Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/SIJXWca3LXtpAQSg4yYJ2xjbfdg.roa
File: SIJXWca3LXtpAQSg4yYJ2xjbfdg.roa (raw, json)
Hash identifier: T6M24ksDta3ddviKZ2bv056TB/uQE9/YGZPnXD35+8k=
Subject key identifier: 48:82:57:59:C6:B7:2D:7B:69:01:04:A0:E3:26:09:DB:18:DB:7D:D8
Certificate issuer: /CN=4c90bf56078074828256675949a0c23a251784b1
Certificate serial: 01A06242CD73C9288AF4655CA345AE372252
Authority key identifier: 4C:90:BF:56:07:80:74:82:82:56:67:59:49:A0:C2:3A:25:17:84:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJC_VgeAdIKCVmdZSaDCOiUXhLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/SIJXWca3LXtpAQSg4yYJ2xjbfdg.roa
Signing time: Wed 02 Sep 2026 13:15:40 +0000
ROA not before: Wed 02 Sep 2026 13:15:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200665
IP address blocks: 2.58.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/TJC_VgeAdIKCVmdZSaDCOiUXhLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/TJC_VgeAdIKCVmdZSaDCOiUXhLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJC_VgeAdIKCVmdZSaDCOiUXhLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:42:cd:73:c9:28:8a:f4:65:5c:a3:45:ae:37:22:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c90bf56078074828256675949a0c23a251784b1
Validity
Not Before: Sep 2 13:15:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48825759c6b72d7b690104a0e32609db18db7dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9b:a3:3d:d0:17:a5:63:8b:25:35:08:f0:cd:
8d:c8:89:1a:35:9d:fc:06:0d:a0:80:c2:6e:2f:ac:
77:c6:f9:ce:40:31:8d:db:a5:f9:e0:32:eb:09:a1:
fe:91:19:c8:0c:45:fa:c6:56:d6:66:b5:c2:2c:35:
0a:9c:22:d4:80:8f:b7:35:c6:8e:5e:36:96:f2:27:
c0:05:05:d1:c8:43:a1:88:47:5b:a6:2c:d5:d2:ff:
bc:a1:b8:52:06:54:30:f2:05:6b:e9:18:2a:2d:95:
c1:15:bb:db:4e:9c:15:c9:f0:72:cb:55:66:67:13:
f4:e1:1a:9f:52:14:de:5d:8e:bb:e7:c6:cd:25:e4:
2a:13:9f:9d:75:00:57:4c:5e:4b:e1:19:59:03:66:
19:b2:12:9e:df:a2:52:84:56:6d:80:8c:52:a2:95:
39:26:10:40:b6:9a:da:50:59:6a:4f:98:f1:e0:9e:
b9:06:c2:12:86:13:97:e0:47:bf:dc:92:a5:19:c8:
92:b7:7d:de:35:83:2b:14:be:59:3f:62:ee:61:32:
1b:89:22:15:b1:59:bd:f6:eb:67:52:ba:9c:23:14:
2f:c4:b9:04:c4:ad:e6:c6:71:3d:45:3b:68:53:91:
2d:2c:22:ba:83:bf:8d:3f:27:7d:bf:74:90:ec:bb:
cf:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:82:57:59:C6:B7:2D:7B:69:01:04:A0:E3:26:09:DB:18:DB:7D:D8
X509v3 Authority Key Identifier:
keyid:4C:90:BF:56:07:80:74:82:82:56:67:59:49:A0:C2:3A:25:17:84:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJC_VgeAdIKCVmdZSaDCOiUXhLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/SIJXWca3LXtpAQSg4yYJ2xjbfdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/TJC_VgeAdIKCVmdZSaDCOiUXhLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.27.0/24
Signature Algorithm: sha256WithRSAEncryption
40:d5:6b:c9:8b:60:2c:49:4f:07:bd:8a:50:80:ef:ea:1c:4d:
bd:8a:00:17:b4:f5:0b:ba:15:1f:02:81:31:01:c4:7b:ea:2c:
0d:df:a5:6e:65:db:4e:09:d4:cf:75:34:cf:28:ed:92:71:71:
37:fa:30:b6:87:df:16:49:c8:8b:4e:19:c1:6d:e6:3d:9d:20:
63:27:ec:7f:da:37:15:c2:ed:08:4b:14:8d:17:2a:4b:64:aa:
1d:70:b0:c6:8f:b6:37:2d:20:e2:28:7d:f4:e8:aa:d0:65:1f:
75:98:0b:e3:b1:69:73:95:c8:8d:d5:be:f7:88:77:ed:db:2f:
c4:03:ab:b1:a5:37:77:8d:bf:b9:94:d5:c4:b9:b0:41:07:62:
67:e4:65:40:19:d6:97:88:5e:2d:ac:91:d1:8b:9a:0a:06:f7:
c2:df:ac:92:7f:04:ca:0c:da:a8:71:11:bf:68:c7:cf:5c:2e:
80:45:26:49:be:82:98:58:ff:69:3e:7a:08:4a:9e:ce:6a:44:
e3:75:ae:4e:fe:22:bb:bd:2d:80:db:d0:58:fd:40:3c:85:13:
f2:22:da:71:e4:7e:ca:d4:7f:83:b3:81:19:ab:f4:ca:f4:59:
95:95:ee:fb:bd:27:2c:f6:e7:8f:cf:e4:13:ae:96:85:b3:81:
e7:97:40:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 22:57:17 2026 by rpki-client