Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/TjyKjzgVxClAneVTofUpEpODO4c.roa
File: TjyKjzgVxClAneVTofUpEpODO4c.roa (raw, json)
Hash identifier: P6CkJUB0bWvv80EbY764u+5wuiSaj13NOmKLygDqt9w=
Subject key identifier: 4E:3C:8A:8F:38:15:C4:29:40:9D:E5:53:A1:F5:29:12:93:83:3B:87
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 019D9674F633ADE1D40A37D282ADEE8586E8
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/TjyKjzgVxClAneVTofUpEpODO4c.roa
Signing time: Thu 16 Apr 2026 13:22:20 +0000
ROA not before: Thu 16 Apr 2026 13:22:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209101
IP address blocks: 91.92.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:96:74:f6:33:ad:e1:d4:0a:37:d2:82:ad:ee:85:86:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Apr 16 13:22:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e3c8a8f3815c429409de553a1f5291293833b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:86:35:d4:c4:75:66:57:1e:40:15:71:9f:76:
ca:5e:4e:6f:79:ce:4b:b8:03:53:4d:92:5d:d0:00:
4f:12:ba:84:e5:55:1e:9b:c0:ad:c0:be:b4:1d:6e:
5c:3e:81:23:01:ab:96:42:80:f3:d7:13:76:eb:3a:
21:a7:cb:29:02:8e:0a:2e:ad:c3:20:82:93:45:db:
c9:e9:2c:93:0c:29:6b:e7:14:99:d9:99:36:48:32:
b0:6a:91:80:90:50:10:47:e0:92:47:0b:0f:4b:48:
8e:85:a5:72:5c:6f:ac:c2:d1:b4:db:df:e0:eb:42:
e9:4a:59:5c:af:19:27:54:51:56:62:26:ad:1e:8c:
de:65:48:1d:84:53:6f:bb:1c:bf:d0:23:3c:e9:b5:
53:46:84:61:72:23:c1:10:23:4a:11:cb:7e:69:08:
00:6a:dd:ce:c9:10:8d:57:c7:f5:6d:16:75:6b:11:
bf:22:7b:e2:d1:c1:9c:8c:1c:2a:46:5d:56:04:73:
64:09:26:7c:1a:97:d9:85:9b:18:85:29:05:14:86:
d5:e1:77:6c:b2:91:82:69:36:9f:17:04:55:0a:86:
cc:95:19:13:24:da:d0:99:4f:de:ce:b8:bb:3e:0d:
29:8e:96:39:7b:cc:d9:37:56:8e:b2:35:d0:29:56:
ce:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3C:8A:8F:38:15:C4:29:40:9D:E5:53:A1:F5:29:12:93:83:3B:87
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/TjyKjzgVxClAneVTofUpEpODO4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.35.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:16:8d:69:65:93:24:28:8c:38:6f:fe:e0:e1:fe:bd:3d:03:
4e:34:ef:af:37:a0:cc:96:6c:0b:0e:96:90:a8:34:b4:d5:86:
79:46:49:dc:eb:7a:76:8f:28:bb:10:ac:69:f6:03:c2:6a:45:
fd:82:b5:f1:65:ab:bc:bb:f4:42:c3:e7:93:6f:22:a8:5e:b7:
5a:18:49:23:87:a3:69:f4:1b:ea:69:ef:2e:e2:f5:a8:39:fc:
14:1a:ca:05:16:f3:de:f7:69:0a:73:ef:36:1e:6b:ee:fb:1e:
bd:a1:97:8a:ce:51:af:d5:45:26:60:cf:8b:f0:8c:c1:2a:9d:
fb:d4:49:6e:ff:64:73:3e:fe:56:ea:d3:eb:f0:96:f4:2f:2f:
fe:c6:63:1e:31:a2:bf:3b:a3:e5:47:92:da:84:f5:98:01:13:
5f:c3:5f:7f:e6:81:73:cf:eb:ae:e1:4e:4b:fa:92:7d:8a:a9:
9a:5f:ec:d5:4a:43:33:d7:e3:77:ce:b4:76:f4:8a:65:2d:89:
d2:d4:94:51:b6:21:55:c8:2b:62:f3:59:d6:ab:e1:df:b8:3e:
8f:4e:09:8e:2c:5a:9b:1b:bd:53:27:d9:5b:02:7f:fd:5e:77:
06:e1:fe:11:97:22:76:d8:c6:ae:8d:25:c3:38:df:02:e5:49:
18:5e:d2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:53:43 2026 by rpki-client