Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/TnoHPctRyeEuYrd2AxIHTtqKzUI.roa
File: TnoHPctRyeEuYrd2AxIHTtqKzUI.roa (raw, json)
Hash identifier: R7rbUTfoEIfdcLkLR2XCpWvDHcwDAwC6mY+rnVCGOdQ=
Subject key identifier: 4E:7A:07:3D:CB:51:C9:E1:2E:62:B7:76:03:12:07:4E:DA:8A:CD:42
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019FDD9EFA0EB6A2BD135BA11A5DCD603934
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/TnoHPctRyeEuYrd2AxIHTtqKzUI.roa
Signing time: Fri 07 Aug 2026 19:06:51 +0000
ROA not before: Fri 07 Aug 2026 19:06:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219021
IP address blocks: 138.249.102.0/24 maxlen: 24
138.249.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dd:9e:fa:0e:b6:a2:bd:13:5b:a1:1a:5d:cd:60:39:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Aug 7 19:06:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e7a073dcb51c9e12e62b7760312074eda8acd42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:29:7c:dd:22:f2:8d:2f:ee:e4:44:39:80:58:
fc:50:b9:db:4d:a4:5e:42:56:fe:61:c3:84:f9:d2:
22:7e:00:a3:f6:87:82:21:76:31:97:4b:d7:01:af:
ee:cb:67:04:a8:a0:74:6f:9d:a2:49:71:22:08:a4:
ff:35:5d:64:8d:96:90:6d:09:d2:fb:c0:d5:ba:a5:
83:fd:1e:e1:a7:79:1e:dc:b5:c3:33:ad:5e:35:ab:
8a:42:ef:81:be:c3:0c:ec:2a:a9:52:03:19:3f:3a:
36:d4:0d:ae:c9:2c:bc:94:96:81:9b:11:c9:42:0d:
45:f6:ca:77:99:26:74:93:61:63:c9:85:9b:9d:2d:
89:93:21:71:0f:f2:f7:3e:1f:e2:fb:38:36:2b:73:
39:f1:a8:ad:a3:77:9b:29:e6:5e:fc:7c:c8:88:40:
a8:72:7b:f2:77:df:98:ef:21:09:9a:b8:a4:b7:e4:
76:9c:0d:17:f5:b7:ca:bf:ca:aa:4c:2c:25:88:8e:
d4:90:1a:ef:42:bd:67:14:c5:37:62:95:90:2f:c4:
3a:a9:f6:ee:11:5e:d9:28:d1:39:52:bf:0b:38:b9:
4c:2d:e1:5a:1d:bb:ec:7c:0e:86:e8:b3:33:32:80:
19:da:ff:8c:67:5d:94:a5:2c:0c:1b:a6:24:11:a3:
06:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7A:07:3D:CB:51:C9:E1:2E:62:B7:76:03:12:07:4E:DA:8A:CD:42
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/TnoHPctRyeEuYrd2AxIHTtqKzUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.249.102.0/23
Signature Algorithm: sha256WithRSAEncryption
30:55:42:74:2d:71:f0:8e:90:62:6a:33:5a:a3:05:e5:8f:ef:
13:51:4a:bd:38:4b:18:74:19:26:c0:15:71:ed:60:3a:b3:d4:
ea:7a:93:b0:b7:99:87:5c:6f:96:c7:3f:07:5e:da:46:dd:83:
f1:56:39:d1:e9:fb:25:53:e3:d2:ef:01:35:09:7a:10:e5:1f:
3b:29:18:3a:b9:ac:1d:b0:f5:03:98:12:ae:d5:03:ec:35:52:
91:28:36:af:30:bf:6f:f9:f4:73:02:9f:d6:a8:d6:5e:c1:35:
98:81:06:65:9e:32:7c:0b:93:a5:e6:d2:fd:2a:93:b5:38:53:
b1:d3:26:a5:ea:4c:7c:6d:a0:0b:a9:f6:f2:62:19:14:4f:70:
99:4c:d5:b3:8f:b6:3a:b2:72:6f:da:e9:b1:41:38:33:f8:5f:
79:ba:d2:21:d1:aa:92:78:9c:c3:94:6c:94:c4:e8:58:c7:cc:
a3:75:b4:1b:5e:99:20:33:e8:00:3b:99:1d:f8:75:9a:6f:e3:
53:32:d7:79:c0:51:b6:94:58:4e:b0:c6:e0:da:04:2f:df:46:
2f:36:8d:a8:33:a9:39:aa:a6:85:b0:14:ff:2c:bb:62:e5:35:
00:d6:8f:6c:c8:14:b9:b7:2b:a5:40:4b:ac:01:a5:bf:fe:59:
77:71:16:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 07:10:30 2026 by rpki-client