Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/b76d73-656a-40a2-987d-3bc6d3fb783f/1/tsGRmsREpXc_Z_NdGNIekdKShcM.roa
File: tsGRmsREpXc_Z_NdGNIekdKShcM.roa (raw, json)
Hash identifier: 8YVUb9LnzwGB0Dnc3npjvfCOtQTyy3Jp4dEuAqxypaY=
Subject key identifier: B6:C1:91:9A:C4:44:A5:77:3F:67:F3:5D:18:D2:1E:91:D2:92:85:C3
Certificate issuer: /CN=c50aa05a5e859814b344005c303362888b8e60eb
Certificate serial: 01A06C57E7038B0DE123C38D3CABDEC8B851
Authority key identifier: C5:0A:A0:5A:5E:85:98:14:B3:44:00:5C:30:33:62:88:8B:8E:60:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQqgWl6FmBSzRABcMDNiiIuOYOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b76d73-656a-40a2-987d-3bc6d3fb783f/1/tsGRmsREpXc_Z_NdGNIekdKShcM.roa
Signing time: Fri 04 Sep 2026 12:14:55 +0000
ROA not before: Fri 04 Sep 2026 12:14:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60781
IP address blocks: 159.255.192.0/22 maxlen: 22
2a03:7480::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b76d73-656a-40a2-987d-3bc6d3fb783f/1/xQqgWl6FmBSzRABcMDNiiIuOYOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/b76d73-656a-40a2-987d-3bc6d3fb783f/1/xQqgWl6FmBSzRABcMDNiiIuOYOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQqgWl6FmBSzRABcMDNiiIuOYOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 15:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:57:e7:03:8b:0d:e1:23:c3:8d:3c:ab:de:c8:b8:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50aa05a5e859814b344005c303362888b8e60eb
Validity
Not Before: Sep 4 12:14:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b6c1919ac444a5773f67f35d18d21e91d29285c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:43:4d:9b:f1:e0:67:89:83:b0:58:b7:78:30:
dc:d5:97:3b:ec:96:87:43:2b:0b:b9:e7:33:f9:23:
1d:05:0f:86:b8:42:69:8c:2e:b1:b9:8b:d3:6e:f5:
ac:b3:cc:97:12:f2:00:dc:6f:e7:89:e6:6c:48:92:
55:33:cf:f2:e0:80:06:b4:0a:ca:c1:04:aa:1a:85:
89:f9:c9:f8:85:db:a4:d6:f4:21:6d:b6:d7:d2:9f:
42:23:a7:77:76:0e:76:44:a1:28:89:89:3b:6b:c7:
67:c2:1b:db:38:2a:90:10:bc:53:d2:f6:f9:3f:53:
45:0f:40:fe:c5:de:96:f0:2e:71:bd:54:9d:52:8b:
f5:95:9a:0f:f7:27:df:82:fa:62:1d:51:d9:2d:e5:
bf:24:cd:b6:7a:f4:31:e9:ef:2c:36:d7:0c:32:10:
94:b2:91:ea:a6:9e:65:a7:27:ee:a3:01:02:90:5e:
45:82:60:af:8b:40:73:34:77:b9:09:26:42:ac:4e:
27:5e:eb:c7:61:27:85:b9:88:c0:bf:21:1a:c5:b4:
30:6e:36:7b:48:b5:b0:bd:54:23:f0:95:dc:77:4e:
6e:8e:bf:b5:73:9a:2c:7d:5a:a0:5d:a3:ef:e0:78:
11:90:0c:36:bf:89:bd:2e:41:ff:94:b8:ad:99:e8:
39:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C1:91:9A:C4:44:A5:77:3F:67:F3:5D:18:D2:1E:91:D2:92:85:C3
X509v3 Authority Key Identifier:
keyid:C5:0A:A0:5A:5E:85:98:14:B3:44:00:5C:30:33:62:88:8B:8E:60:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQqgWl6FmBSzRABcMDNiiIuOYOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b76d73-656a-40a2-987d-3bc6d3fb783f/1/tsGRmsREpXc_Z_NdGNIekdKShcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b76d73-656a-40a2-987d-3bc6d3fb783f/1/xQqgWl6FmBSzRABcMDNiiIuOYOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.255.192.0/22
IPv6:
2a03:7480::/44
Signature Algorithm: sha256WithRSAEncryption
26:9b:34:99:37:00:50:52:59:d8:c5:76:d4:2a:fa:86:12:73:
3f:a8:27:40:74:54:4a:fd:80:89:3a:c4:e3:ea:91:6d:6f:d8:
00:c2:37:33:df:13:c3:af:46:2d:9f:27:b7:77:fc:69:b8:20:
1d:7a:1f:e4:46:d3:15:b7:6c:f7:95:2e:2d:bd:90:61:5e:9e:
5e:40:c2:7c:7a:b9:9f:1e:c1:5a:97:f7:98:2c:a1:30:b3:1f:
c9:19:ea:8b:11:c5:26:30:4f:4e:10:24:17:54:7c:3e:f6:e4:
d2:0a:df:b0:0e:2e:49:b7:10:2c:83:be:81:60:9d:6c:13:a1:
58:e9:a0:b0:c2:aa:3c:af:f5:58:e0:58:46:30:d2:b5:3b:e0:
17:28:7b:bc:a4:e0:ed:bd:ce:5b:32:4b:8e:d4:8b:23:78:a4:
f9:dc:80:26:76:48:47:d7:f4:c5:de:35:43:4e:48:99:55:51:
4e:64:dd:94:f2:23:5e:a7:3f:45:26:e5:68:12:39:c0:f4:df:
4d:ef:cd:83:38:96:09:59:77:a8:f5:f4:2f:89:aa:6d:67:a1:
ab:e7:0f:bc:66:d6:aa:9b:30:b7:eb:bf:90:dc:28:3d:2a:ef:
76:7e:fa:16:9b:56:f4:e3:c1:5b:4f:8c:b5:4c:c9:8c:b4:6b:
ac:7a:ee:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:43:57 2026 by rpki-client