Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/TBHHTYsHOROkPH8gmH7cU4qlJ30.roa
File: TBHHTYsHOROkPH8gmH7cU4qlJ30.roa (raw, json)
Hash identifier: 8GVi4c/FqOgBHVvq6XyCSOI6MVAJWnfPNGtIbICzF0w=
Subject key identifier: 4C:11:C7:4D:8B:07:39:13:A4:3C:7F:20:98:7E:DC:53:8A:A5:27:7D
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 01A14EF5CFC23E19ECF6B475727E4FD744C9
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/TBHHTYsHOROkPH8gmH7cU4qlJ30.roa
Signing time: Sun 18 Oct 2026 12:21:34 +0000
ROA not before: Sun 18 Oct 2026 12:21:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207184
IP address blocks: 46.151.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4e:f5:cf:c2:3e:19:ec:f6:b4:75:72:7e:4f:d7:44:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Oct 18 12:21:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c11c74d8b073913a43c7f20987edc538aa5277d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8d:5c:39:21:37:1f:06:39:d5:ee:72:17:a4:
3f:95:4c:65:ec:ae:21:8c:ca:d6:d2:07:95:9e:63:
44:bc:be:19:11:27:e0:fa:3c:e7:f4:54:2c:34:26:
f1:84:dc:4d:8d:09:91:e8:ed:ba:e9:f6:21:89:e7:
74:c0:58:80:08:2d:83:c5:db:20:64:ba:fe:87:35:
a7:c3:8f:28:c3:03:26:09:5e:70:2f:1e:c3:f8:ac:
4a:0c:d9:f6:fa:93:e4:25:af:54:2d:9e:6b:8a:bd:
5c:6e:ca:cd:e5:56:94:50:5f:e3:35:e6:1a:35:59:
28:c5:7d:e4:e0:e9:c9:16:08:4d:89:4c:c1:10:8f:
c9:5d:38:44:40:63:9a:26:1f:aa:f0:1c:84:f8:3e:
08:d1:2a:8a:f8:61:15:b4:22:4c:e1:77:ee:e1:a7:
64:d1:cc:b0:96:a8:19:0c:db:2e:a9:55:ff:31:31:
29:6f:f1:84:d3:bf:0d:61:b5:71:65:ef:f3:2f:5a:
58:d3:6d:e2:f9:ac:75:ee:99:6c:ce:05:c1:e4:05:
8c:6a:6a:d9:17:a3:c8:35:26:f6:37:f1:ff:5d:bb:
74:cc:53:ee:a7:a6:96:05:aa:4f:43:4d:79:62:e8:
71:4e:12:ab:b9:57:89:7a:f6:32:12:aa:1e:3c:19:
36:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:11:C7:4D:8B:07:39:13:A4:3C:7F:20:98:7E:DC:53:8A:A5:27:7D
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/TBHHTYsHOROkPH8gmH7cU4qlJ30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.182.0/24
Signature Algorithm: sha256WithRSAEncryption
72:dd:10:52:83:0f:cd:34:92:4e:19:ed:d7:cf:6a:06:36:6d:
89:dd:26:95:23:a0:4f:b7:ea:78:4d:ac:b8:b2:06:dc:e5:d4:
55:fc:fb:9e:12:8d:bc:31:d7:c4:46:32:a3:6f:97:3a:17:84:
57:b5:29:1b:4f:e9:89:ea:a6:b4:4f:81:69:3a:63:e9:eb:0b:
95:29:65:f4:64:16:38:5d:46:32:60:01:d9:93:f2:ec:80:85:
0b:e7:a0:f7:44:29:34:01:0d:b1:fa:b5:36:77:4b:ad:a9:1c:
e7:a8:70:15:07:12:42:ef:af:78:1e:78:94:3c:85:f8:83:c1:
ec:6b:11:1e:08:b0:7a:41:92:4d:63:ed:19:de:a9:b0:f2:38:
fc:6c:05:15:0f:c5:c5:23:15:38:c5:4e:59:b2:75:1f:f3:1a:
d1:36:05:60:e6:97:6d:97:64:3c:39:97:5f:fa:b0:45:36:2b:
8c:31:68:65:87:5b:74:20:25:49:53:f5:68:2c:e8:cd:02:3b:
a6:56:55:1a:e6:d2:06:1a:46:c9:ff:9f:77:58:46:4f:cd:57:
67:b2:a7:a3:d7:65:a8:42:3b:00:7b:84:c4:49:57:ec:e8:54:
3f:38:0c:e4:e3:24:e4:80:71:c2:90:8f:12:d0:cd:7b:50:a4:
26:f2:2a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:56:21 2026 by rpki-client