Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/tUtYzhWtgYA9McJyIF9w8ujPEk8.roa
File: tUtYzhWtgYA9McJyIF9w8ujPEk8.roa (raw, json)
Hash identifier: cOYo4tNBA12fBKMcriMfWQ85NSirKGFzECHndCoc5Io=
Subject key identifier: B5:4B:58:CE:15:AD:81:80:3D:31:C2:72:20:5F:70:F2:E8:CF:12:4F
Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Certificate serial: 01A1A18030F535E7F42A419F29C7BD6A380F
Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/tUtYzhWtgYA9McJyIF9w8ujPEk8.roa
Signing time: Tue 03 Nov 2026 13:01:35 +0000
ROA not before: Tue 03 Nov 2026 13:01:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135392
IP address blocks: 94.26.3.0/24 maxlen: 24
94.26.32.0/24 maxlen: 24
192.109.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a1:80:30:f5:35:e7:f4:2a:41:9f:29:c7:bd:6a:38:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Validity
Not Before: Nov 3 13:01:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b54b58ce15ad81803d31c272205f70f2e8cf124f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:67:70:fd:3b:bc:0b:40:ae:ba:df:e7:73:70:
de:76:e0:72:dd:ef:d0:5c:c8:df:b1:58:2a:75:ba:
75:d4:99:c2:ff:d7:a4:2f:e4:b9:7c:65:05:ee:07:
c6:97:85:a7:66:4c:10:d7:3a:a1:a7:78:40:fa:6c:
e6:e0:4d:62:e2:a4:e9:d4:f6:51:39:0d:fd:0c:34:
b5:ee:5f:f1:2b:da:aa:1d:5a:c2:ad:06:28:87:d3:
da:f9:0b:0b:88:b9:98:dd:2c:51:74:05:3a:ce:83:
b3:99:82:77:2e:48:87:a4:41:d5:25:9a:00:b7:b4:
fb:61:7a:0e:22:11:2b:c8:93:88:2f:c7:c3:35:0e:
fd:72:b5:09:f1:14:ce:53:02:0c:53:22:6b:36:de:
bc:ef:07:f7:8d:2b:06:98:74:88:60:11:e5:16:21:
e2:67:fc:b5:fa:93:8d:26:4f:ba:91:75:a7:db:60:
83:48:2b:2a:4c:64:de:ad:c8:f7:0b:1a:9c:78:f5:
0c:97:f4:5f:1a:44:ef:38:60:40:b9:d4:7f:75:a9:
fb:ed:42:52:6e:e2:e9:d9:f3:b7:ab:ac:c1:1c:2f:
48:79:c4:10:b8:bd:69:f5:6d:9a:e5:b4:39:0f:03:
a9:6c:01:d9:f2:c8:9d:93:a9:b1:41:df:5b:1e:86:
17:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4B:58:CE:15:AD:81:80:3D:31:C2:72:20:5F:70:F2:E8:CF:12:4F
X509v3 Authority Key Identifier:
keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/tUtYzhWtgYA9McJyIF9w8ujPEk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.26.3.0/24
94.26.32.0/24
192.109.139.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:9f:a1:02:0c:7f:f0:7d:aa:95:02:e6:6a:86:74:5b:3b:e8:
68:f3:7d:34:63:d4:a9:db:74:61:5c:09:38:2f:60:15:e3:98:
d3:66:8a:64:b6:56:87:a1:28:3e:ea:62:f9:8a:9e:b9:02:2e:
5a:5d:1f:46:64:5a:ee:76:99:39:b1:be:3a:07:08:be:3a:09:
16:a8:dc:ae:d6:69:9c:b8:41:9c:8d:bf:ce:08:5b:bf:d0:31:
1c:df:7a:53:d7:46:e2:f7:e6:1a:28:1a:9d:0b:5b:d2:88:05:
f4:3d:a0:3e:7d:02:87:20:3f:4b:e2:99:19:02:a5:c5:e3:28:
cc:c1:04:39:a0:aa:23:9e:ed:79:84:c2:e2:fb:b1:67:5d:b5:
e6:d0:d1:90:e1:e5:a0:8e:95:5f:75:24:eb:f1:42:cc:b3:07:
a8:fa:f3:55:c6:ef:d5:d0:c7:d1:e0:7d:e1:73:18:03:3f:dd:
35:b3:ba:5e:a3:26:19:66:b3:41:1e:84:4f:4b:c5:4b:82:df:
97:0f:66:5c:52:68:37:b0:1e:7a:f8:c6:b8:dd:6f:dc:2e:0c:
61:ee:6b:30:1b:34:bc:33:50:99:9d:21:0c:5a:81:90:e4:ef:
ee:c2:f5:26:b2:43:83:b2:4f:31:19:10:58:12:fe:6e:1e:76:
b7:26:9f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 05:45:15 2026 by rpki-client