Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/TIlWwjmi1MuI1LKkyCwOJOCCjhk.roa
File: TIlWwjmi1MuI1LKkyCwOJOCCjhk.roa (raw, json)
Hash identifier: jm9RWuGL3r4pbIR7OWSsiAC3KfbEQOX4ZerHS9JWHRE=
Subject key identifier: 4C:89:56:C2:39:A2:D4:CB:88:D4:B2:A4:C8:2C:0E:24:E0:82:8E:19
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A12B81481B35DDA0415A8BB8C793F09A5C
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/TIlWwjmi1MuI1LKkyCwOJOCCjhk.roa
Signing time: Sun 11 Oct 2026 15:07:35 +0000
ROA not before: Sun 11 Oct 2026 15:07:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218582
IP address blocks: 2a10:fa80:b000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 06:05:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:81:48:1b:35:dd:a0:41:5a:8b:b8:c7:93:f0:9a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Oct 11 15:07:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c8956c239a2d4cb88d4b2a4c82c0e24e0828e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fa:a9:e0:a8:93:8c:74:71:9b:9e:9b:55:ce:
84:d3:ed:db:17:cb:18:41:50:9c:fe:76:49:33:35:
9b:3b:27:9c:77:86:89:2a:9d:d1:27:60:e6:f2:46:
4d:53:74:e6:9b:72:c4:f1:2d:91:e6:c0:52:7d:a8:
e5:06:23:be:ac:ef:11:39:94:20:59:30:e3:d2:00:
40:d0:28:00:b8:64:5f:64:33:fd:87:77:53:b9:9b:
b1:10:9b:b1:df:af:cc:ca:77:78:ac:bc:48:5c:ec:
4d:40:00:56:0d:88:55:8b:65:4f:d3:00:2c:68:2f:
99:16:4d:93:08:07:0b:5d:db:8b:d8:df:1c:26:0e:
6a:1d:68:e5:21:5e:6c:31:f1:a0:a7:6b:34:79:44:
a7:b7:00:da:04:97:37:f5:1e:fb:da:e4:41:37:c8:
29:f7:c1:0d:67:34:dc:43:4f:25:2d:e8:bd:7f:08:
f2:4c:ea:5c:e6:32:de:32:ea:3b:6f:a8:c9:a2:06:
e6:45:fd:9e:1e:10:11:46:6e:9a:93:be:c4:42:85:
70:a9:b7:53:a4:7f:15:6f:a9:a2:18:8f:74:a1:ca:
7c:79:81:fe:16:17:95:e2:52:16:70:62:26:4d:60:
6b:6c:08:1f:11:5f:7d:95:1c:23:14:29:f1:81:ad:
df:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:89:56:C2:39:A2:D4:CB:88:D4:B2:A4:C8:2C:0E:24:E0:82:8E:19
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/TIlWwjmi1MuI1LKkyCwOJOCCjhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa80:b000::/36
Signature Algorithm: sha256WithRSAEncryption
57:dd:2e:85:bc:15:5d:3e:02:37:8f:c9:b8:3b:4e:88:87:a3:
f4:87:71:ee:0c:00:6b:76:cf:72:04:8f:f7:85:ee:81:79:62:
c3:3a:0a:ed:81:25:d5:f4:b4:25:a9:57:f3:ad:97:17:ce:d0:
9d:28:0a:88:db:e1:2f:e3:38:a2:db:df:c9:59:cd:8b:b6:22:
cc:6f:44:52:2f:18:62:85:d3:74:a2:c6:9c:6f:c7:14:40:99:
9f:e0:40:70:d1:e4:af:14:19:ef:74:c4:7a:f7:35:22:8c:42:
59:d0:0a:1b:28:17:65:58:a1:92:c1:14:79:ac:0c:94:5b:12:
b5:84:f1:95:cf:9b:6f:b8:38:11:a2:0a:18:db:9d:16:37:61:
8d:e1:81:ec:14:a2:36:76:84:c3:33:de:8f:f0:98:41:9b:e0:
64:69:9e:21:8a:b3:f2:08:80:bf:e2:0e:34:61:9d:27:aa:80:
02:fe:56:9a:38:fd:33:13:51:90:01:49:61:e5:b7:93:f9:22:
12:9a:a1:15:b6:b4:67:38:9a:57:e0:35:5d:80:6c:b4:84:cd:
29:82:91:b3:21:2b:2d:70:0e:ec:7e:a7:b9:44:f7:1a:ab:e6:
9f:4c:50:48:ef:82:7f:d7:2b:86:1d:30:fd:c7:87:82:cb:79:
da:46:db:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 10:46:13 2026 by rpki-client