Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/TLGiwjociDCWUbBilvkzIzGHvMI.roa
File: TLGiwjociDCWUbBilvkzIzGHvMI.roa (raw, json)
Hash identifier: dnAkTh1W7Ym3v6Klv3bskJbjEp9fvb0chzBchR7pA5s=
Subject key identifier: 4C:B1:A2:C2:3A:1C:88:30:96:51:B0:62:96:F9:33:23:31:87:BC:C2
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039824061637DE188AD3F85461656799A
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/TLGiwjociDCWUbBilvkzIzGHvMI.roa
Signing time: Tue 25 Aug 2026 15:20:32 +0000
ROA not before: Tue 25 Aug 2026 15:20:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147003
IP address blocks: 84.54.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:40:61:63:7d:e1:88:ad:3f:85:46:16:56:79:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4cb1a2c23a1c88309651b06296f933233187bcc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a0:2d:c7:04:8c:f8:30:43:e4:ed:a4:2d:5c:
f2:b7:a8:f0:d5:54:1f:63:2d:90:ad:4d:a2:24:16:
91:1f:8e:b4:82:61:f3:d0:0d:2e:d2:e8:1e:c2:d2:
8d:43:9e:d9:b3:3b:2b:75:77:dc:65:2d:33:f5:d6:
ac:00:03:2f:bd:7a:b3:f3:b2:8f:80:92:40:00:45:
d5:41:ac:82:47:01:e2:fa:38:be:6f:f7:bd:ea:76:
c5:31:cd:da:2f:2c:7c:a3:97:ef:64:f2:26:e1:64:
0c:9d:ab:7e:39:04:78:1b:ce:06:57:26:70:36:6e:
67:ef:50:eb:da:6e:25:34:43:95:09:ea:83:33:cd:
49:e0:46:9e:f0:50:21:66:25:94:dd:d3:ef:c8:19:
09:74:24:cb:63:63:cc:84:9d:fe:ae:4e:33:c9:9a:
b1:69:91:30:39:9a:70:a2:3f:5a:d1:4c:5d:d6:b1:
a9:80:78:4d:1a:05:6c:6f:ab:b3:e9:02:77:b8:64:
c1:88:8f:f4:24:1f:59:15:51:c6:20:aa:64:34:bf:
ef:5d:96:69:f8:a6:e6:c0:77:69:fe:85:1c:8b:b7:
6f:28:4f:6a:89:cd:03:15:42:31:6e:9c:74:50:fa:
a9:16:b1:29:e5:8c:d1:4d:33:7a:bb:83:b6:57:9f:
03:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B1:A2:C2:3A:1C:88:30:96:51:B0:62:96:F9:33:23:31:87:BC:C2
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/TLGiwjociDCWUbBilvkzIzGHvMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.0.0/23
Signature Algorithm: sha256WithRSAEncryption
18:de:3c:4e:07:42:2c:10:a0:89:8f:d5:ee:b5:f3:27:76:8d:
c1:d8:66:03:e1:17:27:a1:4d:13:e4:da:5d:8d:f7:b8:ea:49:
52:d3:34:b7:b7:9e:79:a5:fa:bb:7c:b7:50:8c:91:e0:8c:36:
ac:3c:06:66:0d:08:39:50:41:f1:77:57:be:91:64:28:e1:ed:
e2:9a:40:ef:91:26:b9:d1:91:cc:a9:43:54:24:04:88:e4:5e:
8d:7b:4b:75:94:9d:c2:61:2e:18:4a:68:b5:f9:e3:c7:72:7a:
3a:bd:9b:95:34:35:ff:2c:92:51:44:df:13:e2:30:f7:a2:33:
35:32:c5:bb:b2:4b:af:5a:02:2e:d6:b4:ab:34:c1:8b:09:0d:
cf:d7:b8:65:1a:69:37:19:5f:d5:6c:4b:a8:98:27:80:16:f2:
81:51:4a:ff:2c:20:10:81:5f:13:47:56:df:41:8a:0a:83:1f:
13:a9:3b:cc:0d:e4:26:1d:d6:b4:1f:77:f9:fa:fc:10:51:2e:
e0:56:bc:17:01:18:e5:c0:93:42:6e:93:41:61:c3:c4:d6:0c:
a8:f5:e1:0a:18:1a:44:71:e2:88:44:56:1c:c1:d6:d5:29:19:
1b:8d:5b:f5:59:40:00:5e:59:ad:b0:ac:92:17:0d:b5:43:fc:
65:d2:8b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:50 2026 by rpki-client