Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/TbkdDbUqBp9gUVMmA7EOu89_3Uc.roa
File: TbkdDbUqBp9gUVMmA7EOu89_3Uc.roa (raw, json)
Hash identifier: LvtCwiSgCnn6r8P4XA2+zpyeRQdDCd4zCmE86m3gSlM=
Subject key identifier: 4D:B9:1D:0D:B5:2A:06:9F:60:51:53:26:03:B1:0E:BB:CF:7F:DD:47
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 01A0441EE27A6F1DC2C12A5B554C8574524D
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/TbkdDbUqBp9gUVMmA7EOu89_3Uc.roa
Signing time: Thu 27 Aug 2026 16:47:49 +0000
ROA not before: Thu 27 Aug 2026 16:47:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199595
IP address blocks: 153.79.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 13:19:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:44:1e:e2:7a:6f:1d:c2:c1:2a:5b:55:4c:85:74:52:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Aug 27 16:47:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4db91d0db52a069f6051532603b10ebbcf7fdd47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f0:66:ed:ea:de:41:0e:7f:b6:b9:e0:13:3d:
74:56:bf:77:a1:6b:5b:bf:82:64:dc:cd:e2:07:1a:
ff:f1:44:9e:bb:cd:5a:c9:c0:56:33:fd:e2:55:1d:
6b:46:4a:51:03:8b:a2:cc:8a:96:ba:dc:b8:85:58:
e6:a6:99:f4:b8:83:2c:ad:45:80:45:7d:4a:93:d6:
02:0f:cb:4a:6f:69:88:d8:27:3b:30:72:a4:64:64:
02:42:91:2f:15:1d:9b:69:e3:57:61:7e:47:fc:ea:
69:09:fe:7f:38:82:4f:d6:45:59:1d:d3:c0:9c:24:
9b:ec:6c:fc:3f:92:cd:5c:aa:21:e6:9a:38:d3:26:
93:3d:eb:5d:3c:58:64:46:4a:f6:24:94:8f:59:7e:
d8:d6:c9:20:f5:68:19:21:9f:de:99:99:aa:0f:50:
8c:79:f8:44:55:90:0c:7f:6e:5c:6f:ab:f1:75:79:
97:8a:98:6c:aa:bd:bd:b0:fd:3f:2d:64:8d:52:69:
ef:c4:2f:a6:db:84:cd:22:01:95:1d:75:c5:63:b8:
b5:a3:49:c5:26:29:2e:07:61:e9:cf:56:bb:1b:fa:
1f:a4:a4:48:4d:eb:0d:62:28:51:ee:a8:d0:72:5d:
17:59:0f:27:8b:15:85:10:fd:cc:81:be:6f:7c:6d:
1c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B9:1D:0D:B5:2A:06:9F:60:51:53:26:03:B1:0E:BB:CF:7F:DD:47
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/TbkdDbUqBp9gUVMmA7EOu89_3Uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.79.175.0/24
Signature Algorithm: sha256WithRSAEncryption
69:0f:69:ce:01:b4:8e:7a:d3:2d:9a:9b:3a:16:3c:62:31:8e:
f0:16:bf:b0:fb:97:63:ea:65:56:80:0d:a1:13:c9:8a:5e:e6:
16:df:c1:02:a5:5d:15:1e:c3:10:a6:24:6e:a6:65:be:75:26:
8b:f8:c5:ed:ee:c3:d1:74:a1:26:17:08:b2:b4:2b:74:bd:04:
0e:30:e6:e5:b0:8a:4f:35:30:1d:ee:0a:3c:c1:43:4e:b9:51:
a0:e2:04:1f:a4:55:54:d1:a8:54:0d:27:12:98:ea:c1:f1:56:
9b:c1:ac:3e:b8:cc:29:82:1f:07:43:2f:94:a2:db:31:4a:d6:
38:a2:2d:06:ba:f8:7e:74:22:ef:8b:bf:a8:8f:47:47:6d:de:
36:1a:95:77:ff:b4:20:b1:6e:63:43:1d:f4:58:94:1a:d7:97:
b5:a5:82:f1:16:40:72:38:b4:fa:26:10:af:a0:c0:8f:43:bd:
98:05:aa:78:e6:a8:60:10:87:f5:4e:c9:2c:a2:c6:15:bf:19:
69:84:63:70:d3:68:e4:4d:04:86:57:d8:cb:9b:48:80:fc:1a:
81:89:9b:73:48:ff:8c:25:1e:c9:1f:4a:52:a2:c6:62:86:62:
cd:89:7f:2a:7b:79:2c:f6:d3:84:30:4a:50:df:fe:ee:06:de:
00:61:d3:43
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBEHuJ6bx3CwSpbVUyFdFJNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNjQ0MWQ5ZDgwN2UwZDc4Y2U3NTIxM2ExMDM0MDBlZTE0
YTdjZGMwHhcNMjYwODI3MTY0NzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGI5MWQwZGI1MmEwNjlmNjA1MTUzMjYwM2IxMGViYmNmN2ZkZDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvBm7ereQQ5/trngEz10Vr93oWtb
v4Jk3M3iBxr/8USeu81aycBWM/3iVR1rRkpRA4uizIqWuty4hVjmppn0uIMsrUWA
RX1Kk9YCD8tKb2mI2Cc7MHKkZGQCQpEvFR2baeNXYX5H/OppCf5/OIJP1kVZHdPA
nCSb7Gz8P5LNXKoh5po40yaTPetdPFhkRkr2JJSPWX7Y1skg9WgZIZ/emZmqD1CM
efhEVZAMf25cb6vxdXmXiphsqr29sP0/LWSNUmnvxC+m24TNIgGVHXXFY7i1o0nF
JikuB2Hpz1a7G/ofpKRITesNYihR7qjQcl0XWQ8nixWFEP3Mgb5vfG0c5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE25HQ21KgafYFFTJgOxDrvPf91HMB8GA1UdIwQY
MBaAFMpkQdnYB+DXjOdSE6EDQA7hSnzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYt
MmUyOGI5NjQ5OGE5LzEvVGJrZERiVXFCcDlnVVZNbUE3RU91ODlfM1VjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYtMmUyOGI5NjQ5OGE5
LzEveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmU+vMA0G
CSqGSIb3DQEBCwUAA4IBAQBpD2nOAbSOetMtmps6FjxiMY7wFr+w+5dj6mVWgA2h
E8mKXuYW38ECpV0VHsMQpiRupmW+dSaL+MXt7sPRdKEmFwiytCt0vQQOMOblsIpP
NTAd7go8wUNOuVGg4gQfpFVU0ahUDScSmOrB8Vabwaw+uMwpgh8HQy+UotsxStY4
oi0Guvh+dCLvi7+oj0dHbd42GpV3/7QgsW5jQx30WJQa15e1pYLxFkByOLT6JhCv
oMCPQ72YBap45qhgEIf1TsksosYVvxlphGNw02jkTQSGV9jLm0iA/BqBiZtzSP+M
JR7JH0pSosZihmLNiX8qe3ks9tOEMEpQ3/7uBt4AYdND
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:21:09 2026 by rpki-client