Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/TF4wDf5P65j6qBam15uVFbzvzTQ.roa
File: TF4wDf5P65j6qBam15uVFbzvzTQ.roa (raw, json)
Hash identifier: SZnrS2NFte+sgGczrKYvJRj4tlwb7n6q0X5Fajl09C0=
Subject key identifier: 4C:5E:30:0D:FE:4F:EB:98:FA:A8:16:A6:D7:9B:95:15:BC:EF:CD:34
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 019EE2C51953943B01E544938ACBF8EAD9F9
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/TF4wDf5P65j6qBam15uVFbzvzTQ.roa
Signing time: Sat 20 Jun 2026 02:03:48 +0000
ROA not before: Sat 20 Jun 2026 02:03:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197703
IP address blocks: 46.8.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e2:c5:19:53:94:3b:01:e5:44:93:8a:cb:f8:ea:d9:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jun 20 02:03:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c5e300dfe4feb98faa816a6d79b9515bcefcd34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cb:2f:fd:d2:91:32:c3:f4:f7:c7:91:bb:16:
6f:49:4e:f2:f0:40:91:05:db:61:94:a4:71:19:9f:
53:c9:83:ed:39:4f:21:6e:01:af:12:3b:4c:ec:82:
2b:97:a4:fe:fe:0e:ab:bb:08:34:23:55:82:84:fb:
e1:01:47:d2:cf:8c:25:43:17:4b:61:7c:07:9f:f6:
77:30:30:75:bb:32:09:a1:8f:63:56:03:eb:69:e3:
9d:fc:ce:d3:ec:ed:60:a2:c7:ff:90:b6:e9:de:c6:
3c:71:28:50:8c:6e:49:0d:75:58:82:bd:a2:c9:b7:
7f:f3:63:8e:94:43:36:d6:1b:f9:86:c6:5c:4f:37:
b8:34:17:37:7e:f5:9f:97:4a:b5:b3:88:0b:a6:76:
52:3c:c0:4c:43:9b:03:30:4c:0d:be:a8:de:7a:82:
1f:37:30:fb:b7:30:ac:dd:ee:0d:b7:c9:c9:5e:6e:
a3:be:63:02:98:ab:63:02:2c:43:79:ad:d6:be:e8:
bb:79:27:d9:12:cf:fd:a0:f0:25:88:37:09:4c:26:
2a:af:59:d8:c9:d5:e4:2f:f7:e5:80:fb:44:47:db:
95:53:e6:9a:a6:00:37:55:c4:7a:32:d4:68:2c:7a:
0c:23:96:66:d2:96:5d:69:a0:b8:d3:a3:fc:e1:a3:
d7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5E:30:0D:FE:4F:EB:98:FA:A8:16:A6:D7:9B:95:15:BC:EF:CD:34
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/TF4wDf5P65j6qBam15uVFbzvzTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.124.0/23
Signature Algorithm: sha256WithRSAEncryption
02:08:c5:5e:a3:00:56:5f:54:a6:e7:59:41:aa:d8:cb:aa:2b:
90:1b:53:c8:ca:75:53:f5:72:c9:11:f4:c5:3d:e3:47:bc:cf:
a7:f5:e5:dc:01:28:a0:11:6c:91:fa:b4:74:15:62:7f:6d:27:
f8:9c:5e:eb:a0:3e:2c:46:02:58:ab:bc:8d:fb:3f:14:35:27:
51:1d:0b:4c:76:70:a0:7d:9b:b0:6c:07:51:19:52:3d:17:2b:
af:c7:55:cf:e2:1f:d1:f4:99:99:5e:8c:93:e0:1d:f1:cc:9c:
0c:fe:b1:bb:73:c8:fd:3e:ec:0d:26:8e:0b:9d:67:5b:77:50:
27:6e:b0:64:eb:08:24:63:24:5c:a1:aa:fc:dd:13:fc:ae:76:
7f:29:6f:6b:51:7f:2f:4f:77:47:a0:19:12:c5:b3:42:73:8a:
ad:7b:11:c0:49:0a:4b:ee:0a:0a:50:8e:e4:ad:7f:05:73:0f:
20:d0:bd:37:cd:02:3a:cb:d7:7a:66:f5:e2:6e:d1:70:94:bb:
c2:ee:fb:9a:20:0b:50:26:5e:90:e4:70:8b:bc:fb:7a:20:3d:
57:97:f3:f7:45:1a:cb:b0:be:01:0a:69:2a:3e:e8:87:64:4e:
99:91:19:fd:03:cb:8a:a6:71:3b:2f:71:78:66:ae:77:82:d1:
99:a4:b1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:09:11 2026 by rpki-client