Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/28d508-b59b-4e2e-97b3-5b571447ab77/1/tlPhgJrYrC8oySm3UeQESAEzsZw.roa
File: tlPhgJrYrC8oySm3UeQESAEzsZw.roa (raw, json)
Hash identifier: XK/LL5VakqWxgYff8rMzkZEOne7oJFvF+WwLbSMcQXI=
Subject key identifier: B6:53:E1:80:9A:D8:AC:2F:28:C9:29:B7:51:E4:04:48:01:33:B1:9C
Certificate issuer: /CN=5dd312211f1957129c21c417503d43b00aa26b43
Certificate serial: 01A0EE68C7737D99EB4DB37525ED08736880
Authority key identifier: 5D:D3:12:21:1F:19:57:12:9C:21:C4:17:50:3D:43:B0:0A:A2:6B:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdMSIR8ZVxKcIcQXUD1DsAqia0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/28d508-b59b-4e2e-97b3-5b571447ab77/1/tlPhgJrYrC8oySm3UeQESAEzsZw.roa
Signing time: Tue 29 Sep 2026 18:23:59 +0000
ROA not before: Tue 29 Sep 2026 18:23:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7224
IP address blocks: 2001:3fc7:d000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/28d508-b59b-4e2e-97b3-5b571447ab77/1/XdMSIR8ZVxKcIcQXUD1DsAqia0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/28d508-b59b-4e2e-97b3-5b571447ab77/1/XdMSIR8ZVxKcIcQXUD1DsAqia0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdMSIR8ZVxKcIcQXUD1DsAqia0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 13:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:68:c7:73:7d:99:eb:4d:b3:75:25:ed:08:73:68:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd312211f1957129c21c417503d43b00aa26b43
Validity
Not Before: Sep 29 18:23:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b653e1809ad8ac2f28c929b751e404480133b19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:80:1d:b8:08:70:89:de:81:82:16:0c:96:cc:
7e:7e:f3:bd:64:d9:c8:bb:82:e4:7a:88:f1:cc:21:
af:cc:4c:65:af:9e:04:0d:d1:c5:a7:de:96:a4:cc:
50:ce:7d:16:bb:19:fc:c7:04:b5:cb:1c:2d:7a:a4:
b5:22:a1:8c:a9:10:fc:d2:43:3d:5c:4f:bd:5c:20:
e8:95:21:9c:29:9b:44:bf:ce:29:2f:30:68:da:2d:
b2:c4:fa:2d:70:24:79:df:a8:fa:68:31:69:9f:95:
0b:d2:11:75:8c:61:49:63:c6:35:4d:97:f8:cd:52:
50:68:57:cd:d6:ba:3a:e6:1d:2b:26:1c:49:b9:df:
f7:0e:5b:02:27:e6:76:fe:45:0d:bb:f8:37:a7:a6:
b6:fe:3a:a9:0c:46:fa:a6:63:8e:d1:06:8d:76:cb:
d2:c2:44:21:91:82:e2:c8:66:e3:fb:1b:56:d3:98:
8d:bd:cc:4b:ce:28:e2:20:82:53:5e:dd:bb:b3:de:
a0:e1:56:1c:c6:d9:3c:05:97:e5:59:48:8b:78:80:
ae:b4:c3:4f:9b:dd:ea:da:4f:aa:f0:d8:48:e0:e1:
4b:8e:58:b1:a9:71:b8:ca:57:4f:dc:fd:bc:f7:a9:
b3:fb:74:25:28:08:57:c6:60:0d:5f:11:e2:63:08:
6f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:53:E1:80:9A:D8:AC:2F:28:C9:29:B7:51:E4:04:48:01:33:B1:9C
X509v3 Authority Key Identifier:
keyid:5D:D3:12:21:1F:19:57:12:9C:21:C4:17:50:3D:43:B0:0A:A2:6B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdMSIR8ZVxKcIcQXUD1DsAqia0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28d508-b59b-4e2e-97b3-5b571447ab77/1/tlPhgJrYrC8oySm3UeQESAEzsZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28d508-b59b-4e2e-97b3-5b571447ab77/1/XdMSIR8ZVxKcIcQXUD1DsAqia0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:d000::/36
Signature Algorithm: sha256WithRSAEncryption
5b:0f:2d:39:a8:de:09:c8:f1:f9:8f:70:04:69:a0:89:e6:b5:
13:1b:5e:62:83:34:19:24:47:53:e1:42:75:11:6d:f9:04:c7:
d9:92:2c:ac:09:f3:02:83:fe:b6:ab:46:07:58:9f:91:7d:db:
61:c5:57:57:0f:89:50:f5:d6:da:f3:1b:e9:7f:6b:d5:9c:e8:
da:72:8a:a8:d7:d4:44:1f:12:63:4b:3e:3f:71:02:39:59:b2:
46:41:bb:0b:da:81:84:ee:b9:a2:ad:5a:c1:8e:f5:86:4a:a8:
4a:d2:bf:5f:93:09:47:6b:8f:29:4c:cb:40:38:0e:d4:61:a8:
d6:3c:07:99:c0:3a:88:e3:05:43:ae:07:f3:14:f5:53:ee:68:
f1:1a:94:f9:72:80:57:03:46:45:57:b2:40:ee:16:fa:47:c9:
7f:9f:ee:4b:4d:94:cb:e1:23:0b:de:ba:80:35:86:9f:27:de:
36:d5:55:55:d6:6f:44:89:99:24:33:38:50:3d:37:20:33:d0:
8e:05:98:48:13:8a:59:52:33:81:ce:1a:4f:10:a9:82:47:21:
26:30:64:41:51:c2:fe:63:55:02:25:52:79:5b:a5:63:21:12:
63:7e:ec:83:66:63:51:68:38:37:46:d0:57:83:37:b6:69:14:
d9:a1:12:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 23:12:35 2026 by rpki-client