Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/TVjaHEY_ThKamYiEwbZZVdBorjc.roa
File: TVjaHEY_ThKamYiEwbZZVdBorjc.roa (raw, json)
Hash identifier: JfMvTmd23byC9zd/RaIIbSYpLKx0GiOI3+FePfWhGp0=
Subject key identifier: 4D:58:DA:1C:46:3F:4E:12:9A:99:88:84:C1:B6:59:55:D0:68:AE:37
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01A05DBA69D39ACCAA0663253934DFC21CF9
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/TVjaHEY_ThKamYiEwbZZVdBorjc.roa
Signing time: Tue 01 Sep 2026 16:08:12 +0000
ROA not before: Tue 01 Sep 2026 16:08:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 274997
IP address blocks: 153.51.212.0/23 maxlen: 23
153.51.212.0/24 maxlen: 24
153.51.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:ba:69:d3:9a:cc:aa:06:63:25:39:34:df:c2:1c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Sep 1 16:08:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d58da1c463f4e129a998884c1b65955d068ae37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:25:12:3a:84:23:fd:44:b3:b2:4e:49:8e:fe:
ca:75:46:f7:ac:78:d2:45:1e:9c:db:b1:4f:58:88:
d9:0d:af:f7:c2:57:ec:57:5c:67:b2:83:c8:88:de:
72:d3:7c:2a:e4:46:78:bf:bf:1d:3c:f5:91:89:2a:
7c:72:df:cf:04:a9:ca:74:12:21:92:aa:97:c6:4c:
c6:cb:11:17:74:7b:50:d2:20:c2:76:2f:bb:c5:74:
31:26:8c:b2:5a:56:90:a7:4e:d0:7f:a9:15:b2:21:
b2:3e:66:e6:bc:f2:cc:d6:bd:89:6d:3d:5f:83:28:
bf:66:5f:81:28:93:ca:c0:7b:fe:32:ca:58:b1:cf:
c6:a9:bb:55:23:ba:ce:bb:82:89:cd:4b:0b:e4:c9:
94:26:7f:d8:db:1d:3d:af:df:2a:3a:e9:73:d8:8d:
47:4f:9a:61:30:a1:19:ef:58:bd:6d:0b:33:c8:5d:
5a:cd:56:a2:4d:10:55:d7:2f:6f:2a:c6:7b:fc:a8:
e6:42:51:5e:88:bf:24:cd:e9:23:b6:45:ab:f8:e5:
fc:4d:d5:58:11:71:e1:9e:02:f7:24:d2:4c:c5:95:
fa:1a:9b:01:51:18:fc:e9:05:c6:61:9b:b8:09:bb:
75:f4:be:cb:4d:e5:de:07:89:ce:6a:b4:d1:bd:27:
3d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:58:DA:1C:46:3F:4E:12:9A:99:88:84:C1:B6:59:55:D0:68:AE:37
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/TVjaHEY_ThKamYiEwbZZVdBorjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.51.212.0/23
Signature Algorithm: sha256WithRSAEncryption
62:ab:d6:59:00:0c:02:e7:9e:89:61:85:61:dd:f0:60:5f:58:
81:d3:b6:b9:96:13:88:39:d9:86:6f:97:3e:7f:0e:7c:c9:48:
b2:38:1f:a4:b9:11:de:5c:66:67:c4:2d:8f:fd:2d:28:49:21:
fc:61:23:57:77:5a:1f:70:3e:26:fa:7d:7b:71:88:95:f0:f5:
85:17:3c:fe:90:15:f3:94:53:a0:26:c6:bf:b9:b9:54:b1:e4:
42:2a:9f:8f:ac:01:24:98:33:a0:4f:2b:3a:e7:dd:cc:11:db:
d0:46:b0:27:4b:66:33:70:42:99:4b:ec:ba:94:ef:93:53:24:
f7:40:68:aa:19:50:dc:ac:f6:7e:da:c9:c9:84:a0:99:52:9c:
25:6a:97:00:26:23:cc:4c:80:1e:01:60:43:ef:7a:e5:0b:82:
8e:14:09:11:60:0d:8f:34:03:c2:8a:af:85:2c:04:ba:87:50:
68:cc:f8:52:60:46:f1:55:c9:a8:10:4a:aa:d7:c8:4a:e5:ff:
de:f3:ab:4e:87:b4:35:7e:0b:03:cc:cd:e7:bc:aa:1f:f4:92:
c4:c0:82:e2:d4:78:d2:ea:93:4f:08:09:29:c3:06:31:74:f8:
7b:9e:9e:b5:2b:14:71:06:33:88:e6:72:07:1a:e6:8b:00:e4:
d7:ef:d9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 14:27:23 2026 by rpki-client