Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/tvCLjn2oLNgQkO-xEjC9Jj1_YaA.roa
File: tvCLjn2oLNgQkO-xEjC9Jj1_YaA.roa (raw, json)
Hash identifier: koXtdFkJZQfN6aoNVXS69zmfO0CKppZt9QYTuafS3Tw=
Subject key identifier: B6:F0:8B:8E:7D:A8:2C:D8:10:90:EF:B1:12:30:BD:26:3D:7F:61:A0
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 01A10A944167A24671A03E7B169DEF79DA55
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/tvCLjn2oLNgQkO-xEjC9Jj1_YaA.roa
Signing time: Mon 05 Oct 2026 05:40:50 +0000
ROA not before: Mon 05 Oct 2026 05:40:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 45.140.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:94:41:67:a2:46:71:a0:3e:7b:16:9d:ef:79:da:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: Oct 5 05:40:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b6f08b8e7da82cd81090efb11230bd263d7f61a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:25:0c:ed:8d:c2:a9:76:ac:8a:d3:ce:92:83:
5a:0b:62:2f:55:c2:1b:32:b5:26:e8:18:ea:dd:76:
cf:f2:ff:30:6b:dd:f8:58:66:96:21:de:41:b2:42:
51:16:db:4e:49:b6:01:0e:68:e7:f8:94:9f:20:d6:
91:33:b6:1e:63:f6:54:49:13:8d:67:86:69:5b:de:
95:2e:40:72:5e:78:c9:e5:86:5b:2e:5e:dd:86:e1:
f9:d8:69:fd:d6:f1:7f:35:fa:6d:f3:e0:88:bf:7a:
42:cc:49:6c:da:36:52:b5:5d:69:9f:68:97:f0:46:
92:a8:8d:12:e7:c1:b2:eb:23:7b:3b:62:58:70:88:
36:37:b6:6a:32:2e:e1:99:fe:f0:6b:21:03:bf:6d:
ea:1c:60:cf:49:d2:ad:55:f7:ff:b9:fd:61:14:c5:
58:93:68:8c:38:3d:ee:30:62:c6:03:27:24:5e:1c:
4e:95:32:3f:96:45:dc:dd:aa:94:a5:af:b6:a1:2f:
a4:52:2f:71:16:e7:31:8e:b1:44:e9:a8:39:17:5b:
40:50:98:99:fe:40:db:48:84:2a:9c:b7:85:4a:64:
5f:52:9b:84:12:e2:a3:aa:dd:ad:eb:0d:b9:64:38:
74:a3:ee:b3:f4:31:a5:ed:27:32:69:51:ea:85:a3:
85:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F0:8B:8E:7D:A8:2C:D8:10:90:EF:B1:12:30:BD:26:3D:7F:61:A0
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/tvCLjn2oLNgQkO-xEjC9Jj1_YaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.210.0/24
Signature Algorithm: sha256WithRSAEncryption
64:47:c5:d6:57:d5:76:f4:13:a5:bd:39:79:0b:e0:cf:17:c1:
ac:29:a5:aa:89:57:fd:80:0b:a2:b4:cc:6d:e3:0d:10:ca:28:
33:28:51:ef:2f:3b:34:6f:ff:11:4a:b3:87:69:8d:f8:6d:ac:
db:a9:8e:b9:71:6c:b3:23:af:17:85:60:44:5b:61:1d:28:e1:
da:43:87:cb:59:a1:f0:25:0c:e9:d5:c4:6e:20:7c:79:27:c1:
df:e5:0f:13:b7:5e:89:21:68:79:8b:1b:99:f9:fb:e3:fb:6b:
1a:14:76:42:f3:18:85:b1:6d:d9:53:61:ce:5a:62:61:d3:51:
39:19:0e:f9:fe:2c:8c:fc:f6:da:44:2b:98:c6:6f:ab:0e:20:
66:a6:40:b8:71:1f:9a:ad:32:80:d3:ae:44:73:8d:ce:81:18:
15:13:ee:70:9e:c8:56:0c:84:fb:27:e4:7d:0c:94:58:76:17:
16:18:94:eb:2e:97:4d:d4:78:94:eb:de:9b:ec:86:dd:f3:79:
69:a4:0b:85:1a:f0:45:62:3e:bf:42:2d:a6:d8:cb:df:22:bd:
91:a0:51:c0:8d:ba:cb:a1:d3:c9:ca:e2:b8:a3:74:9b:58:38:
71:19:68:0e:3f:cc:82:b5:bb:53:96:74:f0:e7:1b:01:67:83:
04:b5:04:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:12:50 2026 by rpki-client