Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/tzHuqLrGk5ZfCs6ZIevNqfYf7XE.roa
File: tzHuqLrGk5ZfCs6ZIevNqfYf7XE.roa (raw, json)
Hash identifier: HllZSRxi+V2zT2CKWD5uw4ttRqvJIUMupIuaUX0N5Zo=
Subject key identifier: B7:31:EE:A8:BA:C6:93:96:5F:0A:CE:99:21:EB:CD:A9:F6:1F:ED:71
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A01F5830F9995B4B4BEABE33CE5A766768
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/tzHuqLrGk5ZfCs6ZIevNqfYf7XE.roa
Signing time: Thu 20 Aug 2026 13:24:28 +0000
ROA not before: Thu 20 Aug 2026 13:24:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40124
IP address blocks: 217.117.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:58:30:f9:99:5b:4b:4b:ea:be:33:ce:5a:76:67:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 20 13:24:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b731eea8bac693965f0ace9921ebcda9f61fed71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:73:f1:a1:e9:34:9e:25:51:e7:c5:e5:00:8a:
5a:d4:d3:af:54:38:bc:66:4d:67:a3:14:d0:d0:ef:
4e:67:d6:ef:af:63:55:37:d1:76:f7:d3:80:9a:36:
20:95:f5:bf:e9:d5:27:dc:12:f5:fa:b8:7b:7b:18:
41:fd:f7:ba:82:34:6f:d1:2a:1d:b8:75:51:9a:dc:
bd:e1:09:46:83:78:8a:b3:f3:26:e5:4c:0d:e3:5b:
4e:29:96:e0:c1:a8:d6:d3:8c:e2:33:ac:5d:55:c7:
0c:35:47:73:87:90:56:ed:58:e3:ec:af:17:bd:69:
d4:67:12:cf:72:7e:87:82:10:dd:71:e3:db:c4:67:
bb:c7:64:d6:36:14:4c:17:46:84:e0:4f:5d:27:26:
b0:37:c8:42:4c:40:3a:96:7d:04:92:26:6d:b8:dd:
26:26:69:56:70:7b:3b:40:22:8d:78:d3:53:19:b1:
31:3b:2b:ce:49:2e:05:74:92:ff:da:ae:03:ee:d3:
23:19:7c:aa:7b:0a:5a:44:0f:4c:4d:6c:8f:3c:5b:
38:5f:39:f6:a9:e9:1b:ee:4b:7e:fc:3a:bf:74:e0:
89:b0:06:a0:5a:1c:5f:a0:ed:14:c7:63:be:fc:61:
89:84:44:e2:c0:fb:03:6b:a7:cf:b4:2a:42:24:a1:
f9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:31:EE:A8:BA:C6:93:96:5F:0A:CE:99:21:EB:CD:A9:F6:1F:ED:71
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/tzHuqLrGk5ZfCs6ZIevNqfYf7XE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.117.163.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:a8:d4:f0:65:70:aa:9a:2c:f8:53:27:be:9b:99:15:18:82:
a7:33:38:4d:69:5a:88:81:33:12:cb:25:7f:e0:f8:59:65:66:
4b:af:11:95:47:20:63:0d:fd:7a:b4:03:d3:df:18:a2:10:df:
91:e7:f0:fd:a4:27:9b:aa:e4:88:c3:5a:55:bf:8a:70:ba:b2:
58:ac:ab:30:3c:77:16:ec:1b:3c:a3:de:8d:10:de:1d:5d:5d:
0a:59:ce:80:ba:63:c4:94:84:4a:6f:e3:c9:89:c2:74:31:83:
2d:88:f3:25:ec:46:d3:ee:6d:9e:bb:2e:a0:ee:43:f8:53:55:
e2:ad:69:0a:ff:fa:08:b1:42:d8:71:92:46:59:e9:fa:34:e0:
5a:9f:90:d2:f7:96:da:e8:c1:e2:11:44:86:b9:db:e8:6e:93:
fd:ed:ec:09:24:a2:f7:d5:b7:7a:7c:b9:48:37:7b:66:c0:a9:
35:bb:d9:34:36:5d:7c:e7:69:74:36:ab:b1:8c:7c:01:6c:f6:
9f:24:68:3a:84:39:02:d9:7a:d0:fa:8f:eb:3c:8e:40:a3:b8:
81:10:31:d9:df:e3:2b:5b:9d:a1:ef:ac:15:94:e2:27:d7:ce:
77:99:fd:b0:8b:7d:3a:cd:a6:a7:4e:f3:80:66:ba:77:66:42:
98:7d:6c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:27:19 2026 by rpki-client