Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Tgcb3z5l25dcL4s-WgocSAs1zGM.roa
File: Tgcb3z5l25dcL4s-WgocSAs1zGM.roa (raw, json)
Hash identifier: uwrWvZOJUYpA1Q/BO01atrF6dnnvE66ApU4Nhg9E5JI=
Subject key identifier: 4E:07:1B:DF:3E:65:DB:97:5C:2F:8B:3E:5A:0A:1C:48:0B:35:CC:63
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019FD7CECCEFE0F38908CE8107498AA3B31E
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Tgcb3z5l25dcL4s-WgocSAs1zGM.roa
Signing time: Thu 06 Aug 2026 16:01:22 +0000
ROA not before: Thu 06 Aug 2026 16:01:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44665
IP address blocks: 5.8.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d7:ce:cc:ef:e0:f3:89:08:ce:81:07:49:8a:a3:b3:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Aug 6 16:01:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e071bdf3e65db975c2f8b3e5a0a1c480b35cc63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bd:ba:39:d7:02:aa:d8:f6:e2:76:f6:c5:94:
29:10:36:4e:d6:e1:d7:91:73:a5:09:98:c0:1b:9d:
cb:d0:1a:15:ed:6d:d0:48:92:18:d1:52:74:0c:4c:
49:18:e8:31:70:1a:d2:b0:89:30:ad:5f:be:52:0c:
28:b1:a2:c9:bf:76:ea:85:c6:f5:ca:fa:f0:c4:f1:
25:28:2c:e2:56:d9:e3:59:d8:bc:97:83:e3:8d:6b:
d7:16:01:24:89:88:28:ab:6c:a3:83:36:2a:52:1c:
0e:20:9b:54:06:64:b0:3a:0c:7e:64:33:56:ca:0f:
b9:ad:c6:30:4c:07:20:ad:e1:e2:35:9b:62:75:1f:
c9:9a:57:f7:0b:16:aa:4f:9b:3e:1c:55:68:3c:72:
43:6c:be:ee:0d:2f:e0:e0:35:a7:0c:d4:6e:20:94:
30:9c:76:e3:93:47:6e:d6:db:dc:ef:61:b6:67:65:
5a:26:1d:76:24:c2:79:25:32:be:02:43:b9:f3:0c:
18:3a:7d:f9:fd:2e:59:bc:4a:69:db:39:d5:62:27:
c1:2b:e3:b9:c0:92:7a:50:44:73:b1:85:b3:b6:11:
69:8b:a2:91:c7:59:5a:a4:c9:18:95:a6:7f:7f:63:
06:20:e0:6b:ae:75:41:96:fd:7c:f1:09:26:d2:cc:
97:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:07:1B:DF:3E:65:DB:97:5C:2F:8B:3E:5A:0A:1C:48:0B:35:CC:63
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Tgcb3z5l25dcL4s-WgocSAs1zGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.19.0/24
Signature Algorithm: sha256WithRSAEncryption
39:fd:0f:f9:94:12:3c:2c:2e:48:f3:81:6a:a3:d5:b7:d4:eb:
7a:fc:66:91:3b:d7:ee:6b:32:72:3e:03:54:9e:ff:76:89:f6:
1b:f2:5b:8e:6c:ad:b6:3f:af:61:54:9a:59:d4:09:99:ff:a9:
47:c7:c6:96:86:29:62:d0:92:0c:d5:0b:b2:ae:2e:ac:73:97:
72:fb:ea:d4:55:dd:94:40:c9:fb:ba:37:b1:a1:e4:87:c6:66:
ee:d8:dd:09:f5:0c:52:82:71:2d:74:6f:aa:a2:81:1c:33:30:
8a:b6:96:7e:c0:0f:2f:0f:3a:44:7b:db:35:2d:21:c2:76:3a:
70:b7:1e:e4:7b:73:b8:88:07:d9:1d:7a:7a:5d:ae:39:57:6b:
9f:6e:7e:19:bb:ef:50:91:0c:a0:80:98:a2:8c:4a:54:da:b2:
9a:b5:67:53:18:b9:57:e1:0e:c0:48:b7:e8:3c:54:9c:ec:7c:
54:bf:8b:dd:21:fc:b8:e7:8c:21:66:3f:20:3f:ce:a6:09:0d:
ac:1c:8e:d6:5a:07:79:69:e9:23:de:cb:1d:90:30:83:b0:1f:
fe:7d:29:be:82:4d:b1:52:4d:30:ad:a4:9b:73:d1:92:a0:7b:
8e:c0:32:fb:c6:55:02:a3:fe:eb:e0:09:83:db:0b:50:49:56:
45:e6:be:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:34 2026 by rpki-client