Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/c229d8-738a-4117-af59-1093d4973091/1/MYKEbEbG2BOde6gzN9ttGm9H4jg.roa
File: MYKEbEbG2BOde6gzN9ttGm9H4jg.roa (raw, json)
Hash identifier: ERm9KLynZ/NxLY8GY3PLaYvLuotadE/r63dZSbos3LM=
Subject key identifier: 31:82:84:6C:46:C6:D8:13:9D:7B:A8:33:37:DB:6D:1A:6F:47:E2:38
Certificate issuer: /CN=b6491a9d4772fd2df5dc093d4e20d3ed81072957
Certificate serial: 019FD2A6344D6F4B92A10994CEFF1D0FBD4D
Authority key identifier: B6:49:1A:9D:47:72:FD:2D:F5:DC:09:3D:4E:20:D3:ED:81:07:29:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkkanUdy_S313Ak9TiDT7YEHKVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/c229d8-738a-4117-af59-1093d4973091/1/MYKEbEbG2BOde6gzN9ttGm9H4jg.roa
Signing time: Wed 05 Aug 2026 15:58:55 +0000
ROA not before: Wed 05 Aug 2026 15:58:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206123
IP address blocks: 208.64.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/c229d8-738a-4117-af59-1093d4973091/1/tkkanUdy_S313Ak9TiDT7YEHKVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/c229d8-738a-4117-af59-1093d4973091/1/tkkanUdy_S313Ak9TiDT7YEHKVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tkkanUdy_S313Ak9TiDT7YEHKVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d2:a6:34:4d:6f:4b:92:a1:09:94:ce:ff:1d:0f:bd:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6491a9d4772fd2df5dc093d4e20d3ed81072957
Validity
Not Before: Aug 5 15:58:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3182846c46c6d8139d7ba83337db6d1a6f47e238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:93:c1:62:9c:de:55:07:f6:fc:8f:03:aa:44:
9f:c2:d2:e9:68:06:19:3b:bc:1d:a9:d5:45:c5:c0:
69:0f:51:85:0e:99:66:b6:f4:f5:81:1c:54:9e:72:
ed:e9:1b:75:3f:0b:94:11:db:51:25:e3:e7:4e:96:
13:a8:d0:2a:90:8a:76:40:b8:25:6f:36:04:91:e3:
78:ab:f0:00:b4:53:0e:d9:95:0a:0e:7f:b1:e6:9a:
21:e6:c7:f0:23:88:b6:3b:07:d0:36:b6:ed:25:49:
3e:a3:2e:81:de:36:14:6c:be:c5:cb:15:96:8a:88:
2c:a0:25:97:0d:f8:aa:97:59:1d:47:d1:31:a2:c2:
f2:ab:d0:56:4f:c2:e0:10:d4:2b:fa:83:43:84:f5:
6b:76:5b:83:b0:f6:e1:a7:4f:12:8d:6f:29:0e:67:
51:0b:bd:15:e6:5e:5c:b2:ed:04:f0:b8:f2:f7:86:
e7:68:fb:01:a5:f3:ed:0a:cc:1b:e2:19:f5:f4:49:
b5:f6:bd:10:70:67:cd:5f:23:29:ca:72:e2:50:dd:
45:e1:2a:fb:4a:ad:c1:3f:79:e4:27:31:36:90:38:
6a:73:f2:27:6e:77:ab:17:68:fe:18:80:2f:da:f8:
51:5b:d3:48:54:79:fc:d1:9b:8b:cc:1d:ce:90:94:
2c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:82:84:6C:46:C6:D8:13:9D:7B:A8:33:37:DB:6D:1A:6F:47:E2:38
X509v3 Authority Key Identifier:
keyid:B6:49:1A:9D:47:72:FD:2D:F5:DC:09:3D:4E:20:D3:ED:81:07:29:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkkanUdy_S313Ak9TiDT7YEHKVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c229d8-738a-4117-af59-1093d4973091/1/MYKEbEbG2BOde6gzN9ttGm9H4jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c229d8-738a-4117-af59-1093d4973091/1/tkkanUdy_S313Ak9TiDT7YEHKVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
208.64.54.0/24
Signature Algorithm: sha256WithRSAEncryption
27:f8:32:3f:c3:e2:44:47:4b:9a:52:a4:ac:74:37:c0:c8:a0:
04:a1:33:dd:2b:6f:97:4c:92:cc:c7:72:c5:7d:6c:2a:8a:d9:
a9:d3:5f:c8:3e:17:69:f5:b8:b3:67:13:66:f1:70:07:97:21:
48:84:6c:16:98:6f:8c:b7:50:43:74:2e:c3:ca:38:87:16:85:
47:ba:78:9f:b8:fe:5e:9a:eb:eb:8e:f3:8f:dd:6b:54:15:1d:
f4:56:25:3b:42:73:81:3f:e9:aa:f1:7f:64:84:73:f7:81:4a:
d3:3f:00:59:83:a8:ee:3d:c7:2e:a5:86:51:63:0e:94:d3:cc:
eb:13:da:af:af:a9:bc:1b:81:95:9f:70:cc:f7:4c:16:9d:d3:
1e:b5:7d:00:b7:d4:60:47:55:bc:3b:96:d5:5e:a6:85:13:60:
51:70:ef:84:68:3b:a3:19:3e:f4:84:af:85:4e:d9:5d:66:6d:
ee:85:bd:96:79:2c:49:4a:06:6e:5a:87:f6:b4:c2:46:b5:b8:
a6:ba:92:3b:6f:e8:93:52:4e:cb:58:e6:d2:b3:5f:fa:67:87:
7c:f2:c5:6b:e0:7f:ed:5c:96:85:5e:a3:91:75:33:d3:54:96:
e8:d1:23:4f:f9:67:ca:e5:fb:a5:55:02:ce:06:53:9b:08:1f:
3a:9a:4a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 11:34:50 2026 by rpki-client