Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/T2lrM411-iTyURcEIl9g5I2ZFqE.roa
File: T2lrM411-iTyURcEIl9g5I2ZFqE.roa (raw, json)
Hash identifier: df+E+9U3eV1BGvNj1HOrDOvwIzitKklyPlPfziC2WNQ=
Subject key identifier: 4F:69:6B:33:8D:75:FA:24:F2:51:17:04:22:5F:60:E4:8D:99:16:A1
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01A138DF75D42C7F04C1129AAB9B1BAEE235
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/T2lrM411-iTyURcEIl9g5I2ZFqE.roa
Signing time: Wed 14 Oct 2026 05:25:31 +0000
ROA not before: Wed 14 Oct 2026 05:25:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 77.246.212.0/22 maxlen: 22
88.80.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:df:75:d4:2c:7f:04:c1:12:9a:ab:9b:1b:ae:e2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Oct 14 05:25:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f696b338d75fa24f2511704225f60e48d9916a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9b:bf:36:4c:84:23:77:31:f7:7b:e6:50:9b:
40:80:3e:8a:24:50:6f:7e:c0:22:b8:5f:9f:64:84:
64:fe:1d:41:5a:9b:cf:de:a7:1b:bb:8a:c6:1b:40:
05:ba:c5:3a:59:05:3e:95:12:d5:2d:dc:6f:09:c5:
41:2d:f6:1e:04:15:84:b4:b6:34:78:84:6f:ac:46:
7f:9e:d4:1d:cf:ca:19:79:dd:02:f6:d7:f6:c1:a4:
53:91:6c:00:f3:c5:ba:e9:d2:46:c9:30:4b:31:05:
f8:30:86:e4:20:21:bc:c3:b1:8d:40:c7:9b:72:02:
fe:bb:1d:09:35:84:df:b2:52:ba:a1:72:78:ba:be:
e3:1d:cd:ab:e9:b7:f0:eb:18:60:45:3e:5c:e2:2f:
5e:89:c0:51:85:34:a2:ed:1a:c1:f0:59:74:03:44:
7b:c3:b1:24:6d:a5:f7:23:0c:16:a3:45:04:d6:d2:
35:89:53:f6:f0:99:b9:cf:d3:2e:33:31:cc:19:ab:
7e:23:b2:6d:83:cd:b5:a0:bc:82:fb:c0:9b:b3:d6:
b9:af:8e:92:42:22:d0:25:8d:4b:54:85:71:39:00:
82:d1:7a:a0:2c:df:f6:9d:53:5d:b2:52:78:e1:37:
3c:2e:7e:ac:5f:c3:07:f0:65:6f:0b:d7:c3:4f:12:
c0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:69:6B:33:8D:75:FA:24:F2:51:17:04:22:5F:60:E4:8D:99:16:A1
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/T2lrM411-iTyURcEIl9g5I2ZFqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.212.0/22
88.80.141.0/24
Signature Algorithm: sha256WithRSAEncryption
80:88:38:8d:82:81:07:ae:84:ed:be:d8:fd:c7:cf:63:df:a6:
e5:bc:8f:62:95:5d:01:ab:a4:d4:ec:e7:2a:0a:13:b5:d7:92:
40:c4:8d:c9:8a:d8:35:49:f3:3b:80:6d:51:a0:e2:94:be:3b:
e2:e6:95:ba:c8:c6:ce:e2:b4:f2:30:cc:49:96:b0:03:c2:38:
9b:67:b5:5f:04:42:dd:5c:bc:37:05:00:65:c5:c5:5d:cf:07:
c2:f3:36:dc:d7:fd:8e:8f:0f:da:8d:ac:44:69:29:c4:45:72:
32:f5:bd:aa:d7:05:f2:58:6e:38:f6:d5:7e:bc:77:16:62:cb:
68:25:28:15:41:ec:5d:71:23:52:86:d1:22:c2:d1:03:57:0f:
59:5d:7d:e8:8c:4d:60:78:38:7f:ef:01:59:7a:a5:9e:6a:86:
a4:ab:3b:03:6e:53:b9:20:54:5d:fb:bb:44:7c:34:5b:a8:c1:
70:e6:bc:8f:96:6b:f7:f9:21:c8:95:fb:46:a7:5a:7e:48:4c:
1b:13:8d:82:2b:7d:69:c0:c5:fc:7b:12:b5:fd:40:33:f7:bd:
c9:5f:44:f2:1e:2a:15:0a:11:f8:dd:d4:fb:6f:44:c8:22:85:
b2:54:c6:a5:b8:3e:e0:2e:b0:ff:15:15:3c:00:e0:36:6a:1d:
e6:ad:48:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:07:59 2026 by rpki-client