Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/TjAvlv1RE5zaPC2dyAwi4crfm6o.roa
File: TjAvlv1RE5zaPC2dyAwi4crfm6o.roa (raw, json)
Hash identifier: j19p19mIszd20BEiCpsiRkK3ohgiQ0R61lURvBqp/zQ=
Subject key identifier: 4E:30:2F:96:FD:51:13:9C:DA:3C:2D:9D:C8:0C:22:E1:CA:DF:9B:AA
Certificate issuer: /CN=ff75431b7cad9faea3e41956961e084755f82d33
Certificate serial: 019F2368ADA9B03BECA91AEB681BF6977D4F
Authority key identifier: FF:75:43:1B:7C:AD:9F:AE:A3:E4:19:56:96:1E:08:47:55:F8:2D:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3VDG3ytn66j5BlWlh4IR1X4LTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/TjAvlv1RE5zaPC2dyAwi4crfm6o.roa
Signing time: Thu 02 Jul 2026 15:18:10 +0000
ROA not before: Thu 02 Jul 2026 15:18:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41847
IP address blocks: 193.34.170.0/23 maxlen: 24
2001:67c:2f1c::/48 maxlen: 120
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/_3VDG3ytn66j5BlWlh4IR1X4LTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/_3VDG3ytn66j5BlWlh4IR1X4LTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3VDG3ytn66j5BlWlh4IR1X4LTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ad:a9:b0:3b:ec:a9:1a:eb:68:1b:f6:97:7d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff75431b7cad9faea3e41956961e084755f82d33
Validity
Not Before: Jul 2 15:18:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e302f96fd51139cda3c2d9dc80c22e1cadf9baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4b:f2:8c:f5:71:33:0c:32:6d:c2:5a:19:22:
ea:12:01:f1:a1:5a:60:7d:db:ee:27:07:d2:46:e6:
86:97:77:e9:81:f1:cb:a4:42:51:dd:b1:a1:89:03:
f6:37:84:74:80:f2:fc:8b:32:cb:07:2e:e5:24:42:
bb:ce:93:78:5f:72:7f:af:15:d5:18:9f:fa:79:31:
90:17:23:29:1b:48:27:a3:17:db:1a:6b:3d:42:33:
2a:fb:3b:c1:d8:69:0e:ab:d3:96:03:8a:3e:95:95:
f4:73:2d:da:31:8e:74:63:33:7b:ef:2d:a6:47:59:
4a:70:52:55:49:be:f0:ad:78:1d:aa:ba:66:80:67:
cb:96:9c:56:5b:21:ff:38:34:a3:ab:39:8a:e8:cb:
bd:38:3a:4b:e4:7c:0a:50:38:eb:2b:1b:8b:92:4b:
cb:8a:c8:62:23:61:a4:58:7d:88:cd:76:56:41:d9:
4f:53:5b:86:6e:c2:eb:ba:91:e0:e4:56:6f:7d:3d:
73:4e:6f:b2:44:11:09:7d:e1:ff:cb:21:6c:7f:f5:
e7:12:6a:12:49:e9:9a:e2:af:47:2a:c8:44:bf:e8:
58:18:0e:d8:f2:f5:73:7c:da:63:0d:11:4f:b7:63:
e8:73:b1:27:c0:39:29:09:d4:38:39:dd:66:0f:81:
a2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:30:2F:96:FD:51:13:9C:DA:3C:2D:9D:C8:0C:22:E1:CA:DF:9B:AA
X509v3 Authority Key Identifier:
keyid:FF:75:43:1B:7C:AD:9F:AE:A3:E4:19:56:96:1E:08:47:55:F8:2D:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3VDG3ytn66j5BlWlh4IR1X4LTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/TjAvlv1RE5zaPC2dyAwi4crfm6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/_3VDG3ytn66j5BlWlh4IR1X4LTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.170.0/23
IPv6:
2001:67c:2f1c::/48
Signature Algorithm: sha256WithRSAEncryption
72:10:78:9a:c0:8b:9a:5f:ee:cb:20:13:79:75:33:6f:8d:74:
2e:38:09:0c:69:12:6a:c4:d9:cd:2b:bb:37:88:4b:5a:c5:16:
c2:ed:45:0e:c3:6f:1f:97:1e:55:f9:2a:0e:3b:80:f7:f5:49:
8e:d6:bb:f7:9b:4c:da:9c:99:fc:ac:87:7b:ee:12:3d:0e:f3:
cc:82:7a:4f:b7:df:07:ab:eb:f1:67:5b:85:09:b6:27:23:36:
dd:d2:d2:56:dd:fc:b1:fb:79:38:c9:0f:6d:27:ef:db:c0:da:
bc:8a:c4:06:e2:60:04:f2:d8:19:85:d7:03:8a:9c:d5:85:f4:
c2:e1:8f:de:09:a0:2b:eb:5d:36:21:65:39:63:e8:1f:e9:80:
5e:3b:0a:2c:9d:93:da:98:5b:4c:2c:53:0d:22:fa:9b:42:ca:
fc:ba:d6:b2:c7:65:99:18:01:b9:69:56:d7:1b:2b:c0:c6:ba:
14:2d:76:4e:2a:ea:dd:43:d5:11:c5:ca:12:d8:13:26:9d:7d:
e8:a3:4c:2b:f1:d2:f9:8a:a8:d2:3a:c6:8f:32:a8:58:78:5d:
47:f6:b5:47:2e:0c:49:ed:d9:21:50:66:40:48:f7:86:ec:07:
3b:4c:99:64:07:76:d8:a6:67:a8:7e:d4:3b:ca:b7:8c:1c:8a:
b9:6e:ca:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 12:35:54 2026 by rpki-client