Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/TClJ1EKcU91c3xm9BAbZgORvpiQ.roa
File: TClJ1EKcU91c3xm9BAbZgORvpiQ.roa (raw, json)
Hash identifier: F16VbVyGl805dbXYUPsoPgMzQWq8uWG9iZ2n8YDTcwc=
Subject key identifier: 4C:29:49:D4:42:9C:53:DD:5C:DF:19:BD:04:06:D9:80:E4:6F:A6:24
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019C253B53A21955C371811ABA69F655C9C1
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/TClJ1EKcU91c3xm9BAbZgORvpiQ.roa
Signing time: Tue 03 Feb 2026 20:39:30 +0000
ROA not before: Tue 03 Feb 2026 20:39:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134972
IP address blocks: 84.245.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:25:3b:53:a2:19:55:c3:71:81:1a:ba:69:f6:55:c9:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 3 20:39:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c2949d4429c53dd5cdf19bd0406d980e46fa624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a6:ce:95:cb:ad:d8:bb:8c:cd:b4:69:2c:76:
1c:91:04:f0:d5:90:ee:29:31:2c:4f:e6:ae:c7:a6:
71:7d:e6:a3:b7:1a:09:f3:fd:f1:50:51:e4:0a:de:
54:3b:55:94:f8:4e:c7:c9:05:72:d9:68:ad:87:0b:
bf:17:b6:fa:93:e8:63:e0:ca:ca:08:9d:00:09:ab:
2b:de:e0:fa:a1:80:a5:7f:73:b2:09:a7:2a:ac:07:
47:c9:cf:b6:10:7d:5c:f0:04:c6:67:59:11:89:58:
86:05:6c:a1:b4:85:94:f6:d2:36:f5:f6:47:28:d0:
ff:0d:ac:59:7e:99:ef:3e:a4:fb:06:47:c5:38:55:
2f:27:48:75:57:f7:b5:0f:0e:1e:93:e5:2b:45:17:
df:26:1c:31:57:c7:f1:bc:4e:d0:57:2a:41:71:89:
bf:07:2a:7b:ce:2c:30:b7:0b:11:4c:5b:c0:a6:fe:
85:59:1f:34:7d:74:fb:79:22:4f:9c:b4:bc:85:5c:
9b:51:e1:a4:f6:f7:b8:f7:50:14:f4:ad:e3:c0:b3:
f0:2b:3b:a8:f3:44:36:9e:14:da:c7:41:a4:16:21:
02:6d:59:51:96:4e:51:fa:df:0e:64:ee:c4:bb:07:
5b:eb:40:c3:7e:8b:6a:57:04:d5:5f:cf:04:33:29:
43:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:29:49:D4:42:9C:53:DD:5C:DF:19:BD:04:06:D9:80:E4:6F:A6:24
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/TClJ1EKcU91c3xm9BAbZgORvpiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.245.0.0/20
Signature Algorithm: sha256WithRSAEncryption
06:70:a5:ec:e2:f7:36:92:56:94:f8:95:fe:e2:d1:55:a9:63:
95:f2:c8:05:5b:3a:dc:95:81:11:57:8d:c9:b9:af:89:da:ed:
a4:dc:7a:1f:ed:91:9b:d5:8f:b5:71:05:83:76:0f:7a:5f:96:
bd:de:0f:0b:f5:84:4c:04:d7:a8:ca:b0:56:3a:4a:50:da:4b:
44:7c:18:b5:bf:1a:3a:0e:bb:e0:01:cb:bd:cd:9d:bf:57:78:
e1:20:16:36:94:7b:66:93:50:d1:8c:3b:20:08:ff:b1:f0:21:
fc:03:34:ae:bf:e5:8f:39:34:6e:8e:f4:4d:3c:00:f8:a6:1b:
c9:29:35:f7:67:18:8f:fa:7a:18:17:f8:2b:e3:1f:aa:11:b9:
43:c3:be:5e:6b:cc:77:6f:70:0b:16:12:e7:88:e4:54:01:e4:
2f:3a:41:d5:af:51:c7:ea:56:5e:25:a2:50:b2:4b:4a:64:76:
56:05:d2:ab:2f:c0:a8:08:48:9e:44:84:07:58:98:a9:f5:13:
25:5d:9f:49:07:41:b8:2b:a0:ca:69:e7:19:6f:81:1d:13:2f:
62:2b:dc:eb:e0:e9:1c:e1:7b:68:3e:8f:66:f4:ad:c5:72:8e:
77:bf:32:2c:a1:28:58:c9:9a:f1:41:75:9c:96:79:7a:35:01:
17:d2:92:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:28:33 2026 by rpki-client