Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/Tly1X20kmC9GiMtlAywnR5v42sY.roa
File: Tly1X20kmC9GiMtlAywnR5v42sY.roa (raw, json)
Hash identifier: H0lTeyRZMkF4/Jmp2AkeMpiPxuOj8j30tsvE9r36xSQ=
Subject key identifier: 4E:5C:B5:5F:6D:24:98:2F:46:88:CB:65:03:2C:27:47:9B:F8:DA:C6
Certificate issuer: /CN=4e489f66159f77bb58d2bbc7e4fc1dfd9ddcb034
Certificate serial: 01A0A53C0124820B47953D6775A559BFAB28
Authority key identifier: 4E:48:9F:66:15:9F:77:BB:58:D2:BB:C7:E4:FC:1D:FD:9D:DC:B0:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/Tly1X20kmC9GiMtlAywnR5v42sY.roa
Signing time: Tue 15 Sep 2026 13:22:48 +0000
ROA not before: Tue 15 Sep 2026 13:22:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 185.32.88.0/24 maxlen: 24
185.32.89.0/24 maxlen: 24
185.32.90.0/24 maxlen: 24
185.32.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:3c:01:24:82:0b:47:95:3d:67:75:a5:59:bf:ab:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e489f66159f77bb58d2bbc7e4fc1dfd9ddcb034
Validity
Not Before: Sep 15 13:22:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e5cb55f6d24982f4688cb65032c27479bf8dac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0b:50:00:3f:c5:eb:a0:51:73:7e:c3:8f:88:
04:2a:33:8d:77:56:52:03:c4:f5:d4:23:f7:9e:7c:
9b:da:3e:39:0d:68:3e:6f:49:e9:f5:13:42:2a:48:
ef:6a:d3:b2:72:3b:e0:f4:6e:a6:fe:a9:49:7b:fa:
c6:e5:1d:02:80:cb:99:f4:47:ce:ae:06:b6:64:f5:
62:29:28:56:be:a5:6c:59:39:b0:fc:b7:e6:67:89:
5b:85:d0:ff:d7:86:74:af:e1:14:2d:1e:a9:50:19:
95:c1:f4:df:78:c4:2f:3c:e6:2c:d3:8f:0c:45:8d:
f8:0e:61:11:45:db:c6:d4:c4:74:10:8d:b9:49:02:
18:08:d6:80:57:78:7b:1a:60:48:39:ac:a2:6f:11:
41:fb:bc:42:6c:46:c1:4f:e2:ee:f2:ee:e4:a3:b3:
a6:24:ac:73:81:21:be:5a:74:1a:b4:e0:77:d4:b3:
44:8e:d9:89:f5:31:71:47:cb:31:eb:30:1c:11:56:
97:57:80:c1:a3:0c:6e:0b:4f:bd:44:cd:c4:19:42:
da:61:c8:b2:c3:cd:5f:42:0c:32:dc:44:a7:4b:22:
ec:37:63:1c:b6:08:9e:fb:0e:dd:c0:1a:48:29:02:
0e:24:4a:44:3c:15:02:ae:7e:c9:d6:9a:15:8c:98:
be:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:5C:B5:5F:6D:24:98:2F:46:88:CB:65:03:2C:27:47:9B:F8:DA:C6
X509v3 Authority Key Identifier:
keyid:4E:48:9F:66:15:9F:77:BB:58:D2:BB:C7:E4:FC:1D:FD:9D:DC:B0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/Tly1X20kmC9GiMtlAywnR5v42sY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.88.0/22
Signature Algorithm: sha256WithRSAEncryption
27:69:c5:c5:8d:00:36:20:ff:fe:fa:da:bc:aa:ca:3d:cc:6f:
c4:2c:4c:d9:c7:d2:8d:b0:75:b0:73:b3:56:e5:33:e4:d7:fc:
e5:e9:26:75:ed:ca:76:f5:8b:a4:d2:01:a1:de:61:64:35:39:
8c:d2:03:1a:67:95:c8:cc:79:3a:82:e8:3c:5b:65:a5:c6:7d:
cc:b2:bb:b0:b2:c5:b3:55:bd:e4:e5:39:06:d6:ea:af:54:86:
3e:0a:5a:43:0b:94:c5:f6:af:b8:a6:8a:6c:17:5f:8a:18:32:
15:38:16:91:90:2e:90:09:52:48:97:c8:05:53:47:18:fc:34:
3c:4a:6e:95:c1:76:38:dd:eb:4e:2a:af:73:ab:6f:7d:99:6a:
fe:56:ec:64:d6:99:93:5f:7c:78:9e:3a:ba:ab:43:a0:f3:6d:
d2:fe:c6:96:ea:df:16:de:9a:55:a2:51:98:03:00:9c:c6:06:
49:f4:ff:13:aa:a8:5a:03:9a:c0:a6:79:35:7f:73:e2:9d:d0:
56:c9:f6:6a:a2:1c:f9:71:6c:0c:df:99:81:b7:aa:0f:11:8a:
ea:d6:72:22:11:de:1e:4f:45:de:b7:8c:7b:17:c7:20:1e:1c:
be:75:10:dd:55:d8:a2:00:e1:5f:2b:77:d1:3d:10:2e:3b:8e:
42:ae:3d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:59:43 2026 by rpki-client