Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/TOpSp8N8inyCCRSUbFq7bgDiwZI.roa
File: TOpSp8N8inyCCRSUbFq7bgDiwZI.roa (raw, json)
Hash identifier: FJio1I2qAIA9DwKgU1NmquliJzX0e/Kc95cX9EOp7Z4=
Subject key identifier: 4C:EA:52:A7:C3:7C:8A:7C:82:09:14:94:6C:5A:BB:6E:00:E2:C1:92
Certificate issuer: /CN=13dad24b6647eb2cfa873989c6d66d174eb4b586
Certificate serial: 019FCBAC02133A66FE1FFED12CDBD8AE2502
Authority key identifier: 13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/TOpSp8N8inyCCRSUbFq7bgDiwZI.roa
Signing time: Tue 04 Aug 2026 07:27:55 +0000
ROA not before: Tue 04 Aug 2026 07:27:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21859
IP address blocks: 152.175.144.0/20 maxlen: 24
152.175.214.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 14:34:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:ac:02:13:3a:66:fe:1f:fe:d1:2c:db:d8:ae:25:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13dad24b6647eb2cfa873989c6d66d174eb4b586
Validity
Not Before: Aug 4 07:27:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4cea52a7c37c8a7c820914946c5abb6e00e2c192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a0:5e:d5:3b:07:cd:c1:5e:7c:46:b2:e6:74:
c9:d0:98:6d:d6:96:91:08:26:22:a0:6c:ea:5c:4e:
e0:39:ea:da:f5:e8:cd:73:06:66:53:30:28:7b:3e:
7a:ec:03:06:e4:c0:74:9c:0b:b7:e3:8d:07:4f:1d:
71:77:6a:46:97:56:72:79:31:db:a8:16:db:a4:4b:
ca:28:a6:40:bc:38:b6:7c:35:7d:1e:b2:be:e6:c6:
95:8d:1c:c0:66:ea:b7:52:3d:29:c4:d4:3b:b6:73:
eb:8b:22:0a:1d:1a:07:8d:87:75:c8:2d:09:07:cf:
c5:46:9a:f1:9a:f3:97:7f:b1:1c:fa:66:df:6b:21:
f7:a8:3b:68:df:a5:da:7f:c9:22:72:40:40:cc:9e:
00:a3:d6:6f:91:d9:4f:87:c0:75:72:2e:98:27:25:
98:0c:f6:4e:2a:5f:4f:57:1f:03:d6:fd:93:c1:17:
2c:ac:7a:db:4c:7a:b8:f1:2e:34:9d:23:d2:a9:b0:
38:bf:c9:dc:b9:9b:36:cc:7d:95:59:68:13:db:6c:
e6:da:71:5f:7b:50:56:58:fa:ff:31:9a:06:07:44:
ac:bd:c2:40:02:12:c3:c6:f8:53:56:9c:f3:35:55:
4c:58:a3:17:3f:52:45:f4:c6:a1:58:3c:fb:ce:17:
95:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:EA:52:A7:C3:7C:8A:7C:82:09:14:94:6C:5A:BB:6E:00:E2:C1:92
X509v3 Authority Key Identifier:
keyid:13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/TOpSp8N8inyCCRSUbFq7bgDiwZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.175.144.0/20
152.175.214.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:0b:e2:fa:7c:0c:09:9d:05:c2:71:3e:08:3b:9e:b5:4e:e1:
17:0d:b5:97:0f:47:dd:84:fa:34:a4:22:cd:14:71:39:91:f7:
89:cb:33:b8:cf:c2:b1:ff:b0:7d:f9:ac:ee:da:33:2e:31:f6:
b9:c4:39:e3:f1:5b:0e:8b:54:a5:f8:65:45:d1:02:10:3f:ec:
67:ce:42:84:0a:a6:a5:31:99:63:77:bd:3b:5b:50:23:ac:fd:
36:17:65:8a:13:dd:e6:8e:6e:9a:26:d7:59:4a:3f:00:26:46:
13:08:6c:1b:68:82:c1:6d:51:bb:20:2c:79:c6:73:39:23:1b:
05:6a:33:b2:42:09:f6:b7:97:e3:8a:bf:a2:7c:53:d1:85:8c:
4d:18:6d:75:3a:39:cd:aa:4a:e1:09:d4:3e:a0:d6:c5:2f:ea:
86:9c:8d:28:d0:5a:f7:2a:58:ff:24:17:0f:ce:a9:43:51:64:
b8:37:db:80:18:8b:5f:b5:98:e7:af:6a:47:98:f6:00:15:33:
37:cf:d1:af:b6:d6:71:29:76:fa:76:a7:a4:11:de:da:4f:74:
1b:26:6d:a3:14:f3:25:d5:69:91:ef:1b:ac:53:ba:c1:8d:70:
69:4a:3b:ed:d8:ac:ef:24:57:89:3b:21:50:78:ce:12:0f:bb:
12:9b:04:8f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ/LrAITOmb+H/7RLNvYriUCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZGFkMjRiNjY0N2ViMmNmYTg3Mzk4OWM2ZDY2ZDE3NGVi
NGI1ODYwHhcNMjYwODA0MDcyNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2VhNTJhN2MzN2M4YTdjODIwOTE0OTQ2YzVhYmI2ZTAwZTJjMTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaBe1TsHzcFefEay5nTJ0Jht1paR
CCYioGzqXE7gOera9ejNcwZmUzAoez567AMG5MB0nAu3440HTx1xd2pGl1ZyeTHb
qBbbpEvKKKZAvDi2fDV9HrK+5saVjRzAZuq3Uj0pxNQ7tnPriyIKHRoHjYd1yC0J
B8/FRprxmvOXf7Ec+mbfayH3qDto36Xaf8kickBAzJ4Ao9ZvkdlPh8B1ci6YJyWY
DPZOKl9PVx8D1v2TwRcsrHrbTHq48S40nSPSqbA4v8ncuZs2zH2VWWgT22zm2nFf
e1BWWPr/MZoGB0SsvcJAAhLDxvhTVpzzNVVMWKMXP1JF9MahWDz7zheVEwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEzqUqfDfIp8ggkUlGxau24A4sGSMB8GA1UdIwQY
MBaAFBPa0ktmR+ss+oc5icbWbRdOtLWGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTlyU1MyWkg2eXo2aHptSnh0WnRGMDYwdFlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9mYjUyZDEtMmU3MS00YWMwLWEzYTMt
MWFhNmZlNDA2YTU4LzEvVE9wU3A4TjhpbnlDQ1JTVWJGcTdiZ0Rpd1pJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9mYjUyZDEtMmU3MS00YWMwLWEzYTMtMWFhNmZlNDA2YTU4
LzEvRTlyU1MyWkg2eXo2aHptSnh0WnRGMDYwdFlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEmK+QAwQB
mK/WMA0GCSqGSIb3DQEBCwUAA4IBAQC1C+L6fAwJnQXCcT4IO561TuEXDbWXD0fd
hPo0pCLNFHE5kfeJyzO4z8Kx/7B9+azu2jMuMfa5xDnj8VsOi1Sl+GVF0QIQP+xn
zkKECqalMZljd707W1AjrP02F2WKE93mjm6aJtdZSj8AJkYTCGwbaILBbVG7ICx5
xnM5IxsFajOyQgn2t5fjir+ifFPRhYxNGG11OjnNqkrhCdQ+oNbFL+qGnI0o0Fr3
Klj/JBcPzqlDUWS4N9uAGItftZjnr2pHmPYAFTM3z9GvttZxKXb6dqekEd7aT3Qb
Jm2jFPMl1WmR7xusU7rBjXBpSjvt2KzvJFeJOyFQeM4SD7sSmwSP
-----END CERTIFICATE-----
Generated at Sat Aug 22 22:34:40 2026 by rpki-client