Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/taoDPlgHA4OjvYC0kFnqBRL12EE.roa
File: taoDPlgHA4OjvYC0kFnqBRL12EE.roa (raw, json)
Hash identifier: VNUvFWzfJ/ombAqarCBYjUffhiIlXquQ4FMglE18A2Q=
Subject key identifier: B5:AA:03:3E:58:07:03:83:A3:BD:80:B4:90:59:EA:05:12:F5:D8:41
Certificate issuer: /CN=9c47ee73c28780b12f152cfa259ade3d8ae0d13b
Certificate serial: 01A171B899EA6B2B17B1B55FA6DC7E3C3B88
Authority key identifier: 9C:47:EE:73:C2:87:80:B1:2F:15:2C:FA:25:9A:DE:3D:8A:E0:D1:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/taoDPlgHA4OjvYC0kFnqBRL12EE.roa
Signing time: Sun 25 Oct 2026 06:21:25 +0000
ROA not before: Sun 25 Oct 2026 06:21:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43395
IP address blocks: 194.33.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:71:b8:99:ea:6b:2b:17:b1:b5:5f:a6:dc:7e:3c:3b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c47ee73c28780b12f152cfa259ade3d8ae0d13b
Validity
Not Before: Oct 25 06:21:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5aa033e58070383a3bd80b49059ea0512f5d841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5f:fa:40:ea:b1:da:36:07:31:57:97:46:b4:
ce:fd:68:e0:b0:77:a5:29:4c:5a:aa:61:9f:e1:70:
35:93:b7:73:04:ad:17:31:62:60:28:d9:cb:ec:91:
62:e7:06:1a:87:18:91:7f:00:23:2e:e6:12:44:0b:
17:63:3f:2a:f5:a1:7f:72:7a:1e:2b:74:24:4e:2b:
c3:c4:bf:bf:3d:5a:3f:f0:54:cd:c2:77:9a:b7:09:
26:ed:42:10:8c:6d:fc:19:89:27:a3:df:1a:46:e2:
f5:87:ce:11:54:d4:d4:d8:eb:a1:a3:2b:c5:d2:04:
4f:a0:4b:43:0f:aa:0c:7e:88:0c:9c:17:32:2a:dc:
0f:8e:cf:2d:5c:8f:1c:95:7d:6a:e4:df:5f:23:51:
12:e5:ea:73:76:d6:99:5c:1c:0d:8f:82:f9:b2:22:
5e:20:96:34:7f:f3:0f:6f:d6:54:60:86:95:e3:25:
8e:77:d2:6e:18:7e:43:09:c3:80:cb:34:71:70:7e:
e2:2c:1a:9d:b5:7c:7d:57:89:2d:31:cd:b8:e9:81:
92:fb:7d:85:fb:13:fe:21:e5:1a:3b:c3:5e:ca:89:
bb:13:14:18:a5:ca:1b:39:2e:f3:01:3e:07:79:fc:
70:17:2f:a4:06:29:f5:27:d0:0b:86:03:cb:75:b9:
db:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AA:03:3E:58:07:03:83:A3:BD:80:B4:90:59:EA:05:12:F5:D8:41
X509v3 Authority Key Identifier:
keyid:9C:47:EE:73:C2:87:80:B1:2F:15:2C:FA:25:9A:DE:3D:8A:E0:D1:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/taoDPlgHA4OjvYC0kFnqBRL12EE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.104.0/24
Signature Algorithm: sha256WithRSAEncryption
88:6a:ad:57:41:f2:35:d7:4c:5e:d6:e4:71:35:96:f8:df:f7:
d6:04:80:fd:21:5d:8f:f6:f3:90:0e:b4:35:bf:0c:a6:38:bc:
b0:18:3d:0c:5a:43:40:80:02:2d:a8:2c:fa:55:ad:1c:38:06:
5f:dd:0b:a0:54:c7:a8:34:66:a5:30:6b:6e:40:34:ae:62:4e:
f3:ac:36:79:25:1e:0c:a3:e6:7f:25:a1:bf:3d:fd:50:be:a6:
e5:b1:4a:4e:63:0e:3b:5a:c4:a4:b7:69:87:b3:90:4e:1b:d3:
d1:0c:5f:f0:64:5b:cb:b1:5e:f5:87:4d:1c:8a:12:92:27:16:
f1:f5:18:c3:1f:66:10:1e:fb:3e:49:c2:83:97:38:16:5f:1a:
d6:e9:54:b8:30:a1:1a:ae:f8:3e:e6:8b:cc:6d:bd:d4:31:f0:
1a:c6:f3:43:12:34:46:dd:8e:e3:ca:12:e8:1f:f0:05:a4:d0:
96:b8:c7:82:9a:43:35:fe:21:b4:67:65:22:c8:a1:70:a3:c4:
71:c3:39:ad:5d:1e:cb:f5:4b:a2:42:88:99:16:4c:3b:6b:3c:
96:c2:fd:6a:7b:9d:13:c4:43:78:89:f2:2c:8d:49:ac:f4:9d:
ad:c9:58:fe:5d:78:86:73:db:f3:4a:df:e8:45:fd:20:bc:fb:
2e:4b:78:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:34:33 2026 by rpki-client