Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/taNOcFtjGX4XDaLQFSWD9YAKY80.roa
File: taNOcFtjGX4XDaLQFSWD9YAKY80.roa (raw, json)
Hash identifier: 1nijtZl6vRVqZanQGkkq5xkFpuzGH86d1/U2hfDQy6k=
Subject key identifier: B5:A3:4E:70:5B:63:19:7E:17:0D:A2:D0:15:25:83:F5:80:0A:63:CD
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 01A0F3EB9D9A8B233EFE9C3072E422DCA589
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/taNOcFtjGX4XDaLQFSWD9YAKY80.roa
Signing time: Wed 30 Sep 2026 20:04:59 +0000
ROA not before: Wed 30 Sep 2026 20:04:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216334
IP address blocks: 109.120.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:eb:9d:9a:8b:23:3e:fe:9c:30:72:e4:22:dc:a5:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Sep 30 20:04:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5a34e705b63197e170da2d0152583f5800a63cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fe:d6:3f:3a:aa:bb:81:1c:5a:68:1a:14:d0:
4d:da:13:4c:8f:8f:8c:0c:da:ee:01:b3:f3:f4:99:
8d:69:5d:91:eb:7b:4b:ed:97:65:0a:2e:92:61:92:
19:d3:c7:bf:b7:7c:ac:f7:6f:10:59:38:ba:fc:0f:
3c:8f:cb:92:30:6a:2f:09:5d:0a:f1:f5:45:bd:b8:
cf:04:ff:32:3b:e3:47:ab:c6:e0:1c:02:d2:70:e2:
07:3c:bd:9f:dd:59:32:a6:85:cb:19:c9:33:0e:5f:
d3:3f:c1:23:16:f6:69:57:c1:6f:7c:7c:a1:d1:67:
28:87:93:91:d7:ad:f5:3a:16:b7:70:3d:9b:31:16:
f9:55:1d:d1:52:1f:5d:e2:35:f7:92:4f:06:43:2f:
15:05:e8:ab:c0:7c:3d:55:2c:ea:97:ac:9c:04:24:
fb:6b:9a:4b:16:0b:d2:9c:3d:5d:48:4a:2f:df:01:
cc:5f:3b:06:69:ed:c1:82:00:e6:d8:dd:44:62:9d:
58:cf:ea:31:63:f0:f7:89:46:e3:f1:8b:c3:14:93:
5c:42:a6:16:1a:57:c5:ff:87:6f:b6:ec:ca:8f:8b:
5c:81:3e:dd:ca:29:07:e8:a8:db:66:09:93:74:2a:
20:7c:ca:84:ff:df:6e:05:7a:0b:9f:d8:74:40:0c:
da:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A3:4E:70:5B:63:19:7E:17:0D:A2:D0:15:25:83:F5:80:0A:63:CD
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/taNOcFtjGX4XDaLQFSWD9YAKY80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.120.144.0/24
Signature Algorithm: sha256WithRSAEncryption
01:f2:21:d3:92:c5:c4:86:5b:ee:29:7e:9f:47:bd:5e:ea:3e:
57:16:f1:fd:e8:35:79:32:6d:25:0b:d4:77:58:2f:e0:08:e9:
35:6e:da:1c:1e:05:8e:64:2b:0d:a6:c2:b9:05:6c:d1:96:a9:
d4:89:49:e6:43:1f:ef:4b:47:5a:e0:72:12:ba:03:68:da:43:
f8:a2:d4:6d:e3:25:0f:63:08:11:a9:bd:c3:bd:73:db:39:82:
97:82:60:97:58:9d:a7:47:95:ef:91:e3:5e:5d:fc:5e:e8:88:
62:32:e5:e8:f0:b6:ce:5f:7a:0a:29:02:d3:66:a4:52:7a:e0:
68:ba:5c:bd:d5:5d:f8:6d:0d:e6:44:bc:b3:6e:ed:db:60:fb:
70:1b:f2:97:9a:88:9a:45:f2:59:7d:24:e4:21:dc:3d:9c:7f:
d5:87:cb:9d:4b:df:4b:04:a9:b6:11:7e:c2:69:c9:f0:2e:00:
2e:92:6f:20:04:66:f0:2f:46:d2:09:08:67:53:7c:4c:1a:80:
62:63:cd:48:cd:53:9c:cb:89:92:1c:58:eb:90:24:4d:4c:9b:
a5:b4:9f:39:2e:da:f7:b9:ad:78:f0:9a:c0:39:7e:76:d6:56:
1a:de:b7:b2:ac:c6:4e:0e:43:41:d0:fb:d1:8c:16:9e:eb:10:
2a:11:cc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:35:39 2026 by rpki-client