Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/tLSoRnsaxIHNEgZyINO1VZfHTX8.roa
File: tLSoRnsaxIHNEgZyINO1VZfHTX8.roa (raw, json)
Hash identifier: FoMCkLuYR4fq0Z+xEe+9BgJXWIzu0e0lOvSu3/OWVKk=
Subject key identifier: B4:B4:A8:46:7B:1A:C4:81:CD:12:06:72:20:D3:B5:55:97:C7:4D:7F
Certificate issuer: /CN=7f8ff3acfcaed203e96de91ab08c6efb64031a63
Certificate serial: 01A15971373372825408D788A2B4D5C9A8CE
Authority key identifier: 7F:8F:F3:AC:FC:AE:D2:03:E9:6D:E9:1A:B0:8C:6E:FB:64:03:1A:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/tLSoRnsaxIHNEgZyINO1VZfHTX8.roa
Signing time: Tue 20 Oct 2026 13:12:34 +0000
ROA not before: Tue 20 Oct 2026 13:12:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218661
IP address blocks: 2a0a:87c0:fff4::/48 maxlen: 48
2a0a:87c0:fffe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 13:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:71:37:33:72:82:54:08:d7:88:a2:b4:d5:c9:a8:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f8ff3acfcaed203e96de91ab08c6efb64031a63
Validity
Not Before: Oct 20 13:12:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4b4a8467b1ac481cd12067220d3b55597c74d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:da:67:67:dc:99:5e:be:eb:46:66:b2:bc:71:
a2:b3:02:3d:8b:b0:12:30:7c:e3:e7:c9:7f:ad:b6:
cc:d2:01:d9:43:07:9f:c9:2f:36:59:9d:6c:7c:7c:
9d:b0:b5:8e:b5:0c:e0:35:61:74:74:f6:6b:0a:6a:
9a:31:d7:50:e6:95:ff:62:7e:ff:17:21:0a:6d:c4:
40:47:81:e5:37:13:5c:28:35:75:4d:df:25:52:97:
53:c1:eb:b7:1d:ac:83:56:f1:90:c5:57:e9:c3:b2:
08:25:c5:88:2d:1f:40:78:bc:89:ab:07:71:fd:44:
8f:c4:5d:93:9e:07:a6:19:fd:19:78:de:85:c6:55:
52:76:f9:04:c0:96:6e:8c:16:3b:07:c4:f6:b8:b2:
0f:b9:02:97:9f:4c:1b:fa:05:49:0b:9c:91:ec:67:
62:5a:44:4c:46:5c:c7:ae:a3:2f:8e:55:6e:d3:50:
1a:f5:07:ee:e5:10:f2:95:6d:b4:39:65:3e:2d:c8:
77:c1:fc:0f:47:e6:92:e9:5a:5e:f8:59:47:60:ab:
65:2f:26:7f:28:93:b2:12:0d:28:4e:bf:3c:42:d8:
30:d7:c4:30:3a:67:c3:f6:0f:d1:ce:00:f7:3a:bd:
ad:75:f6:51:38:b6:5f:8a:00:a5:60:9a:6a:d5:04:
3f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B4:A8:46:7B:1A:C4:81:CD:12:06:72:20:D3:B5:55:97:C7:4D:7F
X509v3 Authority Key Identifier:
keyid:7F:8F:F3:AC:FC:AE:D2:03:E9:6D:E9:1A:B0:8C:6E:FB:64:03:1A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/tLSoRnsaxIHNEgZyINO1VZfHTX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:87c0:fff4::/48
2a0a:87c0:fffe::/48
Signature Algorithm: sha256WithRSAEncryption
0f:39:66:4e:1f:6c:b7:49:99:2f:56:59:89:e7:de:98:23:7a:
03:7a:c5:0d:36:15:e1:4e:be:7c:8f:43:49:37:f8:84:62:d5:
7d:00:a7:a1:ff:3a:76:9d:eb:0b:24:eb:65:88:a1:37:86:44:
2d:65:4f:0b:b5:7a:21:35:4b:07:61:e7:22:c0:c3:17:ee:59:
86:c6:16:9b:d3:50:18:28:d6:38:48:a6:ec:7d:6a:e1:db:9e:
2d:0d:c2:55:6e:54:d8:93:42:a5:f4:13:94:c9:8a:da:be:e8:
f4:bf:ff:3f:56:19:81:96:47:3c:df:61:bd:3e:1b:8c:7f:9a:
e6:7a:43:89:df:bf:b7:d3:92:ab:c6:a7:99:cf:dc:59:d0:e6:
5f:ab:1a:c3:99:f3:2f:b3:a1:c6:bd:26:32:9a:bf:7a:7c:5c:
e2:08:f0:1b:ca:63:02:a8:2c:52:33:f3:a7:bb:5c:07:65:03:
50:06:eb:0d:64:63:56:a9:a2:28:c5:09:3b:58:f7:15:86:8b:
f4:5d:b2:59:14:f9:a1:ed:f4:41:34:61:b1:7f:d1:88:86:41:
b9:7b:ad:df:15:a8:6e:d5:42:aa:9d:29:18:c3:c7:d9:54:d1:
37:28:0e:18:0f:e6:1d:08:04:05:9e:1d:e6:45:f2:2d:c3:2a:
83:27:a3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:14:07 2026 by rpki-client