Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/Tn2k3KmRzT3j_R91Tc7WnsufchU.roa
File: Tn2k3KmRzT3j_R91Tc7WnsufchU.roa (raw, json)
Hash identifier: 5MNnwB7qQZMacN77y3f6DNN0HfjgWzAZ+Oye8YnorEg=
Subject key identifier: 4E:7D:A4:DC:A9:91:CD:3D:E3:FD:1F:75:4D:CE:D6:9E:CB:9F:72:15
Certificate issuer: /CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Certificate serial: 01A177720CF3E173AE51734BCEA7ED29A576
Authority key identifier: 68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/Tn2k3KmRzT3j_R91Tc7WnsufchU.roa
Signing time: Mon 26 Oct 2026 09:02:05 +0000
ROA not before: Mon 26 Oct 2026 09:02:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205170
IP address blocks: 89.42.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 15:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:72:0c:f3:e1:73:ae:51:73:4b:ce:a7:ed:29:a5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Validity
Not Before: Oct 26 09:02:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e7da4dca991cd3de3fd1f754dced69ecb9f7215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:52:f2:5c:d4:d2:2c:8a:76:c4:e0:1b:b3:2f:
46:30:24:a0:f5:1a:59:65:67:36:f3:63:2c:d5:cd:
30:7a:0e:75:3d:fe:5f:fe:35:15:ff:a3:70:f5:99:
de:e4:66:59:38:d6:0b:11:e2:6e:e9:36:49:43:36:
b5:00:71:fc:83:49:66:a6:3d:47:68:8a:ec:6e:1f:
0a:00:6a:31:b6:5d:a4:39:94:63:c9:46:36:1a:a2:
4d:7f:cd:08:f0:19:55:18:3f:0d:73:e9:8e:95:3f:
15:3b:2a:80:ed:5c:79:67:04:6d:a7:56:a3:d0:0a:
2e:45:4a:4c:44:a9:22:35:57:ea:62:c9:e3:a6:37:
00:c6:bd:eb:78:42:f7:7b:42:55:fa:e9:7f:44:30:
96:e2:dc:dc:8d:84:88:5a:eb:8f:05:a7:38:32:cd:
72:14:76:f4:68:17:56:15:1f:c9:96:39:69:01:f7:
91:8a:fb:3c:d5:c5:ea:35:cf:5a:74:67:36:86:f5:
a3:7f:4d:d9:e6:c2:e5:50:50:40:a5:c6:93:b7:ee:
bd:77:cd:88:94:1b:51:b5:a8:3c:9a:3e:70:f0:9b:
35:54:89:b1:e9:ff:88:20:d3:fa:7a:dd:25:c4:26:
ae:67:ba:52:a3:03:13:0f:4b:18:33:29:d1:6c:34:
43:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7D:A4:DC:A9:91:CD:3D:E3:FD:1F:75:4D:CE:D6:9E:CB:9F:72:15
X509v3 Authority Key Identifier:
keyid:68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/Tn2k3KmRzT3j_R91Tc7WnsufchU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.122.0/24
Signature Algorithm: sha256WithRSAEncryption
43:e5:25:1f:01:65:db:56:9e:d6:fc:ee:55:ed:5d:eb:9e:51:
e0:73:6b:9d:94:35:61:cb:bc:62:25:c6:ac:fa:e8:cd:7f:53:
0e:ae:93:d6:dc:70:12:dd:1b:41:11:dc:6f:65:c9:4b:bf:84:
08:af:4b:62:7f:ab:e5:bc:f0:0c:da:f0:9c:00:bf:2d:89:7a:
ba:d3:1c:b9:3b:d5:1e:e4:93:32:00:d3:5e:09:6c:df:f7:28:
d8:ed:9b:8d:b4:e4:38:2f:98:bd:14:8f:7c:20:f9:4a:50:74:
f6:64:3e:19:e0:e9:84:e6:be:be:59:fe:ed:3c:3c:9d:60:d1:
62:87:2a:9f:75:f9:94:5b:6b:c1:27:ae:44:a1:2a:7a:4b:4f:
4a:33:61:79:e3:aa:0a:51:f1:80:4d:21:28:b1:53:57:79:6e:
be:66:94:f3:3b:39:7b:9b:59:e0:b8:77:18:a7:76:b1:5b:0d:
26:be:3c:e5:62:fa:af:09:d6:cf:2f:5c:70:74:fb:1b:48:ee:
7a:15:11:a1:e3:e9:15:90:fa:77:e3:b5:15:38:7b:ae:5f:8a:
a3:38:fe:b6:fa:57:f6:d9:64:69:93:c2:5e:85:c9:57:01:0b:
40:3b:22:34:cf:0d:d2:d5:4c:ed:99:cd:b6:12:1f:d3:9f:b6:
8c:e0:cf:bd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaF3cgzz4XOuUXNLzqftKaV2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZGRiZWY3ZjFjZGQ4YWQxMjcxNjBmMjBlYTBhM2Y2Yjcz
ZmE0YTIwHhcNMjYxMDI2MDkwMjA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTdkYTRkY2E5OTFjZDNkZTNmZDFmNzU0ZGNlZDY5ZWNiOWY3MjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlLyXNTSLIp2xOAbsy9GMCSg9RpZ
ZWc282Ms1c0weg51Pf5f/jUV/6Nw9Zne5GZZONYLEeJu6TZJQza1AHH8g0lmpj1H
aIrsbh8KAGoxtl2kOZRjyUY2GqJNf80I8BlVGD8Nc+mOlT8VOyqA7Vx5ZwRtp1aj
0AouRUpMRKkiNVfqYsnjpjcAxr3reEL3e0JV+ul/RDCW4tzcjYSIWuuPBac4Ms1y
FHb0aBdWFR/JljlpAfeRivs81cXqNc9adGc2hvWjf03Z5sLlUFBApcaTt+69d82I
lBtRtag8mj5w8Js1VImx6f+IINP6et0lxCauZ7pSowMTD0sYMynRbDRDoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE59pNypkc094/0fdU3O1p7Ln3IVMB8GA1UdIwQY
MBaAFGjdvvfxzditEnFg8g6go/a3P6SiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU4yLTlfSE4ySzBTY1dEeURxQ2o5cmNfcEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mMDMzZjEtMmY1ZC00NmQxLTkxOTQt
NjNmMzAxODg5NDg2LzEvVG4yazNLbVJ6VDNqX1I5MVRjN1duc3VmY2hVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9mMDMzZjEtMmY1ZC00NmQxLTkxOTQtNjNmMzAxODg5NDg2
LzEvYU4yLTlfSE4ySzBTY1dEeURxQ2o5cmNfcEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSp6MA0G
CSqGSIb3DQEBCwUAA4IBAQBD5SUfAWXbVp7W/O5V7V3rnlHgc2udlDVhy7xiJcas
+ujNf1MOrpPW3HAS3RtBEdxvZclLv4QIr0tif6vlvPAM2vCcAL8tiXq60xy5O9Ue
5JMyANNeCWzf9yjY7ZuNtOQ4L5i9FI98IPlKUHT2ZD4Z4OmE5r6+Wf7tPDydYNFi
hyqfdfmUW2vBJ65EoSp6S09KM2F546oKUfGATSEosVNXeW6+ZpTzOzl7m1nguHcY
p3axWw0mvjzlYvqvCdbPL1xwdPsbSO56FRGh4+kVkPp347UVOHuuX4qjOP62+lf2
2WRpk8JehclXAQtAOyI0zw3S1Uztmc22Eh/Tn7aM4M+9
-----END CERTIFICATE-----
Generated at Thu Oct 29 01:47:30 2026 by rpki-client