Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/TmHvj_dsGVkL473LNejONC64O8M.roa
File: TmHvj_dsGVkL473LNejONC64O8M.roa (raw, json)
Hash identifier: 2jMHUTiMMAXCG6yUTPvrfS0S6m8B24l3eGD9oMb6Vjs=
Subject key identifier: 4E:61:EF:8F:F7:6C:19:59:0B:E3:BD:CB:35:E8:CE:34:2E:B8:3B:C3
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039824FDB7AD60366466DF9D8A9F20A83
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/TmHvj_dsGVkL473LNejONC64O8M.roa
Signing time: Tue 25 Aug 2026 15:20:36 +0000
ROA not before: Tue 25 Aug 2026 15:20:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210529
IP address blocks: 5.133.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:4f:db:7a:d6:03:66:46:6d:f9:d8:a9:f2:0a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e61ef8ff76c19590be3bdcb35e8ce342eb83bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9e:6b:90:00:3f:56:12:c3:b0:7b:1d:09:ff:
4a:5e:85:17:c5:d9:bc:61:27:e4:45:5a:d1:9d:4a:
68:4c:41:d1:38:35:3a:0c:77:ab:34:34:d3:2a:98:
b1:7b:a9:e7:ca:18:48:2d:35:e7:b7:a5:59:cc:91:
65:aa:9e:a0:b2:c3:6c:b0:1d:37:75:95:68:4b:f9:
61:00:d4:64:70:9a:38:26:c1:42:11:74:39:71:23:
82:bf:ad:57:a0:ad:11:e0:45:ed:f3:8c:07:41:ef:
aa:8f:33:a2:62:6c:2c:4f:33:4a:6e:17:ef:fe:39:
c1:e4:c8:cf:e8:f1:9c:dd:28:e1:88:b9:48:d1:17:
5e:67:41:fd:13:e9:de:f5:5d:94:71:ac:da:5c:81:
fb:81:2d:40:9f:30:16:f0:d0:2f:f8:f9:1c:3f:02:
10:7f:aa:05:65:0b:93:24:5b:19:b7:b3:fb:34:39:
a2:16:c3:1b:dc:da:7d:50:ba:c1:fa:64:c5:b0:6b:
9a:60:8d:36:12:d3:02:e9:69:83:c0:4f:85:2c:cf:
54:b8:e8:3f:68:8e:bd:79:03:31:23:63:42:91:2c:
01:52:a7:3e:be:db:37:b6:86:fd:90:4e:0e:1c:df:
10:8a:2c:ce:34:50:59:5b:93:b3:89:be:ea:8a:fa:
0e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:61:EF:8F:F7:6C:19:59:0B:E3:BD:CB:35:E8:CE:34:2E:B8:3B:C3
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/TmHvj_dsGVkL473LNejONC64O8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.103.0/24
Signature Algorithm: sha256WithRSAEncryption
18:d9:d7:53:23:db:8d:ed:34:e3:53:3f:af:f6:73:7e:21:13:
df:45:80:49:7a:cf:df:cd:70:a6:b2:70:4a:e9:fd:1a:c5:5c:
1d:d2:4b:81:30:05:72:8e:41:6f:76:43:5c:4d:02:7c:99:ca:
1b:15:38:1f:19:f8:e4:ed:c7:b2:2f:9f:90:d4:83:9c:01:82:
58:91:29:a4:92:bd:88:2e:16:88:4e:dd:c9:04:aa:da:d8:7e:
f5:27:ea:c2:5c:1d:bb:4b:3e:bb:9b:f2:3d:10:a8:24:c7:20:
f4:97:66:bc:f4:25:38:d3:44:df:af:24:df:73:81:a6:61:f8:
e3:d8:c9:a1:de:54:c7:13:c0:ed:f6:15:67:cd:52:c8:08:89:
1e:2f:50:b7:7d:7b:49:b5:5d:d6:06:bc:70:18:0c:95:5c:72:
5c:45:ce:48:3f:02:ed:28:26:bb:5e:b2:75:83:46:eb:42:db:
19:76:c5:5c:6a:0f:6d:ea:46:ef:c3:f1:84:55:43:ef:3f:3a:
db:77:88:64:12:92:5f:96:57:e4:08:10:2d:62:50:6b:92:14:
34:30:6c:be:32:bc:46:5d:09:5d:46:78:73:9e:42:31:78:4e:
ef:5d:2d:da:af:6a:68:66:be:7c:e0:5b:0d:9d:68:df:21:8b:
cf:7c:52:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:31 2026 by rpki-client