Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/TbKjk9biFGhLJW-0EAJ-G1mE3dg.roa
File: TbKjk9biFGhLJW-0EAJ-G1mE3dg.roa (raw, json)
Hash identifier: NXGH0uYXNrJkmlvbFICP94ZCbP2H5y85Tnuyfhnefi8=
Subject key identifier: 4D:B2:A3:93:D6:E2:14:68:4B:25:6F:B4:10:02:7E:1B:59:84:DD:D8
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 01A07B6944A880DD9DC1650D0FD60A05EFB9
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/TbKjk9biFGhLJW-0EAJ-G1mE3dg.roa
Signing time: Mon 07 Sep 2026 10:28:11 +0000
ROA not before: Mon 07 Sep 2026 10:28:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215294
IP address blocks: 109.105.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:69:44:a8:80:dd:9d:c1:65:0d:0f:d6:0a:05:ef:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Sep 7 10:28:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4db2a393d6e214684b256fb410027e1b5984ddd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8f:19:b1:80:01:5c:0c:7d:83:fe:2e:ac:27:
09:12:e9:08:f0:99:52:2b:2f:d4:8e:1a:23:a4:80:
ec:0e:71:bf:44:65:0c:01:39:a9:b1:74:ed:d2:f2:
34:21:ca:22:e6:9d:af:8f:bc:dd:6a:61:84:2f:e3:
32:35:93:fb:29:83:f3:c6:06:e1:c4:62:e5:83:4b:
46:9e:b4:ba:f1:9c:14:d2:ea:98:45:8a:eb:f5:4f:
8b:32:29:d2:17:52:8e:d3:f1:93:82:19:05:dc:9d:
97:a2:2b:76:b8:04:8c:07:3a:2e:aa:09:fd:6b:6c:
e3:21:e3:82:e6:73:c0:35:ea:c2:c7:c2:db:0e:99:
d6:77:44:05:11:2d:7c:af:83:fb:4e:50:51:46:c3:
c1:5d:5b:b8:9b:fa:9f:89:e8:c1:a6:41:5a:ab:8f:
72:d1:9a:7c:54:0f:29:fb:e0:3b:d6:7d:3a:44:da:
44:3b:5c:af:d6:e7:59:0f:2c:f3:f8:98:dd:ff:35:
f0:27:37:94:85:85:5b:b9:1a:c4:44:13:b0:17:5a:
a2:9c:dd:5b:2c:d0:0c:97:2b:43:11:6b:e1:d1:0d:
0e:c5:bb:98:a3:a2:87:5a:77:ea:61:5b:b7:22:e1:
f8:29:10:d1:67:61:70:77:f7:7c:2e:ba:74:d6:7b:
93:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B2:A3:93:D6:E2:14:68:4B:25:6F:B4:10:02:7E:1B:59:84:DD:D8
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/TbKjk9biFGhLJW-0EAJ-G1mE3dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.105.199.0/24
Signature Algorithm: sha256WithRSAEncryption
61:b1:6d:c9:cf:0c:a7:20:a5:81:9c:41:9c:fb:e6:82:a6:31:
dd:95:8a:41:d0:05:68:f6:8c:f4:2b:7e:dd:f2:14:7a:a0:9a:
c5:09:ec:b1:12:ab:29:f2:29:27:f4:ec:d5:06:ea:4a:9b:56:
34:bd:98:b5:51:20:40:30:41:2d:ef:5f:93:94:c5:42:be:65:
d4:c6:98:b6:fb:7f:2d:e5:2d:dc:ae:bb:9e:ff:33:3a:58:25:
c8:b8:0b:83:2a:70:9a:7a:5d:d7:57:e2:a0:76:4f:4f:43:33:
f3:66:bb:9c:91:e6:58:c9:da:7a:5b:71:89:65:8c:3b:25:84:
ab:8b:1f:46:74:30:fd:ec:80:ed:97:92:76:44:c3:e2:7a:d5:
25:31:da:a7:f4:7e:23:74:6a:54:06:ed:7e:3e:d6:12:07:5a:
73:1e:67:5f:21:91:d4:71:26:42:60:ea:98:6b:0a:20:e6:db:
c1:ab:07:28:c4:dc:66:bc:53:14:9a:cb:cd:4d:a9:03:0a:a2:
c9:4d:77:54:6b:b9:51:d0:15:61:79:f0:be:2a:1d:ab:a1:15:
74:dc:67:e3:d0:8a:37:09:dd:9b:93:10:94:bd:7b:67:79:c0:
97:e0:71:f1:8c:f8:37:1f:4a:2f:d4:e2:c2:77:c6:2f:60:6b:
9e:95:2e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:41:00 2026 by rpki-client