Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/TOgX3vFm1bBUf7VlKOvS_Q49BQw.roa
File: TOgX3vFm1bBUf7VlKOvS_Q49BQw.roa (raw, json)
Hash identifier: XJE7IcrW6rhvGDyAahOo4XtEMNvbsvjLkV3AEh+8sYU=
Subject key identifier: 4C:E8:17:DE:F1:66:D5:B0:54:7F:B5:65:28:EB:D2:FD:0E:3D:05:0C
Certificate issuer: /CN=a06bd308f743288af4cc2119973ec8dc028937f0
Certificate serial: 019D4017D7C571DF172900F58644E07424F9
Authority key identifier: A0:6B:D3:08:F7:43:28:8A:F4:CC:21:19:97:3E:C8:DC:02:89:37:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGvTCPdDKIr0zCEZlz7I3AKJN_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/TOgX3vFm1bBUf7VlKOvS_Q49BQw.roa
Signing time: Mon 30 Mar 2026 18:53:17 +0000
ROA not before: Mon 30 Mar 2026 18:53:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 195.191.211.0/24 maxlen: 25
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGvTCPdDKIr0zCEZlz7I3AKJN_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:40:17:d7:c5:71:df:17:29:00:f5:86:44:e0:74:24:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a06bd308f743288af4cc2119973ec8dc028937f0
Validity
Not Before: Mar 30 18:53:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ce817def166d5b0547fb56528ebd2fd0e3d050c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:50:0a:c9:26:80:39:01:ed:08:ee:3f:c0:c9:
f5:92:9b:6f:4b:b6:55:94:8b:1a:fb:88:ed:12:16:
65:43:70:b0:e3:0e:ff:9c:e1:6f:a1:00:36:0e:c9:
7c:22:31:e0:37:78:5c:0e:ac:7c:69:60:00:be:f0:
4c:ca:c8:6a:54:2c:14:c5:43:44:62:16:35:8e:bd:
fa:1d:27:dc:24:a4:58:49:e3:0f:8d:dd:73:d4:aa:
61:a2:3d:4d:cc:ec:c2:28:aa:8e:04:bf:23:71:9a:
dd:bb:17:fd:55:4f:16:11:d8:16:96:2e:84:e8:5b:
64:48:7d:fe:35:e8:1b:99:b4:4a:e7:80:74:21:98:
c0:8d:d5:ac:ad:00:85:15:dc:2b:c0:56:51:81:68:
e1:4e:ca:3f:8e:3b:e3:1f:9e:d2:64:f3:28:7f:4c:
e1:bf:26:23:96:58:c9:97:a5:17:fb:53:a8:8d:90:
53:8d:18:53:8e:06:ea:85:a1:15:6b:8c:8a:5d:7f:
c6:c6:0d:2b:40:b4:08:d3:40:4c:ef:57:e7:d5:8a:
60:13:fa:b6:a9:28:6e:9c:03:f9:13:b4:bb:65:94:
2c:26:fc:eb:b3:1e:98:da:6b:e4:73:c2:bf:aa:a9:
81:4e:36:f5:fa:c7:be:0f:ee:0b:4e:1d:15:be:b9:
15:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E8:17:DE:F1:66:D5:B0:54:7F:B5:65:28:EB:D2:FD:0E:3D:05:0C
X509v3 Authority Key Identifier:
keyid:A0:6B:D3:08:F7:43:28:8A:F4:CC:21:19:97:3E:C8:DC:02:89:37:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGvTCPdDKIr0zCEZlz7I3AKJN_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/TOgX3vFm1bBUf7VlKOvS_Q49BQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.211.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:3b:45:a4:bf:fc:c6:6e:e8:1c:90:35:b0:31:5a:db:f8:70:
9b:fe:75:c9:88:63:a4:07:2a:e2:cc:6c:4e:5c:69:04:0c:cb:
f0:e6:0f:2c:a7:cc:6b:67:26:b9:61:52:d6:96:37:1e:c3:63:
57:a9:2e:12:7d:b7:19:f6:56:e0:ac:67:6f:f5:49:66:03:6d:
60:7b:5c:8c:b3:ea:d6:fb:0c:86:80:03:66:83:68:fb:32:b3:
cb:19:95:cd:5b:6f:b6:f4:ec:21:f5:60:bc:cc:b0:9b:86:c6:
3b:e1:53:1a:45:f3:11:65:93:6b:90:44:73:0b:b3:50:14:d7:
8b:f8:13:33:29:85:1b:ac:40:20:56:75:84:27:50:a1:3c:76:
3e:9a:0f:ed:57:9a:e2:cd:a1:00:e0:2a:8c:a2:b1:16:f9:63:
4b:e9:57:e7:2d:44:f3:b7:ce:e2:9b:26:f5:aa:a0:2c:87:ce:
fc:7a:c6:0b:29:7a:fe:e4:28:f9:9f:3c:b9:d8:93:32:38:41:
5b:cd:d7:37:72:6e:01:a2:f7:36:cf:e7:4e:1a:4c:25:1d:92:
31:7f:24:4b:9d:fb:1e:a0:82:9e:0e:9d:2a:12:47:0f:53:fd:
ea:cc:a0:8e:dd:ad:65:50:d9:3b:c6:ab:e2:6c:93:39:95:ad:
d5:aa:87:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:10:40 2026 by rpki-client