Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/tiNCgDK7O_a6zBhxuIZW_VUPW-I.roa
File: tiNCgDK7O_a6zBhxuIZW_VUPW-I.roa (raw, json)
Hash identifier: vZgCBfItkUqHjy0E7kRGc/kDjB0NFrUb1rqezkZb7rI=
Subject key identifier: B6:23:42:80:32:BB:3B:F6:BA:CC:18:71:B8:86:56:FD:55:0F:5B:E2
Certificate issuer: /CN=b1267a51acb66f2991bea5243fe388068971a1f1
Certificate serial: 01A163797901C218A9FF31834B47584C208F
Authority key identifier: B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/tiNCgDK7O_a6zBhxuIZW_VUPW-I.roa
Signing time: Thu 22 Oct 2026 11:57:47 +0000
ROA not before: Thu 22 Oct 2026 11:57:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60476
IP address blocks: 5.181.61.0/24 maxlen: 24
91.231.132.0/24 maxlen: 24
91.231.133.0/24 maxlen: 24
91.231.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:79:79:01:c2:18:a9:ff:31:83:4b:47:58:4c:20:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1267a51acb66f2991bea5243fe388068971a1f1
Validity
Not Before: Oct 22 11:57:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b623428032bb3bf6bacc1871b88656fd550f5be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:28:5a:8d:16:35:07:3d:9e:af:af:ef:b6:97:
ce:b3:a0:10:42:8c:0b:3d:34:be:7b:61:79:79:df:
25:7e:64:c7:81:1f:2d:cc:f8:09:4e:7c:93:5c:6d:
c3:2d:c5:c6:be:43:f7:ee:88:59:3f:5f:89:29:b6:
43:b7:5b:11:ba:e1:eb:77:b9:db:de:24:16:de:9a:
12:ae:9e:fb:68:b9:3d:ac:44:7d:18:5b:1b:2d:21:
19:ff:59:de:a8:0e:d1:76:73:0f:6b:58:87:1b:e4:
6c:e7:9b:12:16:b8:04:4e:74:8e:3c:20:06:0f:e3:
a1:85:d8:42:a9:47:3c:99:16:87:3a:ed:be:ac:49:
a1:84:44:3f:41:1b:57:f7:3a:7c:97:83:a8:03:69:
3a:11:52:cc:0a:b2:63:e7:4f:9c:1a:6b:43:7e:f6:
ea:60:37:85:b6:b3:07:2e:59:76:19:8e:31:f7:1e:
74:1f:ca:98:72:6a:1f:10:2e:3d:a6:e2:5d:ff:f3:
eb:82:cc:94:4c:37:3e:74:49:86:52:f5:6b:27:31:
90:21:54:ca:a3:d7:b7:d1:9e:fa:44:85:d9:f9:fd:
9a:7f:a7:1e:a8:9b:29:66:1a:93:34:c0:c4:e2:69:
98:ba:57:38:5a:9d:bc:a7:99:d8:61:2a:05:ac:f5:
95:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:23:42:80:32:BB:3B:F6:BA:CC:18:71:B8:86:56:FD:55:0F:5B:E2
X509v3 Authority Key Identifier:
keyid:B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/tiNCgDK7O_a6zBhxuIZW_VUPW-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.61.0/24
91.231.132.0-91.231.134.255
Signature Algorithm: sha256WithRSAEncryption
6a:6a:92:31:b1:30:87:e1:a0:29:27:e1:53:3e:6f:da:ba:b4:
2b:a0:f5:03:22:14:73:c7:2a:25:ff:10:a7:94:50:91:dc:2e:
2e:ed:7a:54:80:bc:fe:f1:5b:4b:03:94:fd:58:3e:05:16:e2:
bf:54:f9:da:53:f2:7e:09:e3:df:4b:80:01:e8:70:5f:27:d7:
21:5f:ce:cf:8c:c4:88:c8:c0:64:05:84:f4:2e:98:a8:bc:b3:
4b:29:22:99:64:41:f6:42:eb:13:b9:6e:bb:e6:04:62:18:ce:
20:bc:f5:b4:31:66:9a:b6:11:5e:b8:b3:a6:c8:04:ee:8b:c4:
56:4b:d6:52:10:86:bc:da:f3:92:38:6f:96:cf:27:e3:e1:42:
65:88:52:35:9b:b1:a1:2e:72:1d:56:7d:42:dd:6a:e6:d7:b4:
ae:68:c3:fa:12:86:03:eb:d5:8d:93:eb:27:7d:fa:54:84:2c:
6b:59:2c:77:9e:db:75:eb:d0:4f:e9:db:00:9b:3b:c1:62:1c:
15:cf:db:65:8a:88:67:ee:68:75:d0:56:d4:1d:9c:30:25:97:
1c:4c:b5:a6:63:9c:f5:3d:38:82:33:dc:2a:93:ec:e4:42:67:
41:90:23:ab:04:c5:08:e0:9a:32:c2:8b:be:32:7b:c5:6f:14:
96:84:e2:85
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 26 09:51:34 2026 by rpki-client