Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/TUcYiqaHQaxrNd_59aAcfp5PzUc.roa
File: TUcYiqaHQaxrNd_59aAcfp5PzUc.roa (raw, json)
Hash identifier: UNkyO1RUoB9S8RFsmJ0fXaMIKW0xpN0m4jI2P8DIeTc=
Subject key identifier: 4D:47:18:8A:A6:87:41:AC:6B:35:DF:F9:F5:A0:1C:7E:9E:4F:CD:47
Certificate issuer: /CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Certificate serial: 01A0059CF707C29221EF20FB9FF9FA2C74A2
Authority key identifier: 8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/TUcYiqaHQaxrNd_59aAcfp5PzUc.roa
Signing time: Sat 15 Aug 2026 13:29:27 +0000
ROA not before: Sat 15 Aug 2026 13:29:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 141.0.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 15:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:05:9c:f7:07:c2:92:21:ef:20:fb:9f:f9:fa:2c:74:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Validity
Not Before: Aug 15 13:29:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d47188aa68741ac6b35dff9f5a01c7e9e4fcd47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:05:d6:ff:1d:08:8a:e8:8b:1c:90:bf:b6:e7:
68:01:fe:e6:c6:b2:4c:86:ff:fd:98:97:65:d9:a1:
7e:34:05:58:72:46:b8:42:c5:b8:f2:e8:5e:a0:3b:
8a:40:a5:d2:36:1c:0f:58:d4:e1:43:e5:9c:66:cc:
93:8c:8d:fd:45:1c:cc:59:67:3e:b5:06:cc:3a:5e:
e5:fe:ad:69:19:1e:be:14:79:aa:81:05:eb:18:1e:
55:46:3b:3c:6f:09:7e:cf:6f:94:c6:07:75:c2:ee:
9e:29:69:06:94:ed:cb:0d:03:fc:41:b4:9b:2d:9e:
77:f9:4f:3f:2c:e6:a9:6c:8f:ba:a0:fd:30:27:cb:
e2:5e:e1:82:1d:4b:82:5f:b8:ab:a6:04:fc:e6:95:
d8:a2:47:82:b1:43:7a:68:eb:de:c8:cb:41:39:cd:
9f:a7:73:8d:a3:69:24:cf:91:e6:6c:08:c4:49:55:
eb:64:bb:b4:0a:60:40:79:ef:a8:8a:3c:06:be:d7:
21:87:4a:15:c5:3b:1e:92:05:39:b2:a9:72:b4:71:
37:d5:a5:27:33:50:8a:b0:7e:89:40:36:e1:a3:57:
9d:9d:a0:e3:ee:41:d5:29:84:2a:32:34:f1:00:2c:
78:9c:37:ee:72:75:a4:2b:4e:66:34:37:af:36:88:
42:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:47:18:8A:A6:87:41:AC:6B:35:DF:F9:F5:A0:1C:7E:9E:4F:CD:47
X509v3 Authority Key Identifier:
keyid:8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/TUcYiqaHQaxrNd_59aAcfp5PzUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.0.188.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:1e:dc:34:2c:e5:9e:96:26:d5:86:66:6f:42:73:e8:bb:92:
13:bd:d1:4f:c2:56:12:61:74:a6:79:48:8f:29:51:e4:a0:cf:
aa:1f:4b:2d:74:e7:71:a5:57:a0:73:f5:a2:3f:dd:1a:35:7e:
ee:55:8f:2f:80:34:79:f2:2e:2b:5f:5a:36:fe:b7:14:85:00:
fe:b8:47:cc:58:cd:f0:e9:4d:6a:c4:3c:38:53:25:4d:67:b2:
90:3d:a3:80:51:08:80:24:30:4a:1c:74:1a:11:87:f8:87:40:
17:9f:8a:74:98:7c:6d:2c:82:61:82:da:a6:e1:d6:b1:f1:2c:
2f:af:01:2a:8a:96:5e:ea:f1:51:f2:d3:9c:e3:35:d0:7d:fc:
cd:dc:a5:d6:fd:f3:b4:57:d8:49:52:95:77:ea:c3:df:9d:b8:
ca:39:77:83:dd:79:a8:65:79:16:27:d6:9d:db:e7:57:f9:35:
64:7a:02:ba:ec:ed:fe:29:95:64:bf:81:5c:de:78:45:02:c3:
6a:9a:20:85:fa:f1:fc:32:13:54:20:70:99:a5:b5:7a:7d:8b:
61:0d:76:2d:0b:04:ef:69:db:fd:0f:32:60:f8:ca:65:48:e8:
a3:15:0d:d9:c9:25:6f:e4:e0:cb:63:03:b4:e1:f4:67:bb:d0:
46:d8:e6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 01:32:43 2026 by rpki-client