Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/tant_iw39C5s5eHSo-fWpKRJVZI.roa
File: tant_iw39C5s5eHSo-fWpKRJVZI.roa (raw, json)
Hash identifier: 3Mfj9MzM5Fq754ib0F7hoqH7ufiZ177wLskV+BMlC5s=
Subject key identifier: B5:A9:ED:FE:2C:37:F4:2E:6C:E5:E1:D2:A3:E7:D6:A4:A4:49:55:92
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 01A0A0F024B65C0D1A941FA01321193B9AA4
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/tant_iw39C5s5eHSo-fWpKRJVZI.roa
Signing time: Mon 14 Sep 2026 17:21:27 +0000
ROA not before: Mon 14 Sep 2026 17:21:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216138
IP address blocks: 45.86.147.0/24 maxlen: 24
188.208.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a0:f0:24:b6:5c:0d:1a:94:1f:a0:13:21:19:3b:9a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Sep 14 17:21:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5a9edfe2c37f42e6ce5e1d2a3e7d6a4a4495592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:de:bb:af:b4:5d:a9:a7:92:81:d9:89:0e:df:
bb:fc:b6:c8:0c:2f:7a:9d:e5:f6:64:47:15:69:bb:
8a:b7:d6:4c:8b:70:a9:82:2d:7b:87:4e:ab:b0:c5:
bb:41:69:43:71:33:fa:5a:d5:c5:31:d5:7c:8c:99:
a2:53:33:0d:dd:2c:ba:19:61:b3:79:11:b6:1f:f2:
30:ab:9f:3b:a1:10:09:74:32:d1:cb:57:e9:58:8d:
bb:65:78:3a:88:3f:32:41:40:f4:5f:ef:99:ed:03:
64:df:ca:2d:ba:34:b2:16:b0:39:65:27:fc:1d:ce:
53:da:1c:2b:52:2b:1f:23:3c:08:29:b0:90:7c:f3:
8b:f4:2b:77:96:72:db:bf:28:ae:21:b5:e1:39:a2:
d5:43:eb:14:b1:04:19:7f:db:e2:8a:60:f5:14:1d:
cc:5c:7a:69:f0:54:85:d7:5b:bb:eb:2b:c2:7c:da:
75:4d:f5:51:81:e1:ad:85:05:68:22:7f:0b:61:7f:
d4:13:9d:78:a1:d1:e2:e0:8a:28:92:97:1c:0f:ea:
e7:3f:bc:36:0d:7f:e6:9c:c6:bb:52:d2:42:5f:0c:
64:a8:c8:2b:59:e0:3d:bd:16:7a:88:7c:a5:a7:60:
c3:3b:36:07:d4:83:bf:ed:29:05:f6:66:f1:82:c6:
3f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A9:ED:FE:2C:37:F4:2E:6C:E5:E1:D2:A3:E7:D6:A4:A4:49:55:92
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/tant_iw39C5s5eHSo-fWpKRJVZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.147.0/24
188.208.17.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:9f:47:8c:83:3c:20:a7:e4:75:f4:74:8f:ab:49:0f:f9:ba:
44:87:36:ae:b7:74:33:fc:c7:44:d1:5d:fd:06:9b:6b:f4:36:
0a:13:ee:da:cd:5e:8c:63:af:58:29:b6:c2:a3:e9:01:86:ed:
5b:c4:87:86:41:6a:15:33:1a:05:9a:43:d5:10:5d:17:2c:7d:
58:22:0b:e2:e2:02:6e:2f:bc:de:dd:53:eb:ff:2a:2a:59:fd:
71:cb:f1:d4:33:fc:b9:63:3a:ee:90:2c:de:26:88:b6:b0:01:
3c:95:d0:78:d8:1b:78:a4:06:5f:3c:cb:0c:1e:1a:bf:ad:db:
57:fb:97:dd:cb:a5:9d:ae:6c:c8:80:7d:bc:31:f7:f7:aa:ca:
21:c8:f4:9f:d3:c9:ce:4a:04:e6:ad:bf:63:7e:ab:b4:23:d2:
1c:51:61:95:0a:ce:22:bb:3d:c8:1a:8f:2c:e8:00:d0:53:f2:
90:98:f5:70:5f:1a:77:c7:df:e5:38:71:3a:1d:45:a2:4c:a0:
8c:b7:1f:83:78:ce:83:05:82:0b:12:e9:91:58:c5:c9:d1:9b:
47:d1:35:0e:0a:e1:93:a4:97:e9:05:3d:e4:7e:b3:63:ea:e2:
0f:07:97:be:be:c8:1e:f8:5a:99:c8:73:c9:d3:c7:33:46:df:
19:4f:19:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 00:32:08 2026 by rpki-client