Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/TnL8Kx7JM3cGx6oBETmpwEtL6a8.roa
File: TnL8Kx7JM3cGx6oBETmpwEtL6a8.roa (raw, json)
Hash identifier: +TTqJsJHtwy9jKuVsGv7gIQRLZiYmk0fL0w+NKn1gFw=
Subject key identifier: 4E:72:FC:2B:1E:C9:33:77:06:C7:AA:01:11:39:A9:C0:4B:4B:E9:AF
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019F84AD3B64E02E306E276E394BF18B31D1
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/TnL8Kx7JM3cGx6oBETmpwEtL6a8.roa
Signing time: Tue 21 Jul 2026 12:36:13 +0000
ROA not before: Tue 21 Jul 2026 12:36:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142462
IP address blocks: 85.92.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:36:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:ad:3b:64:e0:2e:30:6e:27:6e:39:4b:f1:8b:31:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jul 21 12:36:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e72fc2b1ec9337706c7aa011139a9c04b4be9af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:89:96:c0:18:c5:17:0a:47:8d:3d:92:7a:c0:
0d:46:be:d7:06:e0:02:0d:2b:47:9b:34:b6:d5:54:
73:67:16:f4:1c:f7:53:ac:de:fd:79:4b:fa:90:30:
55:dc:ab:83:ae:45:17:92:d4:bd:c3:5e:88:68:df:
62:1e:d4:b2:95:ed:62:e2:47:14:e3:04:a4:9a:9a:
67:9b:d3:60:3b:1f:0c:c0:e1:92:ea:40:c1:31:d4:
1f:61:6c:14:98:4b:d2:69:89:3e:7e:03:7d:dc:fc:
a0:04:a1:86:0d:c9:b6:89:86:ba:3b:2e:c6:2a:b5:
8f:b7:64:2c:16:d8:2b:07:c5:4e:dc:b2:0b:35:94:
4b:9d:d9:85:06:7c:82:40:eb:4d:37:23:95:08:f0:
b2:aa:d8:dd:66:30:5d:bc:29:8e:d2:98:ca:7e:5c:
a4:3e:45:27:4d:71:3c:4b:0f:b5:49:86:b6:1c:16:
c8:ed:ff:7f:cd:48:77:ed:16:56:34:42:d3:cc:0d:
75:3e:9c:33:da:81:bc:7c:4f:ee:90:06:81:7f:f2:
01:eb:d5:06:a8:b9:da:54:51:f1:35:ae:11:78:e9:
32:bc:9a:fc:93:16:7d:82:69:dc:3f:cd:06:aa:a9:
2e:af:91:d2:a3:2b:81:14:47:ee:58:26:42:e1:28:
d9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:72:FC:2B:1E:C9:33:77:06:C7:AA:01:11:39:A9:C0:4B:4B:E9:AF
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/TnL8Kx7JM3cGx6oBETmpwEtL6a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.143.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:22:81:c3:4b:e3:94:8b:dc:67:c7:4d:5e:98:0a:83:49:a5:
ba:55:be:30:b3:7b:2f:64:f2:d6:f6:ce:a9:22:53:d7:16:a9:
f6:00:63:a0:68:d4:1a:4a:25:49:fc:53:52:66:7e:9f:7c:f2:
7e:76:da:fc:0b:f1:e3:57:be:1f:3a:9b:09:67:db:1f:7c:f4:
45:94:8d:43:22:96:eb:54:0e:82:31:cd:11:cc:47:82:cc:1d:
22:73:84:71:2d:32:20:b8:60:ca:70:30:c8:e8:33:c1:7a:bb:
90:fa:d5:91:a2:22:45:54:04:73:15:fc:96:4c:fc:c0:8d:82:
3c:32:48:7b:0b:a1:a6:ce:27:81:74:33:76:94:8c:23:d1:10:
8d:36:94:14:8e:e6:37:9d:26:d4:3e:73:68:e0:44:58:19:46:
71:97:8e:fe:ac:29:1e:ec:fc:5e:8e:cf:b5:4b:c5:94:01:a3:
31:1b:63:7a:96:ca:9b:37:59:7b:0d:f3:d1:78:56:cf:be:07:
35:15:bf:ff:9a:89:7f:b9:5c:b0:b1:9b:06:4c:64:9d:a1:84:
a1:dd:b7:d1:5c:83:92:43:a6:ad:0d:c5:10:3a:c1:e0:18:4c:
a4:8f:90:e5:f3:19:4d:73:13:85:89:a5:8c:2d:54:79:1f:58:
94:6a:42:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:21:29 2026 by rpki-client