Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/tkmC-8eKg6Vl3t0mbTyEGyPWV5o.roa
File: tkmC-8eKg6Vl3t0mbTyEGyPWV5o.roa (raw, json)
Hash identifier: BsM5fYyNk4cog9doNA7cUHJoqQhxit4BCXwUMcQRUmc=
Subject key identifier: B6:49:82:FB:C7:8A:83:A5:65:DE:DD:26:6D:3C:84:1B:23:D6:57:9A
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 019FD8130A184F13D482EB25578C02482812
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/tkmC-8eKg6Vl3t0mbTyEGyPWV5o.roa
Signing time: Thu 06 Aug 2026 17:15:54 +0000
ROA not before: Thu 06 Aug 2026 17:15:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134494
IP address blocks: 79.110.176.0/24 maxlen: 24
85.202.173.0/24 maxlen: 24
160.238.98.0/24 maxlen: 24
217.18.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d8:13:0a:18:4f:13:d4:82:eb:25:57:8c:02:48:28:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Aug 6 17:15:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b64982fbc78a83a565dedd266d3c841b23d6579a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:df:6c:3a:b6:f8:fb:41:d2:53:25:28:6f:d7:
51:26:c0:e3:d2:1d:e0:dd:2e:6b:fb:ab:79:fd:d9:
51:ef:a4:a6:ba:7d:20:5c:ba:c8:7f:f1:f6:05:f5:
28:a8:67:59:e0:53:7c:9f:08:68:4a:1f:a7:bc:ba:
22:4f:70:33:18:13:2d:10:86:ec:57:26:45:cb:01:
ad:a6:18:30:f5:f3:19:67:6e:ca:71:48:d7:06:0e:
da:0c:51:0e:57:b5:86:20:c8:85:39:45:39:71:66:
7e:d2:e4:e2:23:bf:f4:20:0f:54:56:08:34:66:e4:
7c:1f:d3:32:c4:5b:f5:20:a6:84:ba:ce:d2:b5:02:
07:53:b4:9b:65:47:b5:f6:97:5e:3b:1f:ee:04:62:
73:c4:c4:73:c0:43:4c:20:fc:ed:52:99:34:8a:05:
da:59:f2:e9:d2:0b:76:72:9d:50:4e:a7:46:6b:32:
b9:71:d2:60:8c:90:20:fc:59:34:2b:04:9f:56:27:
c8:2e:5a:80:81:f7:96:5b:2f:2c:05:83:af:91:38:
4b:31:4e:da:b6:48:a2:0e:95:03:22:5b:2b:f0:28:
2a:19:cd:d8:0b:6e:15:2b:75:f1:dc:77:bf:25:ce:
52:fb:b7:6b:b7:f2:2a:4f:7f:4f:b8:49:5c:b4:26:
c5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:49:82:FB:C7:8A:83:A5:65:DE:DD:26:6D:3C:84:1B:23:D6:57:9A
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/tkmC-8eKg6Vl3t0mbTyEGyPWV5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.176.0/24
85.202.173.0/24
160.238.98.0/24
217.18.59.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:b2:ba:38:fe:32:98:9f:0a:25:0a:9c:66:1a:8f:6b:85:79:
b7:73:a6:33:32:73:81:16:0b:91:bd:9e:6f:22:a3:36:f8:11:
66:75:04:51:18:6b:51:4d:20:21:77:9f:28:3e:a9:a5:0c:9a:
26:22:35:15:c8:2a:0a:ba:b4:ca:df:0a:99:c5:8e:0b:14:88:
56:8a:19:34:1c:ae:6e:6a:b8:a4:75:0a:fc:fe:05:85:a2:cc:
b6:4f:c6:d4:20:82:94:ff:b6:f3:c8:35:83:9d:3a:ee:8b:61:
f4:6f:46:f1:fb:9e:e4:59:cf:7f:a4:b2:38:c0:f9:48:9f:b6:
22:84:de:7a:b8:53:19:09:22:0b:c1:96:83:4d:17:ce:d6:a7:
96:83:0c:b6:52:91:c1:1b:c7:3f:68:28:d8:a6:1c:1b:e7:16:
f8:be:8a:c3:b8:8c:17:41:fa:39:29:4e:40:09:77:2b:a1:ce:
31:bb:9a:cf:bc:d7:d0:27:96:8a:6c:da:7a:7a:46:98:b9:32:
cd:f2:79:2e:e5:40:5c:fa:18:f1:74:aa:17:fd:5a:a7:7b:81:
26:5f:c7:4e:43:f2:9c:91:04:b9:2e:d2:4c:b9:1c:12:a8:e9:
57:6e:9d:a2:ab:39:db:f4:50:22:e8:18:27:a8:12:f8:0b:67:
db:1c:7a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 00:29:23 2026 by rpki-client