Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/TxLHYeLn5waqZBrieFj7HGS5upQ.roa
File: TxLHYeLn5waqZBrieFj7HGS5upQ.roa (raw, json)
Hash identifier: AQE4iNmgZ8XsKpE8R3Tqs44Bi3JeC42kBaLI3MHTv1Y=
Subject key identifier: 4F:12:C7:61:E2:E7:E7:06:AA:64:1A:E2:78:58:FB:1C:64:B9:BA:94
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 019FCD4540D2EE418952BF8D1319500F612B
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/TxLHYeLn5waqZBrieFj7HGS5upQ.roa
Signing time: Tue 04 Aug 2026 14:54:55 +0000
ROA not before: Tue 04 Aug 2026 14:54:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201021
IP address blocks: 132.243.72.0/24 maxlen: 24
132.243.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cd:45:40:d2:ee:41:89:52:bf:8d:13:19:50:0f:61:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Aug 4 14:54:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f12c761e2e7e706aa641ae27858fb1c64b9ba94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:04:b2:76:68:f8:86:2a:4a:7c:fa:21:73:50:
8e:e2:2c:5b:3e:39:10:c0:f6:5d:5e:68:60:df:26:
42:6c:3a:d0:5c:ff:a7:92:29:50:18:70:8e:59:33:
13:40:cd:a0:cc:ec:80:93:2a:81:f6:5d:3b:32:75:
2b:5d:0c:74:31:a4:ec:11:0d:a6:bd:23:74:d9:9b:
a9:69:7b:59:e1:6e:ff:71:37:46:20:90:90:47:0b:
5d:fa:1b:65:b6:35:80:84:6d:35:b6:62:8e:43:0c:
f1:2e:34:f7:cf:8e:87:dc:3d:2c:6c:c6:be:7e:a2:
f3:62:da:0c:d9:64:1b:0c:00:64:8d:0e:85:58:58:
2e:a7:83:dd:e4:7d:01:53:59:4d:64:01:52:6a:69:
ac:e3:03:40:62:24:b1:87:bd:8d:1e:09:d9:0b:32:
ec:9c:99:cf:ba:ea:1e:4a:24:19:20:70:b0:8a:cd:
fc:61:28:c5:72:ee:d1:21:52:7e:5c:84:71:47:cd:
83:64:e5:91:10:3f:21:9d:bc:c5:bd:7b:82:28:a3:
41:57:d1:b1:e7:21:fb:3d:04:c3:a1:37:68:a0:3f:
56:76:ed:55:e5:9e:43:34:df:e1:78:a3:c0:c3:90:
88:d7:89:3d:e6:5c:09:81:d0:07:eb:ac:59:fb:57:
c9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:12:C7:61:E2:E7:E7:06:AA:64:1A:E2:78:58:FB:1C:64:B9:BA:94
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/TxLHYeLn5waqZBrieFj7HGS5upQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.243.72.0/24
132.243.75.0/24
Signature Algorithm: sha256WithRSAEncryption
94:f2:e8:1b:85:be:35:6e:56:e5:03:6f:67:e2:4f:0f:0a:a0:
82:7a:dc:47:71:26:e5:2e:2f:d0:d8:5f:0c:f4:b9:eb:86:24:
2b:94:ce:4f:30:66:51:ef:e7:33:e6:4d:66:12:ff:2a:d7:09:
52:9d:e9:5a:46:fa:47:e9:46:2b:43:e5:ba:0e:f2:4f:f6:5b:
f8:cc:0b:54:5b:e1:20:fc:98:a8:b1:b9:f8:6b:33:d9:bf:f3:
18:34:83:07:16:10:17:ae:9e:5a:17:9e:a3:ee:2a:d7:3b:ff:
e0:62:99:64:9c:08:c3:3b:a8:60:92:a7:9c:d5:06:11:aa:3e:
80:ff:18:b6:b1:da:25:80:64:6d:19:e9:82:15:84:f1:d5:1d:
d5:6e:31:88:ef:31:f1:b6:c0:54:69:a0:45:d8:29:9b:63:e3:
92:6a:19:51:db:a6:8d:34:3f:ee:c8:be:b9:5f:f2:6d:06:4a:
ca:02:18:7b:34:06:78:ce:f5:b0:8e:a9:82:f2:00:55:a2:73:
37:a6:59:d3:29:57:27:62:35:2c:20:b9:52:87:e6:ae:07:8a:
0a:22:eb:c9:59:7c:d7:31:6b:59:e9:ee:b8:ee:40:09:cb:e8:
38:8a:3f:8a:51:92:39:1e:d9:b1:d1:6b:0b:76:6e:fb:9f:7c:
4f:fe:76:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:30:33 2026 by rpki-client