Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/tIKo2k5gq-fp-6tfS86FzLgTab8.roa
File: tIKo2k5gq-fp-6tfS86FzLgTab8.roa (raw, json)
Hash identifier: CrwGDGko0/zRWxWCog4St/Gt4rv69G+wedTKo2ccmtM=
Subject key identifier: B4:82:A8:DA:4E:60:AB:E7:E9:FB:AB:5F:4B:CE:85:CC:B8:13:69:BF
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 01A05D6BABA894F50D56A4C3C9C78017C284
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/tIKo2k5gq-fp-6tfS86FzLgTab8.roa
Signing time: Tue 01 Sep 2026 14:42:12 +0000
ROA not before: Tue 01 Sep 2026 14:42:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147241
IP address blocks: 185.219.20.0/24 maxlen: 24
195.216.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:6b:ab:a8:94:f5:0d:56:a4:c3:c9:c7:80:17:c2:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Sep 1 14:42:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b482a8da4e60abe7e9fbab5f4bce85ccb81369bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:35:49:c8:fc:fd:7b:80:01:9d:f2:fc:46:04:
ec:27:7f:ba:3b:46:bd:61:20:45:23:0a:8d:ee:e6:
08:1f:04:d5:89:1d:5d:55:e1:7a:1a:0d:3f:65:96:
1e:b8:0c:f5:4e:31:db:89:a0:df:89:98:6e:d4:f7:
aa:3c:ce:42:8d:ce:42:fd:b2:41:8e:54:1e:d8:0b:
b5:aa:5f:a3:dc:fc:4e:21:76:3e:92:f5:37:56:97:
8e:83:63:13:32:e9:89:d1:d0:93:5e:af:a9:20:82:
6d:04:7f:f4:ea:4e:3c:1b:fe:a4:dc:4f:bd:7d:c7:
9f:b2:37:ed:87:a1:fa:69:c3:55:b1:6b:1c:13:20:
de:5c:22:06:f4:1c:9f:27:3e:7b:54:af:ed:f8:b4:
5b:ef:b8:05:ef:cc:e5:07:6f:07:0a:0e:da:6b:d0:
9c:91:90:e4:81:10:13:e5:88:a1:2d:1a:7c:c1:ee:
b4:38:7a:e3:0e:13:ce:63:2a:91:26:5f:2d:60:81:
d9:21:f0:d7:1f:32:ea:3e:66:16:b4:7c:d1:de:99:
3e:20:81:33:08:59:ba:eb:c6:9d:dd:fe:4f:1a:5b:
65:f3:da:b2:32:cf:62:2b:de:ef:7a:70:1a:f5:0d:
14:f2:d7:83:24:68:94:2d:50:2e:09:06:6b:c0:c9:
7f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:82:A8:DA:4E:60:AB:E7:E9:FB:AB:5F:4B:CE:85:CC:B8:13:69:BF
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/tIKo2k5gq-fp-6tfS86FzLgTab8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.20.0/24
195.216.148.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:67:85:19:fc:1b:97:39:b6:4d:85:b2:52:65:1f:ec:56:7f:
cc:67:ee:32:98:9a:4c:ba:7b:35:3c:e9:07:6c:43:7f:6f:cc:
b0:bd:83:24:14:a9:da:41:78:59:1e:91:a4:a8:8c:1b:2c:77:
86:fc:ef:bc:d2:3b:a1:6c:19:0c:12:2e:ed:db:53:ab:f6:b9:
fc:aa:3c:76:61:05:62:1e:ef:ef:3c:4d:b2:52:63:e0:4e:ce:
97:17:d5:b7:ea:ff:00:d9:02:62:57:f3:69:25:62:f4:67:d9:
9d:d9:0a:60:1c:6f:8b:0e:09:cc:56:54:12:79:6c:6f:21:07:
fa:04:d4:75:71:b8:1b:92:c5:c4:dc:09:32:71:93:0f:08:60:
d6:df:24:a0:cd:13:7a:b1:19:4d:63:d5:6b:c1:c8:34:d4:f3:
7c:fe:b7:14:cf:6d:76:5c:ec:36:7f:08:4a:6b:3a:82:7b:01:
7b:25:2d:66:d4:60:59:67:42:7d:0c:3e:ec:09:8d:bf:c8:d2:
ef:f6:c4:49:6c:07:11:e3:9e:1f:09:72:c8:a5:78:2e:fe:77:
84:0a:d6:fb:66:dc:27:19:99:6f:7b:99:aa:9d:7f:45:06:96:
04:41:9e:89:fd:b3:6a:13:9a:90:89:84:d2:78:1f:90:6e:65:
e4:87:95:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:50 2026 by rpki-client