Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/taZtaRwec6TUmh7xkAuy4J_X1F4.roa
File: taZtaRwec6TUmh7xkAuy4J_X1F4.roa (raw, json)
Hash identifier: CpXD+0k4LSqd3QdCbAr+w3LdfUJFfvPxHaufA8KBMW0=
Subject key identifier: B5:A6:6D:69:1C:1E:73:A4:D4:9A:1E:F1:90:0B:B2:E0:9F:D7:D4:5E
Certificate issuer: /CN=762c60af4d73725845ceaf0b7b585e7757066965
Certificate serial: 019E760829EF86ECD8D1E776D80413E33B1C
Authority key identifier: 76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/taZtaRwec6TUmh7xkAuy4J_X1F4.roa
Signing time: Fri 29 May 2026 23:18:26 +0000
ROA not before: Fri 29 May 2026 23:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42183
IP address blocks: 91.240.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:76:08:29:ef:86:ec:d8:d1:e7:76:d8:04:13:e3:3b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=762c60af4d73725845ceaf0b7b585e7757066965
Validity
Not Before: May 29 23:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5a66d691c1e73a4d49a1ef1900bb2e09fd7d45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:38:1e:8a:f3:09:b9:5e:31:17:f0:e8:91:da:
e8:33:06:e1:63:88:70:00:e5:bd:30:9a:21:80:5a:
0f:e1:c6:35:0e:bc:c3:75:6c:df:1f:b8:82:b8:5c:
0b:e2:6a:30:6f:85:15:c4:a9:ec:fc:46:80:e7:72:
e5:5b:f7:dc:bb:6a:f5:ec:b8:e8:a2:03:ea:46:db:
7d:17:ee:37:72:1b:c6:d6:99:ac:bd:40:96:fd:2f:
be:52:47:ad:5b:36:09:92:0e:ad:73:b6:46:ef:6d:
19:cf:39:47:97:1a:c8:9a:d5:91:33:7e:15:ea:2e:
25:68:67:81:88:a3:a5:1b:50:c6:43:a4:af:94:7e:
ce:3a:81:d1:35:04:c3:e7:ff:2a:e2:9d:aa:d7:03:
ce:d8:b8:e7:1e:b9:2a:65:49:7a:a9:13:3e:36:8e:
77:0d:47:db:52:0f:5d:ef:89:ac:41:d8:3b:90:38:
62:24:dd:b9:b1:f9:da:3d:66:a7:04:18:a0:85:01:
d3:81:36:01:96:42:06:d2:9e:0c:a3:ad:88:d5:f4:
28:77:4c:71:ae:70:1a:c3:71:5b:f2:0b:67:d7:aa:
3e:fd:5a:ba:5b:b8:95:8f:b4:ed:c6:57:6c:98:29:
41:81:04:1c:44:c1:0e:09:b0:c0:9c:d1:2c:41:29:
81:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A6:6D:69:1C:1E:73:A4:D4:9A:1E:F1:90:0B:B2:E0:9F:D7:D4:5E
X509v3 Authority Key Identifier:
keyid:76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/taZtaRwec6TUmh7xkAuy4J_X1F4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.82.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:f6:e2:d4:9f:73:56:f3:78:57:aa:e4:61:8c:ad:be:97:9d:
a7:f2:76:54:7d:5a:ba:21:df:96:45:49:e8:e0:53:de:d0:8f:
1a:44:2d:bb:80:60:e6:93:8c:f9:87:d2:84:e3:3b:11:1f:62:
da:b4:1e:ea:43:6b:7d:22:c5:fc:a9:ba:45:8c:52:87:a4:42:
fe:3d:41:98:d9:a7:77:4c:d2:0c:04:e3:e8:65:98:fd:ab:04:
41:b2:f1:50:cb:f3:0d:7a:5e:c1:e7:a5:62:f7:8d:71:b8:05:
7a:53:f1:a5:3c:20:c7:d9:4e:df:e8:00:cc:8e:0d:62:3b:65:
b0:f0:5d:53:2b:77:1a:ad:e6:e5:1e:cc:7d:0c:a1:a6:64:f3:
e3:b8:4d:a4:93:a3:68:c0:a3:51:fe:57:2c:9e:48:97:6d:91:
d8:10:46:45:1f:95:da:04:6b:fa:54:f9:25:cb:33:4a:1b:b7:
50:48:db:6c:dd:b0:0f:9e:02:28:37:1f:51:b3:f6:6a:0c:7d:
9d:ab:06:f3:8b:aa:f1:13:e6:cc:84:c1:4e:9b:78:13:f0:27:
09:f3:b7:e7:9e:7b:61:97:eb:8c:41:25:27:13:d9:70:4e:53:
b6:b2:46:32:e3:80:e9:94:b7:8e:08:47:84:48:9a:94:dd:65:
79:2a:b7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 10:21:01 2026 by rpki-client