Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/tznF_aUve29bigBVs4qC5CbvP1Y.roa
File: tznF_aUve29bigBVs4qC5CbvP1Y.roa (raw, json)
Hash identifier: uOQz3zdWVZQRNM3PlzkPDJVauAScwExOgWtkjVX/eyU=
Subject key identifier: B7:39:C5:FD:A5:2F:7B:6F:5B:8A:00:55:B3:8A:82:E4:26:EF:3F:56
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019C6070895D53D3441EA3D211D52FB91368
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/tznF_aUve29bigBVs4qC5CbvP1Y.roa
Signing time: Sun 15 Feb 2026 08:35:13 +0000
ROA not before: Sun 15 Feb 2026 08:35:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202736
IP address blocks: 84.245.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:60:70:89:5d:53:d3:44:1e:a3:d2:11:d5:2f:b9:13:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 15 08:35:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b739c5fda52f7b6f5b8a0055b38a82e426ef3f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:74:55:8c:67:f5:67:97:d3:06:29:48:b7:83:
81:0e:69:da:7a:e0:30:0d:cd:31:bc:fa:fb:f3:b5:
f1:73:66:8c:d5:a2:fb:69:89:da:d6:21:e8:4e:d3:
5c:ea:71:93:69:be:07:10:aa:3c:c7:d7:d6:06:39:
f8:35:e5:e2:a3:63:b6:70:62:0e:d8:cf:49:96:48:
73:0c:cd:49:b2:dd:68:4d:1c:b7:a5:0b:91:37:56:
37:db:0c:c7:60:a7:cc:e3:41:67:3c:1c:3f:2c:23:
0c:fd:9f:b7:48:55:bf:61:96:fc:00:9e:f2:1f:36:
5d:fa:4e:51:fa:c3:60:50:01:2d:b0:d6:b8:fe:dd:
5c:c5:73:31:6b:52:65:c2:6a:d0:7a:12:90:d8:d7:
9e:a6:ce:88:e6:58:3e:3a:74:dd:09:fc:85:72:9b:
9e:e9:71:ec:c2:25:90:9e:67:19:74:0d:35:63:58:
be:d2:54:66:50:1b:0a:f1:67:91:22:9b:52:5c:84:
72:9d:cc:ac:1c:61:60:fa:d5:27:d5:0f:25:4d:c8:
01:05:da:11:e6:1e:e0:1d:81:7c:a8:f0:c3:9d:44:
ad:05:b6:c9:6a:71:ed:56:37:4c:50:4a:15:66:d2:
50:b8:ab:32:18:ee:06:3a:9f:4e:1e:05:5e:17:67:
6f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:39:C5:FD:A5:2F:7B:6F:5B:8A:00:55:B3:8A:82:E4:26:EF:3F:56
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/tznF_aUve29bigBVs4qC5CbvP1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.245.28.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:a8:f0:2e:93:e3:a6:3c:29:b9:a6:7c:db:6b:9c:da:b6:82:
79:2e:af:59:0f:f8:b9:d4:bf:a6:2f:ad:4d:6f:f0:36:ff:c1:
78:f2:7c:02:7b:ce:86:24:b1:76:c4:7e:25:a8:84:2a:74:3d:
a3:42:a1:d2:5e:f4:07:5e:ed:43:16:ee:20:1e:18:b6:f2:52:
17:26:3c:41:bb:43:8a:b5:8f:3d:48:e0:bb:18:93:fa:33:d4:
13:4e:84:57:90:08:d8:b6:dc:02:1c:89:bf:c7:2a:11:62:3a:
81:2e:20:6c:3a:66:c4:12:87:01:2c:09:7a:1b:e4:fd:b3:3c:
03:80:c5:1e:84:a9:95:d4:a0:b0:9e:1d:0f:ba:a1:5c:e2:b4:
ff:8f:17:a6:96:39:87:c3:49:51:22:21:69:a0:19:d2:73:99:
9b:c3:7b:01:c8:e6:f1:db:26:3f:4d:39:dd:97:32:c4:28:a6:
25:28:20:2c:d9:b3:df:1a:60:f1:87:8f:81:23:4c:21:b5:79:
0b:a4:11:8f:53:24:e6:73:6e:d0:7c:d5:4e:10:3d:a9:36:21:
81:67:81:e9:74:67:8b:9a:5d:f5:7a:78:61:46:4c:f1:a7:1b:
41:3b:93:b3:bb:84:53:b0:6b:e3:fc:4b:77:c4:5b:a4:6a:53:
32:b4:d0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 15:34:44 2026 by rpki-client