Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/tygQWENVMllkytSnL6uy2BmJtDA.roa
File: tygQWENVMllkytSnL6uy2BmJtDA.roa (raw, json)
Hash identifier: NRsdT+DiuF+skvZYNUC1kJYT3am+ZHBeil1YQrMV2pw=
Subject key identifier: B7:28:10:58:43:55:32:59:64:CA:D4:A7:2F:AB:B2:D8:19:89:B4:30
Certificate issuer: /CN=519d802caf9aa8f427f1dd08556c89995f0478d1
Certificate serial: 01A02F4071B0F230F3B5D3012744447BC1AF
Authority key identifier: 51:9D:80:2C:AF:9A:A8:F4:27:F1:DD:08:55:6C:89:99:5F:04:78:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/tygQWENVMllkytSnL6uy2BmJtDA.roa
Signing time: Sun 23 Aug 2026 15:32:27 +0000
ROA not before: Sun 23 Aug 2026 15:32:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138401
IP address blocks: 143.246.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2f:40:71:b0:f2:30:f3:b5:d3:01:27:44:44:7b:c1:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519d802caf9aa8f427f1dd08556c89995f0478d1
Validity
Not Before: Aug 23 15:32:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b72810584355325964cad4a72fabb2d81989b430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:09:64:76:51:fc:84:d5:dc:48:b8:6d:0b:f2:
7c:4b:a9:d3:fd:8e:93:65:2f:5e:8e:37:0d:74:55:
db:f1:fb:8a:44:93:34:76:99:90:58:b6:49:42:d6:
31:50:26:07:58:a3:a1:8e:8c:8d:c5:a4:e4:b1:ce:
cb:0c:b5:72:34:6b:2a:d2:d6:39:89:26:6b:36:d8:
9d:c9:24:76:af:70:ad:75:b1:65:a6:c0:c7:71:7e:
7e:ff:e0:0f:37:94:a5:88:95:c5:3a:0a:4a:de:3e:
0e:18:ee:d5:9f:be:17:ea:0c:51:f0:f5:5a:9f:e0:
f7:3b:42:11:35:dd:72:1c:6e:61:6a:57:46:80:2a:
96:ea:02:a9:bc:46:f1:58:7c:f6:ed:7e:15:97:2f:
60:ae:21:76:2d:fd:2e:99:00:1c:7b:a6:ca:96:88:
e2:b4:fe:ec:81:87:55:bf:fd:1b:33:14:90:9b:ec:
a4:f6:a8:f7:0f:87:8d:3c:5a:6e:42:ee:de:0f:43:
48:de:1a:58:45:54:18:97:cb:b8:3e:91:89:fd:85:
19:38:26:7f:0e:50:3d:bb:b9:db:63:c7:62:3b:80:
aa:19:39:5f:1b:89:cb:2f:52:d5:87:a1:32:4b:42:
b0:a5:4e:c9:b1:79:c1:f1:01:67:ef:13:48:b0:7c:
69:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:28:10:58:43:55:32:59:64:CA:D4:A7:2F:AB:B2:D8:19:89:B4:30
X509v3 Authority Key Identifier:
keyid:51:9D:80:2C:AF:9A:A8:F4:27:F1:DD:08:55:6C:89:99:5F:04:78:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/tygQWENVMllkytSnL6uy2BmJtDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.246.55.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:2c:07:79:69:23:65:ea:8d:43:92:71:5f:af:ba:e3:81:6d:
e1:3f:58:b7:19:09:06:fd:b9:bb:87:99:51:0f:b0:36:99:3f:
e7:89:a3:42:79:3c:d2:5a:18:a0:03:ec:b9:77:86:25:52:ff:
fd:8c:57:74:4b:ea:a0:89:7e:00:09:a9:ed:3b:6a:47:9e:66:
db:90:d8:d4:85:86:2b:54:c7:73:57:50:dc:86:7b:1d:13:c4:
d9:10:c4:0e:0a:f5:b6:0a:b9:34:2a:55:a2:40:fa:05:ea:54:
b9:a2:ce:e3:6d:95:75:11:be:ec:8c:04:62:44:42:11:70:b7:
ed:de:be:03:5f:63:24:35:c3:2a:ee:ff:f3:a8:27:8d:0a:d6:
7d:58:ea:9a:6a:53:04:50:1d:69:07:0f:66:9c:c7:74:51:60:
4e:01:21:40:38:25:13:f8:bc:c4:e3:54:47:32:2e:6f:fd:0d:
dc:a5:f3:32:10:f3:bd:44:0d:61:52:f3:55:cd:94:80:59:46:
c0:1e:df:ba:ea:55:d6:7f:f7:ae:59:6c:16:1f:f0:5c:61:80:
1f:7e:f8:5d:7c:24:a3:d8:ec:ba:61:5c:0c:3e:9c:34:2e:82:
d3:b3:81:31:9d:00:f2:dd:08:7b:b7:55:91:56:67:da:7c:89:
2e:2c:79:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:24:47 2026 by rpki-client