:ec:54:b8:19:51:4e:19:a8:52:75:0d:
0f:ea:f9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:14:00 2026 by rpki-client