Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/TRoTSyHKXXelAmIqPzc2lsxZK2U.roa
File: TRoTSyHKXXelAmIqPzc2lsxZK2U.roa (raw, json)
Hash identifier: 7Cfsq98nLDZeDO6PJiMmxdQbsAXkC3e9yaQmSUF/wLE=
Subject key identifier: 4D:1A:13:4B:21:CA:5D:77:A5:02:62:2A:3F:37:36:96:CC:59:2B:65
Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial: 019CDEA8339B9B91666C3141E604FCDCD845
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/TRoTSyHKXXelAmIqPzc2lsxZK2U.roa
Signing time: Wed 11 Mar 2026 20:48:11 +0000
ROA not before: Wed 11 Mar 2026 20:48:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200367
IP address blocks: 185.36.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 23:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:de:a8:33:9b:9b:91:66:6c:31:41:e6:04:fc:dc:d8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
Validity
Not Before: Mar 11 20:48:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d1a134b21ca5d77a502622a3f373696cc592b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f8:27:82:a9:f6:ae:38:8c:13:59:3e:20:f5:
b7:31:8a:f5:66:a1:5b:cc:d8:ef:77:fc:70:b7:de:
3d:cb:af:81:10:0e:d9:60:5c:13:a4:44:78:78:af:
26:8e:f0:b7:f6:43:a9:98:8d:74:6d:66:59:47:2d:
8f:28:be:a3:94:75:5f:d8:82:67:31:09:d6:24:c6:
bd:a6:5e:ae:97:9a:b1:42:41:83:29:fd:17:fc:68:
f0:2a:ef:e9:da:d3:95:bd:09:c2:ae:c1:00:16:8c:
85:d9:df:14:39:22:e7:c0:db:52:e8:df:4d:da:6b:
88:01:a2:3e:d9:8b:d9:89:a4:f8:73:1e:e7:a0:27:
17:a8:11:54:db:df:94:be:3d:3c:2a:13:38:7b:22:
2e:45:15:aa:5d:2e:b2:b1:39:60:5a:d9:8d:89:52:
56:07:93:25:76:55:9c:b2:4d:f0:83:48:ae:15:a2:
bd:22:7e:0e:c8:d7:6d:d4:f8:7e:57:64:ab:da:62:
74:42:d3:a7:b9:4d:46:ee:dd:96:92:05:17:ab:65:
6e:0c:5b:bf:33:50:ef:1b:62:fa:5f:cb:03:cb:ce:
d0:a1:07:3d:c7:db:35:96:35:85:c8:7a:af:17:72:
82:20:c4:a9:64:ee:03:f9:bf:f1:fd:93:e4:7e:a3:
ad:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:1A:13:4B:21:CA:5D:77:A5:02:62:2A:3F:37:36:96:CC:59:2B:65
X509v3 Authority Key Identifier:
keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/TRoTSyHKXXelAmIqPzc2lsxZK2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.126.0/24
Signature Algorithm: sha256WithRSAEncryption
55:c1:7a:5c:df:b2:8d:00:e7:7c:28:cf:b1:70:47:1c:64:be:
e4:59:44:3b:72:ee:8b:89:df:df:10:b2:c3:0d:a9:0e:a8:47:
f8:1d:b9:05:b8:1b:39:68:5b:27:3e:f0:f0:35:78:4c:3c:0d:
41:c9:99:c6:1c:18:3f:ac:e2:2d:7d:cc:ff:02:9c:e9:b2:d0:
d3:a4:d7:ff:44:42:d8:dd:d7:6e:92:cf:29:ca:2a:f1:28:60:
92:03:50:12:89:f1:1f:15:86:0a:08:c6:81:18:85:9b:a9:27:
f6:85:2e:52:1b:e8:f3:ce:d9:0d:c1:1f:78:c5:84:a6:99:3b:
61:a1:0e:45:c7:00:e9:36:02:66:07:61:2c:e5:dc:f0:1c:6e:
61:96:13:81:2f:f4:73:f2:b0:88:b3:c2:62:a5:8b:06:ed:ad:
0e:3a:5d:5a:ed:34:76:9e:e3:df:4b:bf:22:85:1b:6b:b1:a2:
ad:23:7e:f9:e8:8e:f5:c3:70:9f:30:f7:44:bc:6b:48:ad:ea:
c1:24:96:8d:22:87:23:fb:8d:9c:95:ab:2c:df:0e:ae:33:d5:
b4:0d:dd:30:26:01:d9:fb:d7:52:bd:d6:5f:77:76:03:ad:3f:
00:67:e6:e3:17:cf:ad:68:3c:a6:b3:e7:84:e3:a5:59:63:38:
3b:05:af:ae
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZzeqDObm5FmbDFB5gT83NhFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTZjMTRjZDg3MjRmOWE5MDk2MjdiOTRlMDA2Y2Y2OWQx
MjMwN2IwHhcNMjYwMzExMjA0ODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDFhMTM0YjIxY2E1ZDc3YTUwMjYyMmEzZjM3MzY5NmNjNTkyYjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfgngqn2rjiME1k+IPW3MYr1ZqFb
zNjvd/xwt949y6+BEA7ZYFwTpER4eK8mjvC39kOpmI10bWZZRy2PKL6jlHVf2IJn
MQnWJMa9pl6ul5qxQkGDKf0X/GjwKu/p2tOVvQnCrsEAFoyF2d8UOSLnwNtS6N9N
2muIAaI+2YvZiaT4cx7noCcXqBFU29+Uvj08KhM4eyIuRRWqXS6ysTlgWtmNiVJW
B5MldlWcsk3wg0iuFaK9In4OyNdt1Ph+V2Sr2mJ0QtOnuU1G7t2WkgUXq2VuDFu/
M1DvG2L6X8sDy87QoQc9x9s1ljWFyHqvF3KCIMSpZO4D+b/x/ZPkfqOtrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE0aE0shyl13pQJiKj83NpbMWStlMB8GA1UdIwQY
MBaAFERWwUzYck+akJYnuU4AbPadEjB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYt
NWI4NzgyNWMwN2VlLzEvVFJvVFN5SEtYWGVsQW1JcVB6YzJsc3haSzJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYtNWI4NzgyNWMwN2Vl
LzEvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSR+MA0G
CSqGSIb3DQEBCwUAA4IBAQBVwXpc37KNAOd8KM+xcEccZL7kWUQ7cu6Lid/fELLD
DakOqEf4HbkFuBs5aFsnPvDwNXhMPA1ByZnGHBg/rOItfcz/ApzpstDTpNf/RELY
3dduks8pyirxKGCSA1ASifEfFYYKCMaBGIWbqSf2hS5SG+jzztkNwR94xYSmmTth
oQ5FxwDpNgJmB2Es5dzwHG5hlhOBL/Rz8rCIs8JipYsG7a0OOl1a7TR2nuPfS78i
hRtrsaKtI3756I71w3CfMPdEvGtIrerBJJaNIocj+42class3w6uM9W0Dd0wJgHZ
+9dSvdZfd3YDrT8AZ+bjF8+taDyms+eE46VZYzg7Ba+u
-----END CERTIFICATE-----
Generated at Mon Mar 16 03:53:23 2026 by rpki-client