Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/tlHI2i4qutELwImJYTNskyG_ROg.roa
File: tlHI2i4qutELwImJYTNskyG_ROg.roa (raw, json)
Hash identifier: N6qdsLxd848IDGV/kbe2zOJ8G0e0JJzLy8/+E+zng4A=
Subject key identifier: B6:51:C8:DA:2E:2A:BA:D1:0B:C0:89:89:61:33:6C:93:21:BF:44:E8
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A12F9420E234FC4D052F5950A26EA82442
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/tlHI2i4qutELwImJYTNskyG_ROg.roa
Signing time: Mon 12 Oct 2026 10:06:39 +0000
ROA not before: Mon 12 Oct 2026 10:06:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402899
IP address blocks: 195.21.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:94:20:e2:34:fc:4d:05:2f:59:50:a2:6e:a8:24:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 12 10:06:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b651c8da2e2abad10bc0898961336c9321bf44e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4d:91:da:c2:69:c8:69:20:8d:b7:ab:21:7d:
2e:c2:1b:3e:92:d0:50:70:30:ac:27:8e:4f:aa:44:
77:2a:8f:ae:e9:88:51:10:b7:d7:d5:b1:83:f8:fe:
6f:bd:84:23:7d:5d:61:b4:42:2d:58:4e:f6:2c:36:
23:31:74:05:de:d6:91:e3:9b:25:c7:85:40:79:30:
65:ff:a5:9a:79:95:8c:08:05:39:67:cf:da:f0:90:
b5:5d:86:9a:9a:e4:0c:4a:c0:b3:14:db:cf:6f:f9:
36:3f:a4:18:35:e6:e6:b5:1e:df:dc:16:6f:02:55:
6e:09:79:51:ed:e4:93:bd:d9:a1:70:94:83:42:6f:
cb:ef:fc:79:22:8d:34:73:a1:5b:36:19:41:3a:9a:
9d:bb:fb:67:d4:c1:11:fd:57:6a:20:6f:8c:26:97:
0c:29:be:1d:89:6c:52:72:cc:d8:24:f7:e4:ca:0a:
4b:6d:79:d2:1c:ec:c1:d6:5e:74:62:39:b3:a8:a7:
e7:56:c6:40:d7:06:05:41:1d:1c:3e:a3:2d:99:36:
c3:c8:56:a6:8d:e9:3c:0b:8f:0e:ec:11:36:ab:ac:
2b:e4:d4:1f:71:a2:1d:79:a9:19:d0:cb:f9:89:ba:
b8:02:82:ef:f9:85:17:2f:c6:bc:da:08:b4:ff:62:
8c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:51:C8:DA:2E:2A:BA:D1:0B:C0:89:89:61:33:6C:93:21:BF:44:E8
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/tlHI2i4qutELwImJYTNskyG_ROg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.21.135.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:43:39:ad:65:1c:7c:f0:76:c3:f9:b8:4d:17:1a:a4:bb:4c:
12:44:33:63:b5:59:f2:9a:f3:4f:e2:20:1a:ce:40:37:90:cc:
eb:13:53:66:c8:b7:2c:3f:de:3e:c0:7f:54:c2:15:e9:4e:85:
ff:2e:b4:5a:92:75:7f:92:6d:fa:ab:88:94:43:dd:86:7d:d0:
08:a9:3f:e2:07:f1:be:74:13:38:11:8f:6a:26:57:78:bf:14:
f8:8b:d9:5c:c7:ab:e6:02:8c:04:94:d3:f8:fd:6c:0b:0f:d9:
b1:d2:cc:79:bd:85:b5:41:71:1d:4b:ae:3b:cf:22:93:96:37:
e0:ba:07:b1:25:ec:f0:f6:da:e0:b2:d3:e0:c0:f7:b2:6d:4d:
74:56:25:65:4b:cf:93:ff:7d:2b:47:7e:24:8f:06:14:f0:f7:
4a:00:9a:91:2d:7f:5a:28:4f:d8:93:67:48:bd:5e:f0:1f:cb:
14:17:fb:e3:5a:f9:6f:60:85:00:ee:b9:65:55:78:75:57:d1:
6a:cb:bb:20:83:15:d5:4e:00:ee:88:c2:96:c7:00:70:03:88:
bc:e4:17:09:6e:2a:b9:78:13:51:49:e3:47:92:3b:55:cf:9f:
d9:30:17:4d:38:4b:f8:d0:da:d2:28:b9:6a:7a:69:17:9d:ce:
bb:53:28:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:03:41 2026 by rpki-client