Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/tnDbfog4g1v4FCzzAH5FGKAM9h8.roa
File: tnDbfog4g1v4FCzzAH5FGKAM9h8.roa (raw, json)
Hash identifier: ztWFAMQUDgcRSM9OgGMr8Jr8L4RqnCaynMYeROR8sU8=
Subject key identifier: B6:70:DB:7E:88:38:83:5B:F8:14:2C:F3:00:7E:45:18:A0:0C:F6:1F
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 01A0498DEB33B39A8AE95F8A21869C08A7BB
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/tnDbfog4g1v4FCzzAH5FGKAM9h8.roa
Signing time: Fri 28 Aug 2026 18:07:12 +0000
ROA not before: Fri 28 Aug 2026 18:07:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219438
IP address blocks: 138.249.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:49:8d:eb:33:b3:9a:8a:e9:5f:8a:21:86:9c:08:a7:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Aug 28 18:07:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b670db7e8838835bf8142cf3007e4518a00cf61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:99:9e:af:50:50:51:ba:14:9e:1e:c7:23:67:
18:d0:6e:c4:cb:ee:42:d5:64:99:ff:5f:87:50:38:
7b:3d:3e:3a:bd:ab:17:35:1e:41:71:e8:e6:6d:4f:
f8:a1:d6:81:62:5b:40:2a:fb:b7:75:60:59:4a:23:
d0:a8:11:62:5c:88:43:38:1a:c6:73:0d:31:67:19:
4a:bf:ba:1c:2e:bf:8d:5e:27:9b:7b:96:93:80:88:
2f:c8:3c:96:1a:b9:10:fd:51:df:2d:98:0f:1e:91:
47:12:4e:25:b8:48:4e:d2:68:03:ed:0c:15:e7:ab:
de:d5:9e:29:32:c1:fb:a4:91:4d:56:10:db:36:2e:
29:8c:ae:4a:62:bb:bf:2f:28:ff:a4:42:c7:8b:b2:
bd:0d:fa:85:8a:b4:a3:17:34:dd:ca:5d:ce:e9:6d:
77:7a:7f:0a:cd:6c:1c:9b:24:55:27:4a:a0:f8:fc:
ae:2e:77:3b:f6:20:cb:ac:a5:35:fb:02:43:28:48:
2b:38:31:35:7c:16:15:c8:6d:40:04:53:16:68:c1:
70:92:9a:0a:86:8c:4b:a4:0c:84:54:e5:f2:da:24:
00:50:2f:b0:12:7c:f0:9f:55:a5:4c:72:55:99:5d:
b6:9c:91:db:be:f0:51:f6:4c:4e:25:ce:b0:2e:9b:
01:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:70:DB:7E:88:38:83:5B:F8:14:2C:F3:00:7E:45:18:A0:0C:F6:1F
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/tnDbfog4g1v4FCzzAH5FGKAM9h8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.249.23.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:1f:20:23:0c:e3:67:01:3b:8a:5b:98:ba:69:85:ae:c1:49:
84:74:c3:58:90:d9:90:3d:3f:c6:6f:96:a4:de:3d:a8:16:02:
6b:57:8f:7b:ef:68:77:34:7f:50:26:03:52:49:27:7a:61:b5:
8a:b9:53:45:e6:4f:85:66:3d:93:ed:bd:95:74:56:85:26:f1:
f5:62:53:64:9a:94:ea:9b:db:15:47:05:0a:ed:71:ab:b1:0b:
a6:c6:9e:a0:ee:e0:31:dc:f6:b6:61:f4:d8:21:66:ac:34:84:
ad:d0:68:69:dc:a3:cc:48:eb:f4:50:cb:f7:3d:f2:a1:64:64:
3b:57:cd:88:50:77:42:8c:27:1d:f6:9e:1b:d6:70:8c:52:87:
74:92:f1:cc:cf:60:e2:ed:48:4e:c3:c1:a0:e3:33:a5:67:21:
13:a9:b4:e7:08:0e:64:7d:b9:82:a4:da:91:cc:34:8b:5f:4b:
57:e0:aa:17:5e:e3:f2:28:d6:3f:06:a6:ec:b9:ee:1a:b9:ae:
1f:ec:71:8f:22:0e:17:2d:8a:b2:86:fa:28:e2:37:de:51:b0:
75:d8:90:fc:6e:b7:9d:6e:ce:80:4e:d9:2b:9e:66:bd:9a:17:
5c:69:92:22:a9:6c:f7:ca:6b:8e:08:42:12:24:12:9a:2f:ab:
6d:97:0b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:40:05 2026 by rpki-client