Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/TALAf9e3JbCY2RK2sXYQ84VMOMs.roa
File: TALAf9e3JbCY2RK2sXYQ84VMOMs.roa (raw, json)
Hash identifier: f4qqWluL3dj+097jCvVjPh/+QWqL2u0veAUBCRsp3V8=
Subject key identifier: 4C:02:C0:7F:D7:B7:25:B0:98:D9:12:B6:B1:76:10:F3:85:4C:38:CB
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A1412A15BDFC22E9EDF9E501A5BCA160E4
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/TALAf9e3JbCY2RK2sXYQ84VMOMs.roa
Signing time: Thu 15 Oct 2026 20:03:59 +0000
ROA not before: Thu 15 Oct 2026 20:03:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199439
IP address blocks: 87.76.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:2a:15:bd:fc:22:e9:ed:f9:e5:01:a5:bc:a1:60:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Oct 15 20:03:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c02c07fd7b725b098d912b6b17610f3854c38cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5e:28:0f:1a:29:48:80:09:4e:60:82:86:b2:
52:cb:1a:be:48:6a:49:dd:03:8a:65:63:d5:d7:10:
e9:5c:3e:f0:89:28:94:70:8a:46:d5:83:2b:57:97:
6b:a7:91:0b:9b:02:18:6f:67:a1:63:a6:33:3f:8a:
76:a6:4f:ed:0d:1c:ac:1a:02:8e:a8:b0:3a:f0:5e:
87:5c:de:7d:ed:f9:99:2a:a6:e5:cf:fe:50:d8:69:
d2:d0:54:ed:94:d9:f4:c2:41:fd:00:f7:78:12:66:
ec:ee:97:4e:5c:d3:c3:e6:90:be:e8:19:b8:0f:d9:
bd:2a:bd:9c:6b:4d:83:af:d1:5f:39:e5:fe:ea:de:
9f:ce:a9:81:2a:87:e1:b5:34:40:45:d2:0c:d8:6d:
b7:d6:3c:32:ad:33:58:62:de:72:89:49:b3:08:43:
95:e0:43:33:3a:c7:67:3d:b3:b5:54:a3:83:1c:3b:
c1:cc:a6:77:9a:67:44:e5:5d:9e:46:60:f5:5e:f7:
2a:17:d7:98:61:5c:0a:ab:4e:32:c4:fd:3d:20:5d:
1c:e3:08:bb:72:00:13:8d:d5:f4:81:3f:b1:d0:89:
1f:a5:1c:b3:99:a2:3e:c0:3b:da:b7:a6:50:9e:d7:
c8:8a:e8:2e:4d:35:bf:39:5d:36:5d:37:9e:de:b0:
c2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:02:C0:7F:D7:B7:25:B0:98:D9:12:B6:B1:76:10:F3:85:4C:38:CB
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/TALAf9e3JbCY2RK2sXYQ84VMOMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.182.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:45:86:49:33:4a:b8:91:ed:06:bf:aa:5b:f1:d5:a4:8e:52:
81:d8:10:11:5b:d1:f5:a8:05:20:aa:bb:b7:94:67:ca:d8:99:
9f:64:68:e3:bf:19:79:d1:26:f2:2c:1d:1c:d7:3b:4d:fe:23:
93:c7:7f:7a:31:f5:99:59:fb:97:e6:5b:fc:e4:04:30:46:8a:
eb:f9:61:89:60:e1:d0:6d:7f:89:d1:4b:97:b3:43:a6:a9:a0:
d2:2e:0c:e7:7c:80:77:a1:f4:c8:9c:e5:40:7c:87:a4:7f:95:
7e:c7:e0:d1:c1:50:39:c1:4b:3f:1b:b6:1d:84:16:54:df:cf:
fa:0c:90:de:6c:79:6c:8e:ec:81:ea:c5:f5:15:af:49:9f:f7:
26:9d:88:43:92:f9:c5:f5:fb:64:d1:a1:e0:d1:03:52:0f:f0:
a6:33:55:69:3d:e7:58:05:85:b2:23:99:10:2a:5b:b4:3c:83:
af:6b:56:7d:df:98:c5:71:a9:4e:c3:b4:6b:b0:88:cc:88:ca:
1d:f6:43:f2:a5:7e:89:2b:63:50:41:45:6f:8d:88:7c:cc:7b:
b9:83:0c:c6:eb:6a:7f:59:7c:f6:89:13:ac:85:56:64:4d:22:
ff:5c:28:e1:91:07:d5:f3:94:aa:64:3d:07:27:02:75:2d:5f:
6a:0e:72:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:44:32 2026 by rpki-client