Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/tb04GvyTA89VNgWS46FoGgFFRyo.roa
File: tb04GvyTA89VNgWS46FoGgFFRyo.roa (raw, json)
Hash identifier: 7lV37yzdjwE4eeMpj2uDo680p01gXn1osoBHuEsrP5E=
Subject key identifier: B5:BD:38:1A:FC:93:03:CF:55:36:05:92:E3:A1:68:1A:01:45:47:2A
Certificate issuer: /CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Certificate serial: 01A0FF682635BECE49A6028745C2AD4D5545
Authority key identifier: 0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/tb04GvyTA89VNgWS46FoGgFFRyo.roa
Signing time: Sat 03 Oct 2026 01:36:50 +0000
ROA not before: Sat 03 Oct 2026 01:36:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.12.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 22:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:68:26:35:be:ce:49:a6:02:87:45:c2:ad:4d:55:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Validity
Not Before: Oct 3 01:36:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5bd381afc9303cf55360592e3a1681a0145472a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:39:f8:32:98:2c:3e:d1:00:7d:e7:42:cd:f2:
7f:a5:2b:78:44:83:6a:86:ca:11:b7:4c:22:86:5e:
0d:b8:bd:ae:e2:49:ca:eb:ef:92:39:1c:f9:09:85:
86:1f:e6:e4:4b:52:95:18:73:70:37:50:c7:95:06:
8a:18:f5:d3:96:9d:30:fd:3d:82:2a:47:36:eb:81:
af:ca:29:ff:31:cb:53:dd:c5:25:46:e8:2d:9f:fb:
18:0a:59:38:51:5b:51:ce:b2:93:25:47:32:a0:89:
ec:17:68:d0:db:30:99:a3:4b:9f:81:8b:74:0d:40:
10:33:96:fd:bf:ab:f6:f1:f8:58:cf:09:c9:e8:e4:
80:e7:97:62:f2:40:4d:40:5d:14:9d:5d:70:2e:8a:
91:a7:14:e8:e9:fd:8f:0b:10:44:6b:13:cf:c2:36:
9c:d1:33:34:a5:3c:30:90:f4:e9:6b:c2:cd:d5:03:
d7:41:82:aa:a8:ac:a5:46:23:51:ef:52:e3:0a:2a:
e2:60:77:77:72:4b:ff:fe:f2:31:49:a4:52:25:1d:
8e:4f:00:1d:e8:3d:ee:40:cf:a3:88:25:e6:75:f3:
e2:f3:74:a7:95:bf:a0:70:ac:ba:97:3e:2a:d1:d9:
91:8d:a1:0f:f4:50:52:e5:68:5f:a3:41:f7:d3:c0:
55:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:BD:38:1A:FC:93:03:CF:55:36:05:92:E3:A1:68:1A:01:45:47:2A
X509v3 Authority Key Identifier:
keyid:0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/tb04GvyTA89VNgWS46FoGgFFRyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.185.0/24
Signature Algorithm: sha256WithRSAEncryption
58:f9:ca:e4:79:d7:69:78:a7:bf:fb:63:12:b9:d7:c4:a0:2a:
83:27:2f:2f:ed:b2:c0:30:20:d0:4a:3f:47:5f:0e:ce:27:c2:
ca:17:d4:bf:fd:6b:54:9f:94:b0:dd:e7:36:a5:f9:da:24:37:
cb:32:ac:c4:9d:7e:d6:fb:be:b7:ea:a1:4e:53:17:ba:de:16:
da:12:0c:ec:3d:3d:90:26:23:b4:a8:20:03:1a:cb:24:ae:87:
18:5c:70:48:9b:88:24:1d:d9:67:00:48:67:34:07:e4:3d:af:
43:eb:84:e5:04:e2:7e:bf:57:3b:41:b1:34:32:ac:a5:cb:64:
5e:9f:e4:ba:6a:2e:cf:be:e9:bb:7c:ad:da:68:a4:f4:d4:2f:
8b:82:16:cb:f2:fd:04:24:64:49:4b:66:28:0e:7e:95:b6:17:
4e:f0:77:47:f6:ca:bc:6b:f6:f6:f1:59:e6:b9:45:c7:a6:e7:
b9:54:95:dd:bc:5a:e3:ac:12:83:54:99:15:b4:bf:97:9a:dc:
b2:d8:ea:11:79:25:0c:8f:76:f5:8a:44:79:21:1e:b9:46:51:
84:b8:78:1c:70:21:01:b0:ea:ab:c4:9e:5a:7e:53:21:aa:6e:
75:4a:90:f8:83:7c:cf:4c:bf:0e:25:ee:f4:57:b4:f1:81:ee:
11:a6:15:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 06:44:49 2026 by rpki-client