Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/TpFB-5Q-QkjIOBF_izD4qypxjjo.roa
File: TpFB-5Q-QkjIOBF_izD4qypxjjo.roa (raw, json)
Hash identifier: OE7lv2q/Oxt9lCGWZPVDsnAwgqtJQLztg0liIRJLGAA=
Subject key identifier: 4E:91:41:FB:94:3E:42:48:C8:38:11:7F:8B:30:F8:AB:2A:71:8E:3A
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01A0EF1C3AF80994D32173AA08ECEF2253BC
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/TpFB-5Q-QkjIOBF_izD4qypxjjo.roa
Signing time: Tue 29 Sep 2026 21:39:59 +0000
ROA not before: Tue 29 Sep 2026 21:39:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199144
IP address blocks: 45.129.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:1c:3a:f8:09:94:d3:21:73:aa:08:ec:ef:22:53:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Sep 29 21:39:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e9141fb943e4248c838117f8b30f8ab2a718e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:19:12:f8:3c:cd:a5:a7:c1:71:59:bb:6a:57:
c0:27:f7:05:47:cb:d3:bb:4b:45:03:f4:7c:2f:fe:
93:e3:6b:c5:8c:6e:23:d3:b0:06:f7:93:aa:41:ca:
ae:b9:90:18:e1:16:59:da:04:8c:f8:36:15:dd:ea:
7c:16:b4:fa:e9:29:19:66:01:1b:fd:bf:1a:0e:b8:
ba:49:6b:f0:1b:8a:3e:c2:43:ff:0f:23:00:8d:c0:
84:d0:60:e2:de:77:0f:f2:5a:33:9f:33:7c:ce:94:
a7:59:6b:78:56:c4:2f:b4:23:d2:42:46:cf:ea:3c:
bf:ca:a7:ee:c5:0f:c7:27:61:3d:eb:41:6d:b0:21:
2b:12:c2:e0:94:5e:28:07:7f:c5:c2:6f:a2:2d:6f:
5c:53:ea:39:32:7b:a8:75:28:0b:9e:e9:0a:eb:8f:
0a:f4:11:94:d2:b8:46:26:da:98:e6:4b:cb:a3:5b:
6d:55:bf:91:e7:1f:fc:36:00:c5:3b:70:38:2c:96:
80:90:2e:de:4c:d8:a8:18:33:b8:71:06:1d:89:e8:
69:89:11:e3:d5:cf:ed:94:ad:f0:21:92:63:af:2c:
58:b3:f9:14:c2:1a:85:56:96:75:cb:eb:09:56:30:
b1:f3:86:e9:0f:77:9f:fc:33:5f:fc:b0:c3:ab:48:
9f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:91:41:FB:94:3E:42:48:C8:38:11:7F:8B:30:F8:AB:2A:71:8E:3A
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/TpFB-5Q-QkjIOBF_izD4qypxjjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.197.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:e5:47:bb:f0:59:e4:e8:4b:3e:ba:b7:c5:37:db:d2:8e:92:
40:07:f4:14:f1:2e:35:38:f1:f2:8a:c5:73:1d:e1:80:ff:00:
37:74:b5:2f:9b:65:d9:98:c7:2f:09:77:4b:a0:c1:4f:22:ba:
fe:a2:67:3c:ac:32:09:2b:9e:f1:76:1d:b0:b1:8f:38:2d:cb:
10:ad:18:7b:75:13:a4:c4:89:6d:27:34:11:c5:85:e7:40:87:
d5:95:d7:1a:36:04:b1:27:94:41:dc:24:dc:35:53:5f:d4:20:
f8:c1:55:b3:25:6f:36:37:bb:3e:a1:fa:e0:61:bf:b6:2b:21:
a2:7e:97:10:7b:2c:49:ff:da:87:55:53:b8:12:b6:72:b1:cf:
7f:c2:68:be:1b:36:97:05:d1:88:ef:df:43:76:c2:53:b2:cf:
6e:f8:25:36:ed:4c:6f:ec:a3:d8:ed:2d:20:47:b7:e0:ef:0d:
30:38:37:ff:15:2c:8c:dd:e4:0c:51:75:70:2a:41:fe:c3:d3:
03:62:19:90:a6:1a:b6:c6:dc:60:20:19:c0:b1:6b:29:af:38:
1f:7e:f0:6f:59:36:b9:9a:dc:1f:d5:68:a5:87:b3:07:19:f8:
00:d4:e0:12:df:ed:cd:d8:3e:4d:f8:12:a3:96:ef:f5:53:11:
30:70:5b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:32:58 2026 by rpki-client