Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tZM7thugBZtQJ2JVvSAr-Blij7g.roa
File: tZM7thugBZtQJ2JVvSAr-Blij7g.roa (raw, json)
Hash identifier: tyIUz40/t4/DujhnNssrao2M5gUMra7Q8lfAgJ9TuGI=
Subject key identifier: B5:93:3B:B6:1B:A0:05:9B:50:27:62:55:BD:20:2B:F8:19:62:8F:B8
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E65D242512546B7B0A159DC353569D059
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tZM7thugBZtQJ2JVvSAr-Blij7g.roa
Signing time: Tue 26 May 2026 19:45:38 +0000
ROA not before: Tue 26 May 2026 19:45:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206264
IP address blocks: 217.60.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:65:d2:42:51:25:46:b7:b0:a1:59:dc:35:35:69:d0:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 26 19:45:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5933bb61ba0059b50276255bd202bf819628fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b3:97:ec:e9:21:15:dc:8b:f3:f4:17:e2:17:
5b:6c:da:d8:b2:7a:42:ee:52:73:c6:c2:1b:b0:8b:
ac:b5:90:01:eb:eb:85:62:9c:34:84:ab:1d:86:9e:
9f:72:99:0b:ec:1f:af:2c:b2:49:5e:e9:54:c9:ca:
04:06:ba:59:2f:66:dc:c8:2f:f1:7e:33:4c:c8:06:
07:ce:72:af:4a:07:02:92:3e:74:fd:f6:a9:9b:48:
08:cf:b2:62:e2:ae:b6:b8:1b:9d:7c:ff:86:39:5f:
d2:c4:e1:b4:34:00:b8:1d:77:06:9f:b7:6a:bb:83:
5f:d8:ce:b1:58:70:c1:2a:12:67:b7:73:4e:d5:db:
b9:f4:df:cf:19:65:82:9c:27:78:bc:58:38:59:84:
4f:4e:19:fa:c8:9b:a5:a5:24:9d:45:eb:2d:c7:71:
95:a5:81:0e:f3:29:2c:56:08:de:95:e7:0d:54:5d:
17:d0:08:b7:95:29:49:31:96:fe:be:e4:14:31:3e:
14:c0:29:59:5f:31:4f:96:70:41:4f:29:f0:0b:1a:
b5:cd:6a:8d:67:c8:be:51:51:13:60:13:93:2b:66:
23:7b:45:43:54:3b:5f:34:c0:e5:9a:cc:a4:b6:6b:
ee:48:24:f4:6b:25:56:e2:0a:34:f1:23:76:e7:72:
f9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:93:3B:B6:1B:A0:05:9B:50:27:62:55:BD:20:2B:F8:19:62:8F:B8
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tZM7thugBZtQJ2JVvSAr-Blij7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.15.0/24
Signature Algorithm: sha256WithRSAEncryption
11:8c:f7:5a:b1:52:d2:7c:87:1c:53:17:92:fc:0f:4b:df:ec:
75:2a:83:9b:31:4d:ad:97:fd:13:3e:b4:6d:6e:bc:d0:5c:c8:
8a:75:14:0f:4c:d1:14:49:0b:ad:94:ec:80:be:cc:d4:32:43:
2b:4a:2d:49:97:63:b0:3c:bc:a2:44:33:40:e7:84:87:72:df:
29:f8:98:cb:5c:a4:3b:47:cd:c3:51:e7:bf:1c:1e:7e:22:70:
ca:47:3a:25:2d:31:bf:83:ec:7d:9b:66:d1:61:59:cd:a9:1e:
e9:64:13:27:6c:53:0b:cc:9f:3d:37:f6:35:b4:d2:35:ad:72:
16:d9:1b:fa:27:35:5b:89:3f:7b:ec:60:4b:99:fd:e4:f6:23:
27:5b:48:cd:fc:44:95:33:cc:6d:1e:8f:37:9c:8d:17:2d:42:
91:63:51:ae:e8:e6:be:7f:35:f5:aa:c9:a4:00:63:e3:9f:95:
f8:c0:d7:05:44:e6:45:a1:3e:b4:b4:8b:45:73:6a:db:76:bd:
b0:4d:b2:4a:db:fd:50:d7:ab:f5:8a:ee:55:3a:f3:47:cb:db:
a8:a6:68:8a:35:bc:10:30:29:27:41:d7:9e:b5:df:bf:de:49:
63:86:c1:da:9e:49:33:74:b1:33:03:f6:04:22:f1:0b:c3:d5:
42:fb:d5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 15:55:16 2026 by rpki-client