Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/TAn6Zd_F930vNbBb_bCNGU1BkWo.roa
File: TAn6Zd_F930vNbBb_bCNGU1BkWo.roa (raw, json)
Hash identifier: Idr8D6MHOaoxLkZuo+2iCSWJtlzJtOxj1UYWcEBgsO8=
Subject key identifier: 4C:09:FA:65:DF:C5:F7:7D:2F:35:B0:5B:FD:B0:8D:19:4D:41:91:6A
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01A004AC2DC1B12D2DB2C6A2993D0232BF42
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/TAn6Zd_F930vNbBb_bCNGU1BkWo.roa
Signing time: Sat 15 Aug 2026 09:06:27 +0000
ROA not before: Sat 15 Aug 2026 09:06:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.138.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Aug 2026 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:04:ac:2d:c1:b1:2d:2d:b2:c6:a2:99:3d:02:32:bf:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Aug 15 09:06:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c09fa65dfc5f77d2f35b05bfdb08d194d41916a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ab:5b:ca:53:6d:ba:70:46:e1:7b:76:fe:2b:
71:aa:1a:8f:74:76:9a:19:91:09:b1:d0:6d:6c:73:
f1:3f:11:4c:4c:f8:16:94:92:2e:57:f9:2e:26:a7:
13:28:2a:6e:62:23:63:46:27:8d:ac:cc:8f:85:09:
46:78:1d:e5:b5:aa:ec:44:1e:4e:39:78:08:bd:3b:
6e:ce:06:56:9c:22:1c:c2:19:23:91:f1:45:97:20:
dd:64:cf:55:79:95:4a:77:fe:9f:b7:60:1c:45:52:
93:71:a4:17:3d:da:0e:97:ce:59:b4:28:36:17:ec:
a2:2e:ee:f2:53:db:3b:91:c3:c2:66:73:ea:23:e3:
18:4d:34:10:6c:47:d6:5b:9f:9b:3e:e3:0d:a0:d7:
c3:f3:dc:f1:ae:c3:80:94:d5:d5:9e:ea:80:1b:e5:
59:86:c0:25:7e:fb:17:24:d9:33:8d:09:3f:1d:94:
3d:13:2b:44:93:4f:89:d4:56:83:58:77:30:73:36:
fe:c2:6f:5b:04:24:ed:64:83:db:7d:f0:67:c2:80:
d6:65:fe:ae:8c:3e:e7:ed:48:ca:26:f0:3e:ae:24:
91:e5:23:8a:d6:e3:b1:11:7d:ae:a2:23:e4:dc:ed:
ea:31:39:fd:ed:ad:ff:81:a7:86:16:6d:ab:2d:ac:
19:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:09:FA:65:DF:C5:F7:7D:2F:35:B0:5B:FD:B0:8D:19:4D:41:91:6A
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/TAn6Zd_F930vNbBb_bCNGU1BkWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.182.0/24
Signature Algorithm: sha256WithRSAEncryption
41:b4:35:8e:05:68:c5:cc:6c:1e:05:0e:f7:f7:1e:b8:1a:c3:
94:a5:c0:85:18:bc:46:2f:a7:19:38:2b:17:da:35:46:6c:5f:
1b:b1:a0:de:4b:ad:c1:7b:e1:73:c9:3e:e4:be:8f:d7:68:e0:
73:64:80:c6:ea:a0:4f:e9:23:9a:c3:95:8c:00:ec:66:78:66:
f7:86:1a:56:0c:d3:bf:eb:18:2c:97:79:a9:ab:9e:c6:78:db:
5c:ed:9e:64:cc:92:35:86:b6:bc:57:66:c9:25:6c:a9:68:76:
3f:ff:83:fa:d0:74:c1:65:d6:29:03:62:9b:da:51:07:e0:be:
69:a8:74:1d:db:71:c1:ee:82:d4:fc:47:23:39:85:81:cd:6c:
55:fc:85:63:41:8a:3d:ba:a7:b3:5a:81:5e:58:2c:55:33:fd:
88:b4:e1:ea:a4:2c:a6:5b:a4:19:a9:57:5a:a5:dd:ba:25:f4:
19:e2:d2:5d:6d:cb:70:4b:d5:5d:65:b9:be:55:32:c8:54:df:
04:d7:dc:3a:95:94:65:68:b5:d2:90:fe:7a:8d:87:e9:20:c5:
b3:22:92:68:88:97:b4:30:92:30:19:f9:c4:e4:1a:3a:3e:e4:
50:8c:b2:04:3b:f8:27:3c:84:69:75:b6:79:d8:6f:3e:b2:38:
14:64:4d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 20:16:14 2026 by rpki-client