Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/Tz7ItZl-lHs7DNCXseXkPaZdXac.roa
File: Tz7ItZl-lHs7DNCXseXkPaZdXac.roa (raw, json)
Hash identifier: FcXx3w36kf6TRe3O05Cyb+nGwJit3nSqaoLBOCk0HGM=
Subject key identifier: 4F:3E:C8:B5:99:7E:94:7B:3B:0C:D0:97:B1:E5:E4:3D:A6:5D:5D:A7
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 019E27204446A30E719AC25AFF59BA7F5B37
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/Tz7ItZl-lHs7DNCXseXkPaZdXac.roa
Signing time: Thu 14 May 2026 15:34:46 +0000
ROA not before: Thu 14 May 2026 15:34:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401776
IP address blocks: 80.246.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 16:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:27:20:44:46:a3:0e:71:9a:c2:5a:ff:59:ba:7f:5b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: May 14 15:34:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f3ec8b5997e947b3b0cd097b1e5e43da65d5da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:dd:23:bc:3b:90:77:7d:7b:21:7f:73:5f:cf:
d3:fa:8d:4f:b3:60:cc:46:ab:ae:f0:bd:25:a4:b3:
ed:7e:de:bc:64:3c:01:e6:a5:d3:04:58:e6:c2:18:
8e:fe:42:ac:d2:92:c7:c6:56:bc:d6:f7:65:fe:6c:
c8:31:f2:0f:f0:18:b5:e8:29:b3:8d:f4:6b:22:c0:
b3:f7:a9:7d:dd:44:85:f5:35:a7:df:32:27:b6:ad:
e3:6d:57:3c:ea:4c:ee:e5:fb:3a:42:0e:1e:be:41:
c9:0f:8b:56:10:b7:bb:d7:a5:66:f7:bd:d6:d6:e5:
13:6e:74:92:c2:07:16:95:0e:e6:9a:0c:82:59:ed:
bf:f6:79:26:bd:36:35:89:0c:13:58:0e:33:28:4f:
fa:6b:35:89:5b:7f:a3:d1:4d:58:49:fb:fb:c6:80:
a1:e4:ac:4a:6d:46:04:de:0e:d6:8a:71:41:ab:88:
b5:50:9c:98:c0:57:f4:7c:85:1d:ae:0c:56:1e:7f:
53:72:3c:4a:88:96:9c:4e:af:60:c2:64:01:60:5c:
ca:0c:bd:03:48:53:cb:73:a5:92:ac:f1:94:11:b4:
1d:c0:88:8a:62:6d:5c:90:b0:41:9c:34:37:4c:4b:
8f:dd:22:c7:58:0f:b8:27:3d:4d:7a:34:ec:2a:21:
68:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3E:C8:B5:99:7E:94:7B:3B:0C:D0:97:B1:E5:E4:3D:A6:5D:5D:A7
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/Tz7ItZl-lHs7DNCXseXkPaZdXac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.226.0/24
Signature Algorithm: sha256WithRSAEncryption
63:14:96:61:fc:38:54:dd:5d:28:35:59:53:0d:36:d0:f6:17:
1e:08:9e:79:97:f6:1e:be:73:3b:4e:33:59:00:ae:24:40:38:
42:49:81:67:26:93:e7:b8:01:c8:7c:e3:17:ca:1f:71:be:0e:
80:10:04:ec:20:95:00:57:bb:91:25:89:83:48:42:38:89:bd:
a5:30:63:4a:b6:3b:34:04:df:12:c4:c6:81:00:56:58:a0:33:
12:4d:bb:e1:16:7e:44:5b:ba:be:63:a1:1f:1b:51:2a:5a:e7:
11:c6:56:90:13:d7:c0:f8:41:2b:b1:7d:e4:65:3d:44:d9:6a:
f2:2a:83:cb:f6:f9:4f:0c:38:bb:07:c3:99:a7:86:81:0b:27:
ed:a2:10:77:a9:76:a5:a5:08:17:27:81:d3:0b:b9:a4:27:a7:
bb:6c:6e:55:bd:a0:2e:26:7e:69:b8:d1:bf:10:ee:b5:30:b2:
7f:31:01:f1:bf:63:ad:63:d4:21:87:66:cc:29:4d:0b:83:2d:
98:8c:8a:c4:4c:e0:29:4d:e3:af:d1:2b:80:eb:b5:49:f4:b6:
4e:38:9e:3d:4a:c4:1b:c3:b8:d1:9f:3d:ab:98:1a:8a:da:94:
dd:2a:d6:10:72:65:6b:e4:a6:62:be:cf:e7:94:60:11:22:6d:
04:0b:5c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 23:33:11 2026 by rpki-client