Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/TJBNoqDJuDXadUHCaSsBuATOWto.roa
File: TJBNoqDJuDXadUHCaSsBuATOWto.roa (raw, json)
Hash identifier: gJS3wY/oZsaAW7+2UEGNOUq9JEb/eTtIedw6FlGOizU=
Subject key identifier: 4C:90:4D:A2:A0:C9:B8:35:DA:75:41:C2:69:2B:01:B8:04:CE:5A:DA
Certificate issuer: /CN=2181c5b3cb7eeb1e49582155a1918ec612f95ac6
Certificate serial: 019D2FB9798442D026ACD7138A468D4C41F1
Authority key identifier: 21:81:C5:B3:CB:7E:EB:1E:49:58:21:55:A1:91:8E:C6:12:F9:5A:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYHFs8t-6x5JWCFVoZGOxhL5WsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/TJBNoqDJuDXadUHCaSsBuATOWto.roa
Signing time: Fri 27 Mar 2026 14:36:17 +0000
ROA not before: Fri 27 Mar 2026 14:36:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197156
IP address blocks: 46.255.88.0/21 maxlen: 21
178.255.48.0/21 maxlen: 21
185.60.156.0/24 maxlen: 24
185.60.157.0/24 maxlen: 24
185.60.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/IYHFs8t-6x5JWCFVoZGOxhL5WsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/IYHFs8t-6x5JWCFVoZGOxhL5WsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYHFs8t-6x5JWCFVoZGOxhL5WsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2f:b9:79:84:42:d0:26:ac:d7:13:8a:46:8d:4c:41:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2181c5b3cb7eeb1e49582155a1918ec612f95ac6
Validity
Not Before: Mar 27 14:36:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c904da2a0c9b835da7541c2692b01b804ce5ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0c:29:07:67:73:41:57:4b:d0:05:39:06:1d:
e7:00:b1:88:40:c0:a8:8a:82:bd:42:aa:87:10:08:
87:ba:b0:5e:ea:51:a5:fa:68:12:4f:a9:7e:04:d2:
e2:5c:bb:83:51:af:ec:0c:2b:3a:f6:62:e8:3d:58:
bf:b8:f7:3d:46:bf:cb:38:8c:9d:ca:4b:f0:ce:57:
e2:ef:81:c3:b3:6e:ef:6c:a1:7a:c5:2a:43:8b:09:
06:db:10:62:9a:dd:44:b5:83:b7:51:5e:11:e8:11:
35:01:68:61:da:c3:4d:33:7f:cf:fa:dc:57:57:5a:
a5:08:f3:aa:ab:6e:b4:23:16:be:86:e0:5a:20:1b:
fa:86:3e:d7:07:df:01:3d:bf:2e:3a:24:34:cd:be:
f3:03:a4:8a:d9:2e:7a:d3:8e:d6:f6:25:df:26:94:
6a:4e:ae:57:d4:85:e2:a8:16:c7:8a:59:2f:8e:2f:
52:ee:32:e9:08:7f:fc:c9:f3:e2:0b:4d:ea:d9:fe:
f2:00:9c:3f:48:92:30:bc:b2:5f:f8:d2:b4:64:1c:
6c:46:7a:a4:bc:26:db:3b:27:a0:5d:a2:b5:0a:17:
40:1e:86:c7:54:87:81:04:61:d6:49:f0:06:b9:45:
31:9d:f7:0f:6f:d9:6d:1e:af:07:57:bc:97:e1:18:
03:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:90:4D:A2:A0:C9:B8:35:DA:75:41:C2:69:2B:01:B8:04:CE:5A:DA
X509v3 Authority Key Identifier:
keyid:21:81:C5:B3:CB:7E:EB:1E:49:58:21:55:A1:91:8E:C6:12:F9:5A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYHFs8t-6x5JWCFVoZGOxhL5WsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/TJBNoqDJuDXadUHCaSsBuATOWto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/IYHFs8t-6x5JWCFVoZGOxhL5WsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.88.0/21
178.255.48.0/21
185.60.156.0-185.60.158.255
Signature Algorithm: sha256WithRSAEncryption
d0:ab:b3:e8:ce:44:29:4b:b7:25:6c:0a:fe:be:10:47:3d:32:
8d:59:17:6f:3d:3a:d8:b4:f2:c9:e7:11:02:50:a9:dc:5e:d0:
f9:fa:58:74:91:70:fe:7a:a1:44:fa:4f:b8:02:82:e9:20:ad:
6e:0a:19:65:61:f4:58:4e:b1:0a:6f:a9:ca:5e:08:50:95:81:
10:4c:a0:8c:cd:11:42:46:b3:d6:6b:c2:42:08:3d:b9:f3:21:
14:41:4b:56:98:e7:9d:ff:34:f9:f4:f6:f6:ff:33:4f:fb:2a:
87:40:6a:12:5b:cc:2f:dc:aa:00:cc:ef:78:79:6f:1a:f8:6d:
71:7e:cd:75:03:c8:61:40:d6:97:10:c1:9e:62:4e:0d:9b:f1:
94:2f:3d:2f:f8:d5:dd:10:dd:75:65:ff:ae:d2:b0:3d:44:84:
fe:d2:53:2e:28:ba:3f:3d:82:8b:23:04:6a:ba:d8:12:11:7d:
44:41:ee:ed:6d:34:bf:ce:ee:5f:44:ef:5b:71:80:75:9c:55:
50:95:f9:0f:7d:e0:ee:65:db:91:45:65:78:20:be:c6:12:2b:
c0:e6:e7:57:a9:13:f8:ae:01:5e:66:c6:4b:1d:f6:9b:bc:1a:
fd:ae:2a:f0:01:69:bb:9a:38:78:d7:8c:18:09:09:89:c3:ef:
84:52:07:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:43:50 2026 by rpki-client