Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/tiNn6V7lQJwEPwSpBpmzpIlCOkk.roa
File: tiNn6V7lQJwEPwSpBpmzpIlCOkk.roa (raw, json)
Hash identifier: PLDBgRQOKr/iKYlhIFX9U/GkSjb6UcvWrO34uaV/xLA=
Subject key identifier: B6:23:67:E9:5E:E5:40:9C:04:3F:04:A9:06:99:B3:A4:89:42:3A:49
Certificate issuer: /CN=2b04d555763fbaa094dca7a93daaa78fd4008554
Certificate serial: 019B7DCAD492F7156AF44E2BBDBEE3E65AF3
Authority key identifier: 2B:04:D5:55:76:3F:BA:A0:94:DC:A7:A9:3D:AA:A7:8F:D4:00:85:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/tiNn6V7lQJwEPwSpBpmzpIlCOkk.roa
Signing time: Fri 02 Jan 2026 08:20:03 +0000
ROA not before: Fri 02 Jan 2026 08:20:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198656
IP address blocks: 194.36.20.0/24 maxlen: 24
2001:67c:734::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:ca:d4:92:f7:15:6a:f4:4e:2b:bd:be:e3:e6:5a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b04d555763fbaa094dca7a93daaa78fd4008554
Validity
Not Before: Jan 2 08:20:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b62367e95ee5409c043f04a90699b3a489423a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d8:6a:db:e4:61:40:ae:82:ae:3c:b9:ed:2e:
9c:1b:d2:b3:fa:94:4d:5f:5b:72:96:ee:58:2c:86:
ab:a1:69:a6:07:ee:97:88:d4:2c:2f:66:18:b5:a5:
37:e4:92:42:ed:d4:6c:ba:6e:17:8a:c8:31:82:28:
cc:80:cc:24:96:99:55:9d:3e:3d:bd:98:d4:01:9c:
c2:a2:51:78:21:90:a8:54:3b:ea:b8:d1:7e:f1:2b:
05:2d:65:01:26:72:3e:31:72:06:67:50:48:bd:b7:
cd:87:f4:dc:bd:00:fe:bf:20:6b:b4:db:cd:8f:e5:
31:d6:f9:67:6e:33:85:3c:f0:9b:5f:7f:87:58:42:
0e:bb:75:24:85:f9:be:78:65:03:49:ac:f0:ff:1c:
71:0c:27:4c:20:87:dc:ef:64:7f:73:b4:c6:3c:65:
09:db:a8:3d:d1:3c:37:d0:03:b8:95:e0:b7:84:14:
f0:18:cb:23:34:2f:31:3e:cf:30:7f:28:9a:96:33:
cf:3c:3c:9e:2e:af:57:c4:9e:3b:12:d5:de:e2:53:
0f:b9:6e:ee:ef:26:e3:f4:b2:16:4c:d6:51:d8:c3:
f2:8d:9f:ea:9a:c4:11:58:5a:d6:8b:f5:a8:0f:1d:
ec:6b:17:41:a0:e9:8d:d1:de:47:0b:29:a8:d9:21:
84:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:23:67:E9:5E:E5:40:9C:04:3F:04:A9:06:99:B3:A4:89:42:3A:49
X509v3 Authority Key Identifier:
keyid:2B:04:D5:55:76:3F:BA:A0:94:DC:A7:A9:3D:AA:A7:8F:D4:00:85:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/tiNn6V7lQJwEPwSpBpmzpIlCOkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.20.0/24
IPv6:
2001:67c:734::/48
Signature Algorithm: sha256WithRSAEncryption
03:6c:5b:2b:d7:d5:98:c4:42:0c:c1:0f:aa:80:2e:1d:4a:6c:
3a:fc:ca:17:9a:58:8b:13:fa:70:89:1b:06:ef:77:7a:8d:c0:
96:a4:86:34:45:02:83:b2:78:cf:40:4f:1f:e9:e0:37:09:4c:
b8:c1:c2:b0:6f:74:66:fc:b6:b1:c0:65:52:b8:0f:1f:1e:05:
df:e0:de:76:ac:e5:78:69:5d:85:7c:b1:02:99:d1:34:60:ec:
5b:8e:c9:96:3a:cf:0b:b3:5f:16:4f:8c:44:be:f9:28:f3:1c:
58:f4:6f:ca:6a:1e:66:64:a7:0c:da:af:ef:70:1b:d8:2a:7c:
1f:ec:02:01:a2:51:7f:0f:62:75:ce:91:67:6d:ad:60:45:07:
6f:25:2a:b6:d9:5a:2c:39:ce:f6:3d:b3:cd:6c:ac:3a:ae:76:
b6:db:7e:af:e2:f9:96:3c:f8:81:cc:55:8b:66:af:db:75:e3:
3e:20:b7:ea:df:8a:79:a6:2e:e1:a9:c9:bd:aa:34:f1:7e:44:
51:ea:00:eb:1f:66:52:69:1f:b5:df:09:b6:6b:8c:e1:32:dd:
43:11:14:78:b2:91:ab:78:89:f4:5e:54:21:f3:dd:26:fc:58:
e5:7e:dc:ee:45:d3:f2:cd:9f:af:a6:5f:ee:11:38:87:b8:a0:
7d:b3:6c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:51:44 2026 by rpki-client