Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/rlYvNxAK9qcuUlONwfsAHqdb-k8.roa
File: rlYvNxAK9qcuUlONwfsAHqdb-k8.roa (raw, json)
Hash identifier: 7jYG9FXUCsLRj/NE9jg46GVSGPRWOO8fxfhIgrhLC5Y=
Subject key identifier: AE:56:2F:37:10:0A:F6:A7:2E:52:53:8D:C1:FB:00:1E:A7:5B:FA:4F
Certificate issuer: /CN=4ca66f3c0f25774e696d2a46723277eb961128c3
Certificate serial: 019E303CE1DFD4DA24C5B11CE6DE10CD45A5
Authority key identifier: 4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/rlYvNxAK9qcuUlONwfsAHqdb-k8.roa
Signing time: Sat 16 May 2026 10:02:36 +0000
ROA not before: Sat 16 May 2026 10:02:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44592
IP address blocks: 176.65.141.0/24 maxlen: 24
176.65.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 19:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3c:e1:df:d4:da:24:c5:b1:1c:e6:de:10:cd:45:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca66f3c0f25774e696d2a46723277eb961128c3
Validity
Not Before: May 16 10:02:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae562f37100af6a72e52538dc1fb001ea75bfa4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:97:f4:bd:ba:b0:c9:e1:0c:f4:1f:4a:eb:cd:
80:e4:68:05:4a:d1:f5:db:5c:8f:eb:42:55:f6:f6:
d8:24:6f:29:2c:91:0f:9d:8e:5c:c2:77:25:5c:ef:
86:59:2c:02:cc:69:6a:b9:c7:b0:ea:96:e5:79:27:
b8:e2:80:c6:e0:d1:29:d0:31:7f:fd:34:37:65:02:
70:58:3e:34:29:7a:93:3f:20:d9:a6:63:05:53:bb:
66:b3:87:3d:7a:2d:50:5c:b4:dc:02:db:41:b1:17:
6e:c8:14:8f:63:0e:44:e8:f0:78:f1:7a:6c:93:c9:
7a:23:6b:e5:12:cd:80:f5:16:39:46:86:6d:53:4a:
73:be:8e:e2:47:b3:11:e4:fd:63:bb:c7:d1:13:f8:
6b:a8:37:44:b2:1a:26:8b:6e:c1:61:b8:b2:da:5e:
48:ea:81:06:dd:18:f8:86:eb:d7:19:13:25:86:ab:
8f:4a:46:c3:f8:49:1b:71:4f:bd:a2:b9:cf:51:06:
54:cd:5c:52:d0:12:0b:22:e7:22:e7:94:4a:0c:d4:
25:34:79:3d:19:9f:e9:a0:46:d4:ab:19:2e:2f:61:
c1:ff:2c:f1:7c:9a:9f:43:7e:b4:f1:d7:5b:e4:35:
c9:14:fd:8f:76:00:ae:c4:98:f9:2f:c0:77:02:01:
53:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:56:2F:37:10:0A:F6:A7:2E:52:53:8D:C1:FB:00:1E:A7:5B:FA:4F
X509v3 Authority Key Identifier:
keyid:4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/rlYvNxAK9qcuUlONwfsAHqdb-k8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.65.141.0/24
176.65.143.0/24
Signature Algorithm: sha256WithRSAEncryption
04:8c:84:08:99:22:d4:cf:31:41:ee:89:90:06:87:df:54:0b:
0b:cb:47:d5:ef:a4:ef:1e:11:83:21:c5:54:dd:c8:69:e3:48:
e9:a8:c2:04:8c:f8:78:a2:dd:cf:ca:40:fc:87:30:ed:b8:af:
37:00:67:b2:f0:86:c1:a6:35:2f:31:b3:06:88:f3:7f:2a:34:
9c:cb:1a:14:23:42:74:87:55:8c:f1:02:9b:81:71:41:c1:76:
51:d3:42:d7:fb:25:ea:f1:ee:d4:5a:6f:ab:be:61:9b:08:77:
5a:3b:e1:bb:9a:16:59:9d:0d:16:1a:4b:f0:9b:e9:c3:f4:0b:
f3:a9:31:af:ad:5e:10:57:a0:04:d9:ea:9c:77:5d:a2:bf:25:
ba:ab:ed:75:28:d3:88:24:29:a4:eb:8d:6c:7c:09:de:75:05:
99:34:46:02:f1:9e:53:52:0e:6f:9e:40:00:10:0c:78:09:ab:
1e:1b:94:76:86:31:97:8e:e7:a4:f5:a5:fc:8c:b9:29:dd:ae:
a1:8d:d9:49:16:54:e9:33:c0:65:f6:72:1a:2d:a1:e3:d1:c9:
c7:d7:90:23:c0:3f:d8:73:47:7f:54:d9:f2:93:b5:64:08:0a:
fa:cf:4c:24:91:e0:f3:37:0b:e1:d1:9e:de:61:c1:54:a6:a2:
46:de:57:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 03:14:37 2026 by rpki-client