Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/TgXiy8xa5uMmYmW-gKUlnQMNHLI.roa
File: TgXiy8xa5uMmYmW-gKUlnQMNHLI.roa (raw, json)
Hash identifier: 0EWgGceKXhp29ZiS1UwiHFdZA70DW8sVoZiU+6O5Idw=
Subject key identifier: 4E:05:E2:CB:CC:5A:E6:E3:26:62:65:BE:80:A5:25:9D:03:0D:1C:B2
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 01A00A73AB11B655D908736CEBB4C10ED65F
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/TgXiy8xa5uMmYmW-gKUlnQMNHLI.roa
Signing time: Sun 16 Aug 2026 12:02:27 +0000
ROA not before: Sun 16 Aug 2026 12:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 151.123.179.0/24 maxlen: 24
151.123.180.0/24 maxlen: 24
151.123.181.0/24 maxlen: 24
151.123.182.0/24 maxlen: 24
151.123.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0a:73:ab:11:b6:55:d9:08:73:6c:eb:b4:c1:0e:d6:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: Aug 16 12:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e05e2cbcc5ae6e3266265be80a5259d030d1cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:09:d6:a2:d9:8c:e3:aa:49:74:1e:9f:26:6c:
70:01:ed:fd:d0:82:79:d8:26:a4:3e:1a:06:03:44:
ca:65:99:8e:c5:fe:fa:5d:62:88:cd:d3:10:b6:6e:
38:d9:77:46:d6:c5:9e:cb:72:55:e1:4c:6f:cc:d8:
ae:1e:99:52:7c:8b:90:99:51:a9:f9:2e:72:3c:b8:
fc:11:a2:dc:b4:62:81:71:9a:2d:21:b3:0b:21:e3:
63:7b:fd:eb:a2:3b:83:74:6f:70:92:4f:4f:5b:14:
7b:d5:6e:5d:4b:74:71:70:17:fe:7e:ff:8c:c7:9c:
27:dd:4b:74:64:43:8e:72:d8:de:ef:b2:0e:8e:5b:
ca:3d:90:8b:4f:e1:62:78:79:fc:f0:94:99:9f:7d:
81:3d:4d:c5:91:d6:20:1a:f8:22:b5:e1:45:60:d6:
02:09:ab:ea:60:59:54:5d:e0:cb:06:3e:f1:74:ab:
47:ed:5b:57:f6:08:cb:dc:89:52:e3:ea:e6:12:2e:
f0:97:c0:92:72:3b:89:83:61:88:c2:4a:d8:52:8b:
2f:49:a9:ca:de:ce:58:ff:8a:c4:3f:fc:c1:2c:13:
46:f0:c5:71:af:fc:ca:56:59:ed:ce:22:0f:38:61:
89:40:ea:3e:71:d2:6c:92:bc:39:d7:9a:44:05:1a:
9d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:05:E2:CB:CC:5A:E6:E3:26:62:65:BE:80:A5:25:9D:03:0D:1C:B2
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/TgXiy8xa5uMmYmW-gKUlnQMNHLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.123.179.0-151.123.183.255
Signature Algorithm: sha256WithRSAEncryption
0d:fe:32:7a:c3:44:54:fb:a8:fe:7d:40:6a:a2:12:31:f8:ac:
ef:45:cd:d8:a4:bf:12:d9:cc:b7:68:78:98:d1:e6:45:4b:cb:
63:8e:70:0e:07:58:92:8f:a6:66:a0:b5:31:7d:36:78:e7:ad:
ad:aa:10:84:b7:4c:15:ee:4d:36:97:a2:0f:06:6f:56:81:5f:
1d:3b:bb:b5:bf:95:dc:19:5d:59:ab:0c:78:e0:3a:92:c8:49:
96:37:cf:e6:f0:c2:08:b0:29:1d:db:cb:c0:b5:f8:38:6a:f2:
1f:f4:04:53:7b:e6:59:4a:29:d0:0b:fb:4f:fc:44:8d:33:3a:
ea:e4:4a:bd:81:26:a0:22:f1:07:64:1a:10:48:88:db:49:44:
d4:29:e7:e9:92:e9:36:80:88:a1:05:5f:65:7f:25:81:78:31:
e7:d9:10:48:1c:3c:4e:13:08:b4:fe:30:da:f3:00:1b:56:96:
1b:e6:85:ae:40:42:29:56:9f:9f:ba:8c:f3:98:1c:f9:ee:0b:
26:dd:e3:ee:0c:df:01:33:db:2f:a4:e6:3e:01:7b:94:d7:8b:
1d:ab:71:70:05:48:bd:e9:c2:ad:db:50:42:d0:53:7a:22:86:
ef:e7:15:b1:ec:97:a1:99:69:24:26:61:e4:4a:27:a1:6e:09:
46:35:8e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:32:38 2026 by rpki-client