Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/tGR97c6mRe5tOyp2f7uRChhnS74.roa
File: tGR97c6mRe5tOyp2f7uRChhnS74.roa (raw, json)
Hash identifier: g5RHgb8m0yp8DBOJq8sxOjpitLk7BqsBQNBq3DyGB/Q=
Subject key identifier: B4:64:7D:ED:CE:A6:45:EE:6D:3B:2A:76:7F:BB:91:0A:18:67:4B:BE
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019FCC0B3C8BCB369E6C4DDC49706C3C3DB5
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/tGR97c6mRe5tOyp2f7uRChhnS74.roa
Signing time: Tue 04 Aug 2026 09:11:56 +0000
ROA not before: Tue 04 Aug 2026 09:11:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214822
IP address blocks: 170.168.1.0/24 maxlen: 24
170.168.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:0b:3c:8b:cb:36:9e:6c:4d:dc:49:70:6c:3c:3d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Aug 4 09:11:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4647dedcea645ee6d3b2a767fbb910a18674bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:44:fd:63:5a:74:e5:bd:a7:58:04:0e:fe:4d:
3d:f6:1b:73:27:bb:b6:d3:53:97:25:8f:ca:d9:06:
cf:80:71:9e:61:cd:fc:df:06:f8:0e:ba:4b:f4:ce:
8b:0f:f0:50:f1:13:4b:27:b8:c5:0c:9d:54:87:13:
af:44:9d:30:71:2a:9e:3e:64:73:52:0c:52:ed:67:
63:ab:72:68:ff:e3:d3:11:df:ae:87:9e:ff:7d:9d:
bc:15:7c:ea:30:33:7f:1a:25:4c:65:e9:2e:32:0a:
71:56:47:75:ce:68:0f:f8:a5:24:76:c4:e3:c2:21:
9b:86:5f:8a:86:3c:3f:21:31:ec:6b:27:17:0a:89:
49:bf:12:e9:5c:ef:72:b7:66:c1:2b:af:c3:1b:75:
46:86:56:dc:0f:e4:7a:de:c0:28:f5:af:61:53:5a:
98:db:a8:13:a5:9b:0c:2e:69:6c:95:97:7f:be:0b:
c7:de:16:d8:12:00:a0:ff:1d:77:7d:30:10:79:68:
26:94:94:8d:77:20:8c:cc:73:3f:84:77:a5:e4:f1:
af:cd:49:b1:4a:c4:28:d5:eb:42:50:4a:0b:88:8b:
58:6d:ee:76:7b:f6:d1:9d:4c:92:ff:b3:fa:98:2b:
62:ac:af:df:81:4e:3f:de:b6:67:2c:76:d4:d8:bc:
37:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:64:7D:ED:CE:A6:45:EE:6D:3B:2A:76:7F:BB:91:0A:18:67:4B:BE
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/tGR97c6mRe5tOyp2f7uRChhnS74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.168.1.0/24
170.168.15.0/24
Signature Algorithm: sha256WithRSAEncryption
67:c0:d1:bd:ac:9c:8f:33:5f:63:48:f2:64:ed:8d:e5:09:56:
d4:3c:59:6c:e3:31:dc:93:51:38:4b:3e:d4:cd:38:3e:c0:34:
fb:ab:8f:29:1b:20:fb:ea:07:fd:9d:74:54:db:e4:40:2d:7f:
ef:5f:5d:cf:0c:06:86:fb:38:5a:ce:67:97:2a:04:78:4d:21:
53:af:a2:b3:df:b4:c0:1c:85:1d:76:b6:fc:e1:2b:50:70:cd:
60:a3:21:a5:d4:26:02:0f:3b:c3:60:af:be:a6:b7:01:df:4e:
a3:97:17:b2:8a:dc:e5:c9:ea:b9:fb:83:1e:31:78:e3:af:81:
48:ca:8a:29:2e:a5:fc:c4:7b:a8:32:aa:dc:11:6d:3c:79:d3:
88:a1:b0:f4:49:c5:c9:11:6e:9c:4f:34:18:c5:28:6a:93:db:
af:22:ef:92:a7:44:5d:b9:ef:28:5e:df:10:f5:8a:d3:e0:d3:
db:e0:7f:24:1b:ba:f6:75:02:12:53:01:b9:55:50:ad:c1:17:
ca:f5:c6:03:ea:aa:61:59:ed:1d:77:08:87:fc:c2:16:72:f0:
53:26:31:f9:31:26:f9:68:b0:0f:28:17:28:ba:41:f0:ae:bf:
da:4f:ac:b8:16:63:70:52:a3:e8:7d:f8:60:fd:c9:84:74:97:
b4:bd:67:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 00:56:06 2026 by rpki-client