Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/1Tl9UIhCqeKOtou3xYXepXYcMhg.roa
File: 1Tl9UIhCqeKOtou3xYXepXYcMhg.roa (raw, json)
Hash identifier: 5AkZht3+a78cap99bgI8nP4neP9y8A6GlDJrz6Dteng=
Subject key identifier: D5:39:7D:50:88:42:A9:E2:8E:B6:8B:B7:C5:85:DE:A5:76:1C:32:18
Certificate issuer: /CN=339af1753cb5827b7b433753b57c478d4aad6eeb
Certificate serial: 019F2368A317736BF96DFDA5A8674F5CFE60
Authority key identifier: 33:9A:F1:75:3C:B5:82:7B:7B:43:37:53:B5:7C:47:8D:4A:AD:6E:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5rxdTy1gnt7QzdTtXxHjUqtbus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/1Tl9UIhCqeKOtou3xYXepXYcMhg.roa
Signing time: Thu 02 Jul 2026 15:18:07 +0000
ROA not before: Thu 02 Jul 2026 15:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60398
IP address blocks: 212.40.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.mft
rsync://rpki.ripe.net/repository/DEFAULT/M5rxdTy1gnt7QzdTtXxHjUqtbus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a3:17:73:6b:f9:6d:fd:a5:a8:67:4f:5c:fe:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=339af1753cb5827b7b433753b57c478d4aad6eeb
Validity
Not Before: Jul 2 15:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5397d508842a9e28eb68bb7c585dea5761c3218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ae:2a:66:62:64:02:36:0c:b4:20:23:5d:92:
38:bb:5c:91:97:12:a6:92:33:3e:a3:87:c9:e8:99:
51:2a:25:47:24:4e:07:d6:05:05:65:cb:59:df:34:
b3:c2:2c:e7:10:b6:05:e1:66:30:2e:fc:d4:f3:1d:
87:8c:a2:a7:cf:90:c3:9b:56:05:e3:ab:f0:c2:8d:
bf:12:c7:ac:cf:f2:14:28:06:66:07:83:f1:43:98:
4f:77:63:71:23:88:fb:cf:0d:c4:df:c0:ea:c9:5e:
22:ef:2a:35:c7:45:6a:84:29:35:90:c5:52:ca:ac:
da:8f:ae:1c:bc:2f:8c:5b:bd:bd:b1:85:d5:f9:96:
69:74:b4:e8:c6:10:8d:e3:e4:8c:a7:a5:79:c9:76:
f8:54:cf:8a:e6:49:fd:5c:1d:68:60:96:f0:e9:34:
b2:15:de:31:23:9d:96:13:cc:09:a3:7f:d5:15:b9:
dc:0b:d8:93:e8:fc:2f:e6:a1:22:fb:dc:64:f2:36:
e7:65:48:b5:9a:37:73:79:79:6a:88:0c:7f:d0:ae:
2f:f6:26:c7:fe:2e:89:41:06:94:d9:66:c6:4d:d4:
a6:7d:52:bf:e0:06:9a:57:07:f3:ce:88:39:0a:2e:
46:87:d4:7b:33:14:41:5b:db:3d:fd:51:83:c6:8b:
3b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:39:7D:50:88:42:A9:E2:8E:B6:8B:B7:C5:85:DE:A5:76:1C:32:18
X509v3 Authority Key Identifier:
keyid:33:9A:F1:75:3C:B5:82:7B:7B:43:37:53:B5:7C:47:8D:4A:AD:6E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5rxdTy1gnt7QzdTtXxHjUqtbus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/1Tl9UIhCqeKOtou3xYXepXYcMhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.40.140.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:fb:b0:24:63:b7:70:a7:c1:2f:5f:80:6c:9d:f7:18:3e:00:
cd:00:97:7a:4e:5b:e7:0d:08:bb:be:59:f9:9a:52:f0:13:63:
6a:5f:e0:7b:b1:2d:06:b3:ef:1a:2a:05:ed:45:7f:aa:bc:e4:
51:45:19:52:89:44:30:8b:30:4e:e3:e2:75:1f:a5:db:9e:61:
65:95:45:6a:23:5b:02:a0:bc:56:f0:62:0e:24:1e:ac:20:2d:
7e:02:f4:a6:f7:ef:3f:de:2f:34:b5:ef:e7:a5:73:cf:f7:98:
6b:93:90:36:9b:da:46:40:97:e6:f0:fb:4f:9c:e8:bb:87:53:
8b:06:86:51:2b:71:40:bc:86:26:b5:c3:7a:56:68:cc:4c:9b:
30:f8:69:d0:28:f7:be:d7:81:53:88:6d:cd:c0:b1:98:dd:47:
2c:11:3b:49:be:48:81:f6:3b:7c:0c:4b:53:5d:95:68:c3:69:
0b:55:8d:22:ca:55:71:86:3e:3a:e7:8b:83:7f:48:05:ea:f6:
fa:6d:13:74:4b:79:18:17:e8:28:7f:96:e1:25:74:d9:56:33:
e5:c8:b4:53:b7:ca:bb:21:26:6d:05:d2:9a:a4:08:51:85:78:
22:ac:69:fb:e4:50:10:9d:25:4d:f1:8b:19:d5:12:28:f5:84:
43:a5:4a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:57:40 2026 by rpki-client