Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/TbrAHhFTstrZmwBc_E0hADRAgv8.roa
File: TbrAHhFTstrZmwBc_E0hADRAgv8.roa (raw, json)
Hash identifier: a5FIaH7vPhsPR2Pxypr2lLnF7fF5zfkoy3aodJkb1OE=
Subject key identifier: 4D:BA:C0:1E:11:53:B2:DA:D9:9B:00:5C:FC:4D:21:00:34:40:82:FF
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 01A10B071704474E4BD3383CA1EF64AABD8C
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/TbrAHhFTstrZmwBc_E0hADRAgv8.roa
Signing time: Mon 05 Oct 2026 07:46:16 +0000
ROA not before: Mon 05 Oct 2026 07:46:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213751
IP address blocks: 5.56.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:07:17:04:47:4e:4b:d3:38:3c:a1:ef:64:aa:bd:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Oct 5 07:46:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4dbac01e1153b2dad99b005cfc4d2100344082ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3b:97:77:58:57:cb:b8:02:a1:4b:fd:fa:8a:
52:e0:cf:db:e8:f5:cd:70:4b:75:7e:d5:3f:dd:96:
c3:96:ab:ea:5c:cd:74:18:09:7f:cf:d3:16:62:69:
2a:fa:52:88:6e:cf:1b:7a:b0:1e:0d:aa:be:74:f7:
fa:07:d8:69:0b:7e:1a:6c:c5:e6:dd:8c:f5:1e:fc:
74:21:56:8a:fb:2a:a9:e3:02:f7:95:98:b8:1c:78:
fa:1f:cd:1b:91:ea:27:87:7e:39:22:0e:6d:9c:36:
4f:2d:08:32:8c:79:51:ff:6a:83:f6:7e:71:06:2f:
99:06:ad:f8:ed:00:6b:0e:bd:f0:6b:c0:5e:1d:46:
64:f1:a6:2c:d1:54:f1:94:0f:ef:4e:27:5d:a7:f0:
b3:eb:02:a7:cc:d2:e2:a7:49:5d:7d:e5:de:1a:05:
7c:6b:9d:88:14:de:41:96:4e:f2:ec:7a:14:e8:88:
8e:f6:f2:e6:bc:c9:69:c6:36:26:3f:80:8f:55:83:
e2:60:af:00:11:4a:88:b3:4c:05:cf:4c:22:1d:d1:
a9:20:01:06:97:55:a2:14:a1:93:1f:d6:b9:4f:90:
42:23:db:42:b2:55:cb:80:ea:d9:11:9a:04:c5:21:
5b:fa:c0:80:bd:8f:85:6e:89:78:70:41:84:87:b6:
29:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:BA:C0:1E:11:53:B2:DA:D9:9B:00:5C:FC:4D:21:00:34:40:82:FF
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/TbrAHhFTstrZmwBc_E0hADRAgv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.30.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:cb:d5:19:fc:e0:b2:50:62:27:83:ff:dc:88:36:cc:6e:0a:
3c:60:64:04:a1:e0:b4:e8:92:a3:f7:15:cd:5c:a8:1b:15:e0:
f2:c6:84:6f:01:26:50:da:a3:c8:98:d8:30:dc:ad:51:80:0a:
45:a4:92:21:38:ab:2b:1a:57:5f:88:5c:ed:2a:a4:e0:83:02:
1b:51:78:f0:fd:d1:2d:40:1c:af:d0:03:31:7d:9a:a4:1a:f0:
35:ec:fd:e5:2b:08:2b:69:7f:c5:8c:62:9a:ea:58:5f:aa:34:
b7:6f:34:f9:8b:48:ec:d4:b3:3e:ef:0a:58:db:6e:9b:9a:3d:
a3:56:af:7f:72:a7:48:a5:8b:f5:90:99:ed:3b:81:0f:82:3f:
28:43:f6:af:90:26:cb:e1:55:16:7f:d9:83:57:fd:a1:4f:f9:
b2:3b:18:b7:76:9b:b7:4c:07:9c:95:02:48:55:75:73:1e:1d:
09:55:74:9c:28:c2:49:86:79:05:e3:be:97:d6:25:d6:eb:73:
89:e8:12:8f:95:ae:a5:fe:68:be:ab:31:24:16:00:45:db:ec:
ab:17:fa:dd:82:ea:73:a9:c0:aa:70:4c:96:25:29:c4:0b:78:
e8:58:e6:e2:16:9e:37:d2:37:03:1a:03:a5:5d:94:4e:6e:55:
74:26:ba:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:51:17 2026 by rpki-client