Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/TXlLEnNppB9-42MicxVSv0AD89s.roa
File: TXlLEnNppB9-42MicxVSv0AD89s.roa (raw, json)
Hash identifier: 4BRzHt6i5rhUx8Gn0duaKc4epEbaN21vfKkM+2RiOzA=
Subject key identifier: 4D:79:4B:12:73:69:A4:1F:7E:E3:63:22:73:15:52:BF:40:03:F3:DB
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 01A11759D85C62204C72AFBFE94E9C56DBE7
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/TXlLEnNppB9-42MicxVSv0AD89s.roa
Signing time: Wed 07 Oct 2026 17:12:06 +0000
ROA not before: Wed 07 Oct 2026 17:12:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399515
IP address blocks: 94.74.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:59:d8:5c:62:20:4c:72:af:bf:e9:4e:9c:56:db:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Oct 7 17:12:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d794b127369a41f7ee36322731552bf4003f3db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e2:17:b4:ce:8a:7b:fd:ad:0e:c6:ab:a5:4a:
23:87:67:f1:a9:fd:e3:89:7c:1c:ef:38:50:c5:94:
a4:37:2e:0c:9f:00:0b:7d:82:1d:66:cc:39:ee:96:
c0:66:08:d4:75:ef:95:47:3c:04:a6:e4:3e:48:37:
33:02:cd:f0:8c:12:41:b5:54:0a:7f:16:36:ec:3d:
8f:c5:c1:61:5f:fa:d0:54:db:e2:ff:68:40:61:d9:
03:01:c3:73:85:b5:b9:93:de:e7:32:57:00:2e:e9:
53:80:7f:67:ca:49:f3:73:0a:54:d9:d9:c2:c9:96:
9f:55:31:88:cb:a3:8e:c7:42:68:6c:0d:a3:6d:3b:
3d:83:5c:f9:f3:79:66:a6:78:62:3e:a5:be:d8:88:
99:2a:28:6b:ee:af:f6:aa:4b:df:3d:96:02:37:9f:
a0:cd:fe:69:33:e4:0d:22:13:67:48:05:40:17:0f:
1b:d2:8b:a8:38:c1:f5:ac:6c:ef:c6:13:f4:3f:60:
d3:89:de:ec:44:c4:8f:fe:bf:77:7a:8f:00:3a:5e:
77:b5:11:c4:5a:e3:1e:c2:47:74:f4:bb:03:a1:aa:
b5:34:ca:e7:da:5b:75:ea:d7:75:9a:1d:9f:04:52:
d7:b9:b0:2e:7c:87:05:65:8f:e3:a4:10:df:8b:aa:
4d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:79:4B:12:73:69:A4:1F:7E:E3:63:22:73:15:52:BF:40:03:F3:DB
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/TXlLEnNppB9-42MicxVSv0AD89s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.74.171.0/24
Signature Algorithm: sha256WithRSAEncryption
86:d9:24:d6:67:82:41:ea:80:60:f8:9b:f4:24:b5:76:42:52:
06:32:c4:6b:58:d2:99:6d:30:3c:a9:d3:aa:93:99:a8:b8:6e:
d4:ff:1e:e0:c9:6a:fa:c2:05:12:bb:51:be:59:31:8a:2d:b0:
b4:96:7a:f1:d5:a9:ea:a6:3b:f2:1a:b8:98:eb:49:07:77:4e:
15:20:3a:d2:40:df:7d:66:a4:f8:ef:45:df:c5:28:ee:f4:78:
ae:85:6d:c0:66:89:c0:da:46:ae:be:02:81:6d:b6:60:80:cb:
4c:2f:93:1a:d6:7b:45:58:b6:ae:01:32:17:98:68:94:45:58:
5b:84:6c:6c:67:29:1d:bc:9a:0a:2e:0d:56:61:6a:b6:2c:91:
88:95:8d:ee:a1:5f:6c:e4:ca:5e:b1:ac:6d:00:dc:86:b5:0b:
6c:6f:48:99:07:b9:e4:2c:5b:68:c3:b4:f2:c1:e0:80:79:c7:
1c:0b:82:a1:9c:23:55:8d:f1:e1:fc:a8:7f:45:21:bd:ce:19:
b8:f3:06:d6:3e:7f:d9:6a:1a:a8:fc:29:c1:a1:f2:cb:06:2b:
f2:98:1c:fd:4a:51:57:f8:f5:9d:ed:a5:c3:d0:31:38:87:66:
85:ca:7e:09:25:5c:1d:aa:d0:23:85:94:3c:58:34:bf:fd:c7:
c8:fd:a4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:56:26 2026 by rpki-client