Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/d032de-7b42-4253-9074-195b2024abee/1/TKICB8YOdD6bdiIav5yEIcN-jFE.roa
File: TKICB8YOdD6bdiIav5yEIcN-jFE.roa (raw, json)
Hash identifier: g+d7zzQluUE41eE7PBez/FLekTdLQ2Gdgu4OxTMnlfU=
Subject key identifier: 4C:A2:02:07:C6:0E:74:3E:9B:76:22:1A:BF:9C:84:21:C3:7E:8C:51
Certificate issuer: /CN=b009be89d4754756f9cfde78fac1a3627ac0c817
Certificate serial: 01A0056A9C3FBED8E413D0ED1886FC4FF651
Authority key identifier: B0:09:BE:89:D4:75:47:56:F9:CF:DE:78:FA:C1:A3:62:7A:C0:C8:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAm-idR1R1b5z954-sGjYnrAyBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d032de-7b42-4253-9074-195b2024abee/1/TKICB8YOdD6bdiIav5yEIcN-jFE.roa
Signing time: Sat 15 Aug 2026 12:34:27 +0000
ROA not before: Sat 15 Aug 2026 12:34:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49556
IP address blocks: 185.201.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d032de-7b42-4253-9074-195b2024abee/1/sAm-idR1R1b5z954-sGjYnrAyBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d032de-7b42-4253-9074-195b2024abee/1/sAm-idR1R1b5z954-sGjYnrAyBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sAm-idR1R1b5z954-sGjYnrAyBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:05:6a:9c:3f:be:d8:e4:13:d0:ed:18:86:fc:4f:f6:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b009be89d4754756f9cfde78fac1a3627ac0c817
Validity
Not Before: Aug 15 12:34:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ca20207c60e743e9b76221abf9c8421c37e8c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ab:1f:ba:73:44:9f:4d:3b:e6:c1:1c:7c:5a:
85:e3:7e:aa:8b:1d:7f:f4:61:fd:b7:a6:fa:dd:8a:
17:f5:b0:0a:0c:d4:22:8f:ef:0c:43:74:fe:3c:b0:
ba:43:67:85:e7:20:2a:0d:b1:01:17:45:90:05:36:
df:24:5f:92:22:ca:22:a1:9b:e3:37:c1:9f:ae:87:
a9:d0:d3:b8:e8:bb:ad:f9:84:92:c1:dd:d3:12:e2:
89:8c:d7:72:1a:56:83:57:dc:0e:b3:9d:1d:1a:d4:
94:98:6e:7d:5b:5d:c8:97:05:89:a0:e0:09:b5:79:
e2:0c:f4:ad:03:4c:7b:f5:a6:8b:ce:a5:72:b7:a2:
05:7f:f8:89:77:87:c6:5d:03:e9:fe:84:24:25:8c:
22:45:2e:f3:6d:0e:b5:d0:13:de:d4:0e:07:8e:ee:
d8:38:8b:21:5b:88:38:dd:fb:6e:8f:6f:bf:15:7b:
83:a7:20:b0:1d:e3:23:0e:7e:87:e3:6e:27:02:10:
c3:c4:9d:25:5e:5c:0b:0c:c4:04:ea:84:eb:1c:c2:
d3:2b:42:b0:fd:2c:a7:85:ba:ad:8a:87:7b:6b:5f:
9c:6d:68:2a:a9:82:20:8d:59:c7:91:e8:d5:f0:8d:
3d:1c:1e:96:8a:27:e1:09:2f:22:23:61:42:e2:46:
29:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A2:02:07:C6:0E:74:3E:9B:76:22:1A:BF:9C:84:21:C3:7E:8C:51
X509v3 Authority Key Identifier:
keyid:B0:09:BE:89:D4:75:47:56:F9:CF:DE:78:FA:C1:A3:62:7A:C0:C8:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAm-idR1R1b5z954-sGjYnrAyBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d032de-7b42-4253-9074-195b2024abee/1/TKICB8YOdD6bdiIav5yEIcN-jFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d032de-7b42-4253-9074-195b2024abee/1/sAm-idR1R1b5z954-sGjYnrAyBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.221.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:4a:58:e7:90:5d:7a:0e:27:89:b0:e6:d1:f5:e3:fe:e8:14:
b8:60:47:3d:14:25:3e:3f:8b:f9:fb:85:e4:db:24:aa:be:c1:
93:8a:e8:12:80:c8:d0:64:f8:be:5b:cf:b7:5a:17:7d:cb:71:
51:66:70:ea:76:7b:49:b6:b5:7b:8e:58:de:fd:ac:54:a6:27:
5e:69:d3:7c:ac:f5:1c:ad:71:37:c7:80:42:5b:93:9c:28:43:
9a:99:61:3c:fa:dd:71:f1:f9:05:31:88:b2:d7:af:21:b4:1e:
47:e3:e2:a4:50:88:bf:20:f5:6c:ee:ad:4e:0e:cc:4d:93:fa:
9b:2a:76:03:ba:20:85:51:26:c7:7e:fe:84:75:c5:b0:ca:5f:
e8:17:5a:c3:97:07:ee:46:66:42:55:33:48:3a:36:0a:5f:79:
5e:35:30:27:4f:85:e9:0f:99:63:05:96:eb:3b:5d:c4:8d:5e:
c6:ad:f2:e8:d8:d0:9c:0e:62:8e:eb:86:5f:00:1e:00:ae:4e:
4c:cb:f7:9b:7c:ed:ed:78:72:b6:e9:b5:ae:06:2a:ca:6c:65:
fe:3a:ea:7d:b1:fc:a6:87:08:fd:7d:c5:05:9b:b8:41:2d:d2:
9c:e7:ea:c8:ce:59:b4:62:c5:c5:6e:84:eb:6a:56:36:73:80:
51:12:ed:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:24:56 2026 by rpki-client