Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/tnDBGQFYfaoTF3iD_QEYyTJvcEA.roa
File: tnDBGQFYfaoTF3iD_QEYyTJvcEA.roa (raw, json)
Hash identifier: 8MLETIprJtCC0X4OlEW6BIoF/6D5/21IB4fqK78H/sY=
Subject key identifier: B6:70:C1:19:01:58:7D:AA:13:17:78:83:FD:01:18:C9:32:6F:70:40
Certificate issuer: /CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
Certificate serial: 019F23688E1826E107F03E62022A51E35EC2
Authority key identifier: 9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/tnDBGQFYfaoTF3iD_QEYyTJvcEA.roa
Signing time: Thu 02 Jul 2026 15:18:02 +0000
ROA not before: Thu 02 Jul 2026 15:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42831
IP address blocks: 185.243.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:8e:18:26:e1:07:f0:3e:62:02:2a:51:e3:5e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
Validity
Not Before: Jul 2 15:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b670c11901587daa13177883fd0118c9326f7040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5c:ec:53:4c:70:f2:a7:be:ac:da:cf:7c:cb:
bf:b4:04:02:6c:64:fa:d0:6e:54:e7:cc:a5:83:65:
de:00:c6:95:25:8d:f4:56:30:f8:8d:80:83:79:14:
69:0f:b8:01:64:5c:5b:36:e2:f7:82:a0:3d:75:ab:
5a:f5:b4:25:25:5e:23:83:bf:a4:48:83:d1:8e:10:
93:91:eb:62:e4:60:ba:fe:2f:ce:e4:f2:73:b0:06:
9d:65:c5:02:67:26:e7:64:e7:78:e1:cb:4e:d8:3f:
22:b2:70:af:5c:52:94:91:c3:e3:b9:a7:32:72:c1:
6c:b1:8f:e7:f7:52:85:b1:73:90:e3:33:2c:54:88:
d1:f1:29:9c:82:e3:16:67:2f:11:be:59:54:79:09:
b9:c1:81:b7:ef:8b:8a:95:e2:55:d0:ca:49:7b:5d:
f5:fe:d4:3e:29:b4:b3:13:48:f6:fe:76:bc:91:e7:
07:a9:4b:b6:a1:c8:e5:d5:00:03:27:f2:21:be:5a:
27:31:b8:7e:d0:46:e4:3d:8d:1b:50:ca:90:73:53:
1a:14:3a:28:32:69:02:98:ab:d0:ef:ea:c7:b9:2d:
52:c6:27:62:7c:54:22:21:d9:47:05:2c:f3:f9:cc:
3d:93:62:0f:8c:4d:09:41:74:0d:6d:67:7d:1d:97:
3a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:70:C1:19:01:58:7D:AA:13:17:78:83:FD:01:18:C9:32:6F:70:40
X509v3 Authority Key Identifier:
keyid:9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/tnDBGQFYfaoTF3iD_QEYyTJvcEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.155.0/24
Signature Algorithm: sha256WithRSAEncryption
56:88:64:82:8b:df:47:d5:30:60:be:98:89:fb:c3:77:d6:ea:
16:48:92:ae:96:72:a0:0d:50:41:6e:7c:9b:84:25:21:7a:1a:
09:c5:ae:78:d8:07:23:ac:5a:9f:a5:91:41:00:9b:9f:30:e2:
28:71:8e:7f:9d:af:f4:8d:c6:37:cb:70:2d:e4:95:40:dd:d2:
96:f5:53:88:2b:5b:73:16:ea:bf:c5:bf:43:cb:be:2d:a9:15:
d5:46:4d:32:ef:04:67:f2:7a:27:47:27:43:22:54:0c:00:bf:
5f:e3:7d:37:0c:18:d7:67:5e:7e:79:93:d9:34:a9:f4:5d:99:
89:1a:e9:08:00:7a:60:e5:14:6c:e3:a3:82:1e:15:87:97:39:
13:3f:33:7d:d9:ca:09:eb:76:1c:85:a6:13:c9:62:0d:00:9d:
d1:84:ee:bf:a1:ea:51:5d:80:e0:80:86:4c:92:eb:b8:f4:d9:
43:ce:4c:ba:fd:c0:cf:c9:b1:ef:e5:97:ac:a6:27:07:4e:01:
62:78:11:cc:a6:5c:c5:38:1f:77:22:24:83:78:83:a5:2a:d9:
48:48:fa:61:d6:c9:b1:19:4c:6c:41:ed:21:c8:0c:59:0f:77:
c5:08:f6:f9:bc:ae:1c:64:93:51:f4:c4:fd:1b:2f:8a:b2:6c:
fa:84:ba:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 08:46:25 2026 by rpki-client