Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/TzjkxJ5uhGEfHXwvHlagl5xkbsQ.roa
File: TzjkxJ5uhGEfHXwvHlagl5xkbsQ.roa (raw, json)
Hash identifier: qXXMC/HeIWPrRvKJ2DgRkb/ol4IjgdGdGjqNdS+NMKo=
Subject key identifier: 4F:38:E4:C4:9E:6E:84:61:1F:1D:7C:2F:1E:56:A0:97:9C:64:6E:C4
Certificate issuer: /CN=e27e66e403d31c7958335298168de60a215c0c0f
Certificate serial: 019FB77113D1F8C38918F1E0771FED5E43AD
Authority key identifier: E2:7E:66:E4:03:D3:1C:79:58:33:52:98:16:8D:E6:0A:21:5C:0C:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/TzjkxJ5uhGEfHXwvHlagl5xkbsQ.roa
Signing time: Fri 31 Jul 2026 09:11:08 +0000
ROA not before: Fri 31 Jul 2026 09:11:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 194.127.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 18:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b7:71:13:d1:f8:c3:89:18:f1:e0:77:1f:ed:5e:43:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e27e66e403d31c7958335298168de60a215c0c0f
Validity
Not Before: Jul 31 09:11:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f38e4c49e6e84611f1d7c2f1e56a0979c646ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:99:09:9e:94:df:df:c8:df:ee:70:30:27:e4:
cb:39:ca:fa:35:d0:2d:ed:9f:6c:1b:ff:ed:99:a9:
a2:4c:21:25:83:ce:fe:18:13:99:8c:25:4f:0c:fd:
c1:05:3f:2e:82:fa:ad:33:c0:44:01:ac:16:60:0a:
ff:3d:ba:d1:f3:4d:e2:c2:2c:a4:51:df:d2:09:f8:
20:d7:81:00:86:66:24:8f:72:bc:8b:9e:02:c5:1e:
32:e5:d9:59:8f:5c:11:2e:c1:36:4f:8d:ec:10:eb:
11:4f:6d:f3:81:a7:8d:61:d5:24:0a:48:cc:55:01:
78:14:36:cc:42:66:67:3c:da:55:45:39:e7:0c:88:
15:d0:fa:9f:b3:f9:04:e7:1d:04:be:f3:cd:a7:c3:
c8:1d:0d:3f:1c:47:2d:de:55:93:78:11:38:4f:0a:
83:c5:b5:64:b2:ed:5c:bd:30:86:22:73:c3:b5:5a:
5e:88:9a:72:3e:04:c7:c1:9f:48:0f:b5:04:28:79:
10:8c:e0:dc:fe:eb:dc:06:f3:6c:20:c0:29:0a:c3:
0e:c1:9a:e7:b9:8a:8f:c4:77:64:62:38:cb:61:fe:
a6:b2:43:93:12:ad:9f:1b:b9:d0:0e:f1:c5:01:02:
b6:b4:ae:19:32:b0:1a:be:08:28:ad:5e:a4:30:e5:
c7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:38:E4:C4:9E:6E:84:61:1F:1D:7C:2F:1E:56:A0:97:9C:64:6E:C4
X509v3 Authority Key Identifier:
keyid:E2:7E:66:E4:03:D3:1C:79:58:33:52:98:16:8D:E6:0A:21:5C:0C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/TzjkxJ5uhGEfHXwvHlagl5xkbsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.197.0/24
Signature Algorithm: sha256WithRSAEncryption
68:43:ce:ea:56:c6:18:aa:4e:a3:6e:42:5c:ed:e7:96:21:03:
7a:0f:40:ca:62:4c:09:c5:a8:07:07:34:1b:8f:96:1b:46:fc:
f7:1f:22:8b:ac:44:d5:95:19:b2:72:84:14:4a:b0:44:de:86:
ef:87:5e:73:8b:16:d0:25:d4:ec:20:9d:32:f9:c1:72:69:d1:
73:a9:a6:dc:db:39:24:e8:5b:6d:73:c8:02:48:9b:9b:d0:e2:
eb:d7:87:c3:2e:c9:ba:79:29:3e:c8:f0:b8:e2:ea:6f:86:b7:
4a:37:2f:dd:f9:b6:3d:e4:14:60:49:39:c9:65:81:92:96:e7:
4e:82:f8:cf:a0:22:7c:ed:7c:e7:69:6d:d0:85:97:08:06:f7:
34:ed:0f:f7:6c:ab:b5:17:cd:1f:ca:d9:54:cb:15:75:dc:72:
49:89:88:fb:e8:79:53:25:2e:2a:8b:3e:ec:00:0f:7e:83:b0:
23:11:39:c1:4d:54:a1:32:8e:a4:ef:39:8a:90:71:2e:14:a5:
f5:1b:33:cf:a8:13:a1:f6:e9:d2:55:a0:bb:0d:0a:99:5e:e6:
ae:99:ed:47:b8:dc:6d:9c:f4:a0:b1:33:ac:79:2a:a6:48:00:
48:93:2c:75:b1:d4:ab:cd:6c:63:58:83:5c:55:cc:2c:1d:2c:
bf:a0:10:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 01:32:48 2026 by rpki-client