Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/t4HkSR49kbnH3Md8VLmkvowwv5c.roa
File: t4HkSR49kbnH3Md8VLmkvowwv5c.roa (raw, json)
Hash identifier: PlMc98JPUnLzb7As5Be/OWrN/vV15yWuIzHBD4KUiKQ=
Subject key identifier: B7:81:E4:49:1E:3D:91:B9:C7:DC:C7:7C:54:B9:A4:BE:8C:30:BF:97
Certificate issuer: /CN=b4c41e59834da612d83ca24194f02ca6d7602448
Certificate serial: 01A084FB771CC1E567758978D9A5694F49A7
Authority key identifier: B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/t4HkSR49kbnH3Md8VLmkvowwv5c.roa
Signing time: Wed 09 Sep 2026 07:04:27 +0000
ROA not before: Wed 09 Sep 2026 07:04:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60713
IP address blocks: 95.143.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:84:fb:77:1c:c1:e5:67:75:89:78:d9:a5:69:4f:49:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c41e59834da612d83ca24194f02ca6d7602448
Validity
Not Before: Sep 9 07:04:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b781e4491e3d91b9c7dcc77c54b9a4be8c30bf97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8a:0f:55:36:01:6e:b5:f4:5d:cd:43:8e:22:
11:61:df:b8:f2:2a:32:f0:f8:75:5e:c8:2c:08:12:
ce:39:6c:ac:1e:9b:5a:47:d0:ba:b3:30:5c:4a:3b:
41:5a:67:69:9a:d3:7a:15:ac:59:ff:51:cc:1b:cf:
af:4b:a0:a6:71:c1:e5:e4:b6:04:df:86:07:89:ae:
51:c2:82:9d:38:6c:fa:47:f7:74:b1:9a:63:84:45:
68:dd:e1:be:ed:fb:70:e1:42:1e:07:b2:a5:e8:bd:
b9:ee:ad:16:90:c4:7b:19:6b:d7:42:8c:6b:3a:f1:
5a:04:41:77:0d:eb:21:e6:46:d2:af:3c:0a:3a:e1:
3c:42:12:fc:51:fc:94:c1:4e:5d:d1:da:7f:2f:6e:
2b:b9:80:4f:50:c2:37:d4:70:85:b4:d4:ff:73:ff:
96:d9:ba:0a:e9:06:57:3a:ff:d7:ae:ee:d5:73:19:
43:2f:e0:b3:53:fd:43:d0:d9:7e:f3:6b:59:c4:ad:
ef:cf:22:54:84:05:e5:1a:4b:84:80:08:a0:14:24:
6d:75:eb:e2:7b:ae:be:62:4b:e9:47:89:6f:86:23:
b9:18:e7:52:df:0c:1e:17:04:3a:d9:d4:f0:8e:22:
ee:56:db:56:ec:fd:c2:e1:ac:68:b7:a1:ea:9f:9a:
ef:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:81:E4:49:1E:3D:91:B9:C7:DC:C7:7C:54:B9:A4:BE:8C:30:BF:97
X509v3 Authority Key Identifier:
keyid:B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/t4HkSR49kbnH3Md8VLmkvowwv5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.143.101.0/24
Signature Algorithm: sha256WithRSAEncryption
19:db:e8:79:17:45:72:92:d4:ca:fb:f1:3a:1b:7b:31:82:77:
db:9d:ec:f1:4e:af:ef:2a:39:44:57:33:57:1a:2f:53:89:98:
19:a7:c6:2c:eb:4e:91:34:00:bd:05:f9:be:fb:d8:d2:6d:e3:
f9:13:e1:57:b1:4b:77:6c:67:d5:2a:89:b0:7a:42:6a:39:d8:
92:74:0c:4a:55:48:86:e3:00:f6:96:17:37:90:e1:80:14:c5:
c5:58:4e:92:e1:6a:24:f7:ef:66:75:50:5c:60:27:db:40:7c:
f7:d0:6b:0b:18:e3:60:61:86:13:a7:1b:a0:f8:e7:56:57:74:
73:9e:99:da:28:f2:b6:e0:2c:9b:11:91:46:54:2a:5c:ad:40:
b3:12:fb:00:92:33:5e:63:4c:cf:c3:d6:46:89:e6:73:1d:b3:
46:22:39:f9:f3:ff:be:2d:f4:46:55:44:40:81:0a:ec:5d:bd:
3f:67:13:cf:e5:f9:39:14:06:8a:96:28:98:ae:a1:52:e7:d4:
30:a9:1c:b4:35:4c:6b:8b:d2:e4:ec:39:c6:04:7b:7d:eb:9a:
dd:ad:11:30:df:37:80:d4:9e:3b:b8:f1:3f:3f:7e:b3:3c:5f:
4e:16:c8:96:51:49:57:82:6e:cf:0f:62:f6:f6:7b:63:b0:13:
89:68:12:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCE+3ccweVndYl42aVpT0mnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YzQxZTU5ODM0ZGE2MTJkODNjYTI0MTk0ZjAyY2E2ZDc2
MDI0NDgwHhcNMjYwOTA5MDcwNDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzgxZTQ0OTFlM2Q5MWI5YzdkY2M3N2M1NGI5YTRiZThjMzBiZjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4oPVTYBbrX0Xc1DjiIRYd+48ioy
8Ph1XsgsCBLOOWysHptaR9C6szBcSjtBWmdpmtN6FaxZ/1HMG8+vS6CmccHl5LYE
34YHia5RwoKdOGz6R/d0sZpjhEVo3eG+7ftw4UIeB7Kl6L257q0WkMR7GWvXQoxr
OvFaBEF3Desh5kbSrzwKOuE8QhL8UfyUwU5d0dp/L24ruYBPUMI31HCFtNT/c/+W
2boK6QZXOv/Xru7VcxlDL+CzU/1D0Nl+82tZxK3vzyJUhAXlGkuEgAigFCRtdevi
e66+YkvpR4lvhiO5GOdS3wweFwQ62dTwjiLuVttW7P3C4axot6Hqn5rvdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLeB5EkePZG5x9zHfFS5pL6MML+XMB8GA1UdIwQY
MBaAFLTEHlmDTaYS2DyiQZTwLKbXYCRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE1RZVdZTk5waExZUEtKQmxQQXNwdGRnSkVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hM2JhY2EtNDM3ZC00NjA3LTljMWEt
NTU3YTRjMzFlMDJlLzEvdDRIa1NSNDlrYm5IM01kOFZMbWt2b3d3djVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9hM2JhY2EtNDM3ZC00NjA3LTljMWEtNTU3YTRjMzFlMDJl
LzEvdE1RZVdZTk5waExZUEtKQmxQQXNwdGRnSkVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX49lMA0G
CSqGSIb3DQEBCwUAA4IBAQAZ2+h5F0VyktTK+/E6G3sxgnfbnezxTq/vKjlEVzNX
Gi9TiZgZp8Ys606RNAC9Bfm++9jSbeP5E+FXsUt3bGfVKomwekJqOdiSdAxKVUiG
4wD2lhc3kOGAFMXFWE6S4Wok9+9mdVBcYCfbQHz30GsLGONgYYYTpxug+OdWV3Rz
npnaKPK24CybEZFGVCpcrUCzEvsAkjNeY0zPw9ZGieZzHbNGIjn58/++LfRGVURA
gQrsXb0/ZxPP5fk5FAaKliiYrqFS59QwqRy0NUxri9Lk7DnGBHt965rdrREw3zeA
1J47uPE/P36zPF9OFsiWUUlXgm7PD2L29ntjsBOJaBLo
-----END CERTIFICATE-----
Generated at Thu Sep 10 15:29:40 2026 by rpki-client