Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/tDxg4EDB8G_V5Y7A-uQD8KacDTY.roa
File: tDxg4EDB8G_V5Y7A-uQD8KacDTY.roa (raw, json)
Hash identifier: 4PEk4ywaUm/VPH9pCNb29DRHvcCWI/rCMrxfFkXErWs=
Subject key identifier: B4:3C:60:E0:40:C1:F0:6F:D5:E5:8E:C0:FA:E4:03:F0:A6:9C:0D:36
Certificate issuer: /CN=525b705a91dbc30ed10eb7222b7797b834e01863
Certificate serial: 01A07ADFAA3339749751207EFB424836E011
Authority key identifier: 52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/tDxg4EDB8G_V5Y7A-uQD8KacDTY.roa
Signing time: Mon 07 Sep 2026 07:57:53 +0000
ROA not before: Mon 07 Sep 2026 07:57:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215105
IP address blocks: 185.236.242.0/23 maxlen: 24
2a0d:eb02::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7a:df:aa:33:39:74:97:51:20:7e:fb:42:48:36:e0:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525b705a91dbc30ed10eb7222b7797b834e01863
Validity
Not Before: Sep 7 07:57:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b43c60e040c1f06fd5e58ec0fae403f0a69c0d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0b:ad:b7:8c:45:25:48:d7:f5:11:74:47:45:
10:64:26:98:79:ef:97:c0:c3:da:9d:cf:c4:e8:d4:
13:1d:ac:e8:59:54:98:40:fe:04:e8:1b:80:1b:f4:
76:9e:b3:81:01:cd:b1:e5:9c:1b:18:97:84:68:21:
1f:4a:d4:be:ab:83:8b:21:92:4e:0b:30:b0:94:11:
67:cf:92:c7:ff:1f:91:98:6a:57:d5:6a:76:5a:5a:
bb:7c:60:1b:9c:32:cc:f0:1f:a0:75:58:1a:3e:71:
92:5a:cc:a0:e2:f9:7a:be:ae:0b:96:83:29:02:df:
eb:bc:3f:39:e7:35:cb:26:c5:35:e4:e0:94:bd:0b:
66:13:ec:b2:9c:bf:3c:c2:d6:48:cd:ac:85:08:56:
7e:cc:b6:2b:53:53:f3:48:11:d8:39:d9:38:fa:d9:
f5:f4:46:c5:90:70:b2:73:b7:94:ea:96:30:51:b5:
b6:42:56:96:70:ef:dc:df:e3:b6:24:2e:f4:e4:5f:
60:34:6d:50:32:43:03:ee:ea:06:af:80:98:7b:a0:
db:a2:7c:62:1b:54:58:98:6b:4e:ff:33:6c:87:03:
10:90:73:06:74:f4:b6:f6:8b:31:6e:6a:22:0e:4a:
9e:cf:6b:60:ba:b9:46:70:39:33:8b:e3:e9:a4:f0:
0a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:3C:60:E0:40:C1:F0:6F:D5:E5:8E:C0:FA:E4:03:F0:A6:9C:0D:36
X509v3 Authority Key Identifier:
keyid:52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/tDxg4EDB8G_V5Y7A-uQD8KacDTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.242.0/23
IPv6:
2a0d:eb02::/32
Signature Algorithm: sha256WithRSAEncryption
69:7b:44:17:de:44:1b:a6:29:4d:f6:16:58:aa:60:4b:9b:9e:
4c:17:63:f1:8e:d0:ab:ca:9d:b6:9f:22:ca:49:c3:1e:50:41:
3f:a3:bf:b2:b0:b0:45:53:d9:20:01:67:be:b4:82:59:e1:95:
d5:67:76:58:99:57:ab:79:93:9f:f8:28:70:3e:ce:33:26:a6:
89:9d:e2:bb:01:c4:65:ca:1d:e2:f3:9a:b0:85:c7:f7:ce:cb:
2b:97:ef:c7:37:1a:2f:5e:66:73:d5:a5:25:51:78:da:12:82:
64:79:fd:f1:aa:27:05:ff:a2:f3:27:25:f0:4e:c7:d7:c8:bb:
1e:9f:fd:08:70:fa:fe:f4:81:cd:65:f8:49:34:44:d2:7c:dd:
d9:4a:02:f3:7f:b1:90:3b:2d:c8:04:41:2f:38:09:68:74:31:
f5:b4:ad:72:db:28:3c:f0:14:a7:e4:7a:68:57:6e:f7:6d:22:
91:41:55:0b:4e:ca:5c:14:c2:13:7a:8d:24:82:2f:34:17:91:
d7:af:71:8b:7f:a1:ae:89:af:97:14:99:0c:d9:ee:33:6b:94:
52:43:b7:b8:03:63:31:a4:0c:a9:12:c5:98:2d:18:03:c8:39:
ef:0e:a8:2f:b8:66:40:34:03:65:77:2c:73:41:04:2e:c9:0a:
d8:24:e4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:30:24 2026 by rpki-client