Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/rTfQRP4F9sMJVNSc3iIIv2aNnVg.roa
File: rTfQRP4F9sMJVNSc3iIIv2aNnVg.roa (raw, json)
Hash identifier: ksSqb4aUrlKAZ8+qQVP30/nBWNZc4hk3WGbIksyF0uQ=
Subject key identifier: AD:37:D0:44:FE:05:F6:C3:09:54:D4:9C:DE:22:08:BF:66:8D:9D:58
Certificate issuer: /CN=bf54dbf00d74590c8913dec8b1cf084d8fcf693c
Certificate serial: 019B7E38B034667D7276EBF03870B870D917
Authority key identifier: BF:54:DB:F0:0D:74:59:0C:89:13:DE:C8:B1:CF:08:4D:8F:CF:69:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1Tb8A10WQyJE97Isc8ITY_PaTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/rTfQRP4F9sMJVNSc3iIIv2aNnVg.roa
Signing time: Fri 02 Jan 2026 10:20:02 +0000
ROA not before: Fri 02 Jan 2026 10:20:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47485
IP address blocks: 139.28.252.0/22 maxlen: 22
2a09:dc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v1Tb8A10WQyJE97Isc8ITY_PaTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Feb 2026 15:25:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:b0:34:66:7d:72:76:eb:f0:38:70:b8:70:d9:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf54dbf00d74590c8913dec8b1cf084d8fcf693c
Validity
Not Before: Jan 2 10:20:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad37d044fe05f6c30954d49cde2208bf668d9d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:51:2d:02:81:4d:28:4b:bc:4e:30:c0:5c:78:
6f:ef:97:70:3a:db:36:01:01:d6:0b:03:14:57:53:
1b:7a:4b:7e:2f:34:dd:6f:0f:36:f7:64:bb:82:d3:
1d:c4:60:75:bc:f0:56:89:b7:07:d0:3b:78:02:07:
84:6e:7f:c2:76:12:a0:db:b3:75:3c:b9:e2:97:79:
4c:36:d1:da:de:9e:0b:3f:a3:21:4c:5c:6b:b5:0f:
41:39:70:72:51:2f:e7:91:af:cb:19:72:d0:40:cc:
55:b9:64:45:80:b9:30:65:aa:24:ba:bd:b1:e6:df:
c0:ec:e9:fe:5b:5b:8c:f3:bb:4a:e1:59:1a:a6:1c:
8f:b3:4b:b2:27:21:e3:89:48:8b:87:20:d8:7f:e9:
14:11:96:42:87:66:61:82:75:ac:5c:e2:07:dc:f3:
4f:86:de:eb:55:d3:94:66:5b:3e:28:ad:e3:45:c9:
3f:d5:58:ea:52:2b:66:26:5b:22:bb:57:d7:18:ae:
1f:1c:b3:9b:0e:60:ce:51:fc:f5:f1:e7:aa:2f:f9:
48:bd:ef:88:e3:34:d4:32:d8:1d:76:8b:0a:b3:11:
36:dc:8f:81:d7:aa:e9:3e:2d:cb:f3:cf:01:62:7b:
bf:e2:05:a8:9a:58:f6:21:76:f8:c7:2f:8b:72:4f:
ff:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:37:D0:44:FE:05:F6:C3:09:54:D4:9C:DE:22:08:BF:66:8D:9D:58
X509v3 Authority Key Identifier:
keyid:BF:54:DB:F0:0D:74:59:0C:89:13:DE:C8:B1:CF:08:4D:8F:CF:69:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1Tb8A10WQyJE97Isc8ITY_PaTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/rTfQRP4F9sMJVNSc3iIIv2aNnVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.252.0/22
IPv6:
2a09:dc0::/32
Signature Algorithm: sha256WithRSAEncryption
24:2c:4f:19:c3:f8:a5:93:c0:69:b3:e1:8b:2a:b0:b2:fe:dd:
c1:b7:a1:b5:fb:36:2b:d4:06:95:90:59:9c:13:89:e5:be:de:
f3:c8:83:24:82:69:38:78:ea:31:0a:ac:1e:96:bc:21:78:e0:
ec:5c:f3:ae:fb:af:13:7a:4e:3f:35:dc:30:59:5a:5c:6b:3a:
54:2b:f7:e6:ff:7c:62:b8:c7:77:f8:b8:84:7f:55:c4:db:20:
52:b6:a1:d8:67:c8:95:f3:97:1f:08:1d:5c:c2:9c:98:de:45:
00:59:93:13:e0:4b:c7:b5:60:ef:7c:d2:33:bf:c6:25:81:77:
24:18:d9:10:31:3b:bb:23:71:28:0f:98:89:95:55:4f:9d:45:
c7:ce:d4:f2:e8:74:42:12:22:25:ca:0a:14:de:40:68:05:62:
5f:5c:37:25:3e:66:8e:e7:7a:57:64:58:5f:84:16:3a:ee:38:
40:ec:27:ee:85:5d:e3:2f:d1:7f:0c:d2:d0:87:87:1c:3f:fb:
e5:a5:14:41:2e:72:f4:51:84:08:e1:fa:ba:cb:32:f7:db:41:
e6:91:c2:6a:58:a1:9d:8c:3e:98:d8:87:db:63:92:21:c7:f5:
65:20:51:17:f6:7d:3d:4a:44:58:c0:ab:1f:0e:1f:3a:fc:9e:
ae:c4:d0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:09:42 2026 by rpki-client