Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/2TCI_TfrbtSvl7F-yIUavOY8LxY.roa
File: 2TCI_TfrbtSvl7F-yIUavOY8LxY.roa (raw, json)
Hash identifier: SG7fk2EptNy/12iIJeNvf3K3M93+ZN7xdmiOIHQj5lM=
Subject key identifier: D9:30:88:FD:37:EB:6E:D4:AF:97:B1:7E:C8:85:1A:BC:E6:3C:2F:16
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019D049B25B61A9DC4CCCB7D0A954E53A745
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/2TCI_TfrbtSvl7F-yIUavOY8LxY.roa
Signing time: Thu 19 Mar 2026 05:39:29 +0000
ROA not before: Thu 19 Mar 2026 05:39:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22427
IP address blocks: 194.26.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Mar 2026 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:04:9b:25:b6:1a:9d:c4:cc:cb:7d:0a:95:4e:53:a7:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Mar 19 05:39:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d93088fd37eb6ed4af97b17ec8851abce63c2f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:25:84:ef:11:61:58:38:b1:b5:82:dd:03:33:
2b:60:b6:24:92:46:c5:9b:c5:47:9b:10:cc:b1:40:
cb:ff:19:8b:e5:ea:64:70:f5:5b:f5:79:a3:c5:2a:
b1:9f:2b:71:78:50:6e:ae:47:1d:77:81:0c:dd:7b:
93:8c:ee:9d:29:e0:55:ed:81:5f:10:55:5e:24:fb:
bc:cf:5b:ec:7a:82:26:2d:65:fd:4a:a9:a5:c5:01:
d1:68:22:21:52:f1:8a:00:22:1d:b3:fb:bc:c4:5c:
db:08:9d:ea:fd:10:4b:b3:59:2e:e8:1d:8e:0f:fe:
b0:6e:c5:61:19:98:57:83:d3:7b:9f:fd:c0:f7:b5:
65:97:46:85:63:d1:4a:84:24:43:a4:c0:eb:b0:37:
c5:e8:1d:ed:3d:d8:28:6b:66:b9:3c:13:9e:b4:25:
24:31:cc:c2:ba:98:ed:d9:04:38:c9:c6:a4:37:64:
33:8b:7b:ce:f3:c7:09:7a:60:a1:df:f9:63:d6:4e:
b9:42:f4:72:4e:a2:e8:1d:5b:24:eb:ed:65:ed:b2:
00:27:7c:9c:1d:40:e9:99:82:b2:c2:ba:12:84:01:
0c:34:ef:2b:ce:d6:f6:32:fb:65:09:95:f4:d9:eb:
f2:a4:23:8b:d1:c6:eb:8a:29:37:43:fd:f0:be:eb:
48:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:30:88:FD:37:EB:6E:D4:AF:97:B1:7E:C8:85:1A:BC:E6:3C:2F:16
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/2TCI_TfrbtSvl7F-yIUavOY8LxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.215.0/24
Signature Algorithm: sha256WithRSAEncryption
02:2c:93:b0:16:77:7d:0a:6b:1f:fb:9d:48:f9:9e:9e:16:f1:
1e:0b:7c:02:a2:b5:8b:bb:d0:c6:76:e8:51:e3:f5:bf:39:7b:
64:3b:21:05:83:e5:57:4a:8a:89:d7:d8:9b:f8:e7:55:e5:60:
78:11:f7:a3:af:7b:f6:dd:df:95:2f:4e:45:e3:17:d0:78:e1:
4c:6c:ed:11:d5:82:f3:38:89:85:89:eb:1d:b3:ac:64:66:d0:
7f:8a:fe:fa:c5:4e:af:28:b5:36:02:a6:17:0d:a1:b2:a8:a5:
91:f1:02:b0:a4:36:dd:32:fd:ac:c8:31:d6:54:b1:48:80:79:
52:0e:52:f6:06:6d:1a:54:a8:bb:04:89:be:2d:d1:c5:f8:77:
4f:7c:b0:39:11:1d:c6:c3:df:94:93:3c:bc:9d:76:09:91:b0:
f5:59:39:ab:f3:3a:cd:14:d2:d3:56:5c:35:f4:f6:5d:7c:ca:
c7:cd:bb:4a:c6:05:d2:76:03:d7:c0:d4:ca:c5:66:04:ac:8f:
3b:3a:d0:bd:0e:5f:10:fa:a5:64:60:3e:5a:91:c9:e6:b0:8d:
f9:79:ea:c0:0f:cd:b0:fd:3d:c1:54:26:80:e2:f3:98:5e:eb:
2f:0e:6e:0c:b1:ac:7e:85:f7:c2:a5:fb:1d:93:e2:06:b5:38:
09:57:0d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 19:31:38 2026 by rpki-client