Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/T-PFeGmyyhQ8XBTwNPhdz4E3fE8.roa
File: T-PFeGmyyhQ8XBTwNPhdz4E3fE8.roa (raw, json)
Hash identifier: Sy6PAYsYBe4N3zAAG6zEuRbq6Y4x4KtVFLv4ZPYzud4=
Subject key identifier: 4F:E3:C5:78:69:B2:CA:14:3C:5C:14:F0:34:F8:5D:CF:81:37:7C:4F
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0398236CE258A27366CCFB680871B87A8
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/T-PFeGmyyhQ8XBTwNPhdz4E3fE8.roa
Signing time: Tue 25 Aug 2026 15:20:30 +0000
ROA not before: Tue 25 Aug 2026 15:20:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43260
IP address blocks: 185.254.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:36:ce:25:8a:27:36:6c:cf:b6:80:87:1b:87:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4fe3c57869b2ca143c5c14f034f85dcf81377c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d8:a0:f7:96:6b:75:5e:44:5e:74:dd:50:4e:
72:5a:f4:40:3c:d4:53:ac:64:00:0a:4d:53:02:03:
59:c6:63:87:99:6c:23:7d:84:43:88:e6:da:ed:02:
e1:a9:ed:1f:8c:0f:f2:9e:13:92:08:54:3c:67:dd:
76:5f:45:de:66:9d:e0:82:68:c4:a0:70:30:8b:96:
f1:47:ce:cc:7f:f9:cd:48:2f:3b:91:54:4b:20:0c:
fa:c9:de:c5:d0:23:08:0a:a2:84:38:d1:44:c8:67:
02:9e:64:c4:ca:d8:5e:da:f3:6c:f5:68:b0:59:37:
61:c0:a0:c8:7a:70:85:3e:e4:2e:f9:0f:61:71:53:
5a:2e:3e:6d:f9:18:95:f8:80:9b:da:bb:d3:d9:67:
9e:87:76:b3:e2:3b:82:f1:c4:e7:67:76:cb:77:ce:
e2:d8:46:fa:29:83:63:9c:47:a8:07:37:1d:47:1a:
90:51:70:5e:22:d7:35:0b:fc:60:07:ae:32:38:7e:
ac:ae:37:2d:12:a5:40:b8:26:80:c3:a2:8c:46:8c:
c3:f7:f9:fd:7c:cf:13:f7:0d:78:44:a2:d0:f4:d5:
c4:02:0e:4e:93:65:c3:8a:5a:34:9b:34:18:44:07:
47:39:80:2d:99:1a:6c:27:c6:1e:bd:1c:10:59:c6:
3c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E3:C5:78:69:B2:CA:14:3C:5C:14:F0:34:F8:5D:CF:81:37:7C:4F
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/T-PFeGmyyhQ8XBTwNPhdz4E3fE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.52.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:aa:bb:8b:57:1d:b8:04:d5:e4:a7:73:0f:27:15:bf:1d:26:
54:b8:10:9d:2d:03:0b:e4:ce:6a:b8:b3:63:be:36:1b:c6:ae:
9c:fd:46:3d:c8:13:36:b3:b1:dd:69:85:96:56:73:8a:fc:1b:
32:3e:da:3b:86:ad:e1:64:62:57:b6:37:bf:0b:0a:f5:24:7f:
f8:b0:07:58:df:e5:da:eb:5b:d2:36:03:d4:44:a7:97:f0:54:
f4:63:54:6d:04:7b:16:50:aa:24:f9:bf:f5:66:38:a5:75:b6:
04:db:3e:14:5c:e4:e0:72:12:9d:d4:ae:19:f2:db:c7:23:af:
44:8e:2e:b6:78:1f:fc:0d:c9:bc:05:b0:c8:ad:0e:2f:b4:8b:
8d:49:5c:e8:e0:cc:0b:10:8e:7f:77:ec:94:6b:39:b9:e9:b8:
4b:78:6b:61:5a:e5:7b:c3:6f:42:da:d7:d5:66:a0:64:33:89:
0b:00:fa:6f:46:e3:d5:e8:d2:90:6e:88:ff:10:50:03:de:25:
fc:45:04:56:6f:5a:d3:d7:78:1b:0b:4a:1d:d4:cf:0a:e0:55:
15:18:bf:4c:a5:98:ed:74:4c:ad:a7:cb:e7:ab:fa:12:2d:9c:
2b:ea:9f:0c:1e:bf:4d:97:08:9d:d9:df:e3:65:35:8c:0a:f8:
03:71:ff:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:48 2026 by rpki-client