Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/TBxOzHTO6dr2q9Tgwo45EytI6nc.roa
File: TBxOzHTO6dr2q9Tgwo45EytI6nc.roa (raw, json)
Hash identifier: yTvRkefBawi1z8bv3y5Yswt5XVB05Yph3aDlgT2XdJ8=
Subject key identifier: 4C:1C:4E:CC:74:CE:E9:DA:F6:AB:D4:E0:C2:8E:39:13:2B:48:EA:77
Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial: 01A00E750F22CE281E79E29379BF2A021D82
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/TBxOzHTO6dr2q9Tgwo45EytI6nc.roa
Signing time: Mon 17 Aug 2026 06:42:27 +0000
ROA not before: Mon 17 Aug 2026 06:42:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 5.10.216.0/24 maxlen: 24
5.10.222.0/24 maxlen: 24
185.23.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0e:75:0f:22:ce:28:1e:79:e2:93:79:bf:2a:02:1d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Validity
Not Before: Aug 17 06:42:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c1c4ecc74cee9daf6abd4e0c28e39132b48ea77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:41:6f:de:17:15:cc:28:43:38:83:cd:aa:c1:
a3:29:3e:10:7a:51:39:de:b5:1b:60:39:f6:6a:5e:
4e:f3:4e:82:10:42:38:b1:25:b7:d2:6d:83:a4:9d:
06:3e:8c:82:83:bc:9f:9a:33:40:24:c8:b2:42:36:
41:35:a5:07:d6:86:ed:09:f5:83:fe:75:9b:1c:fd:
7c:fa:17:c9:5c:26:84:9c:32:e6:0c:59:ef:94:d7:
d6:a7:e7:88:c9:7d:be:d2:99:d2:cb:b3:5f:9b:0b:
a3:f2:77:a3:ab:d2:43:64:dd:d2:92:35:8f:a3:31:
f7:64:74:b2:b0:c1:44:03:72:68:81:d5:25:93:8f:
5e:1e:64:6c:a7:ba:3e:73:80:97:72:94:80:20:4b:
77:01:c2:e1:23:63:35:20:58:f4:9c:8e:1c:91:3b:
29:ab:47:d3:59:a2:b0:73:48:fd:e3:3f:73:de:5f:
b9:46:37:bd:ca:9d:9d:7f:61:0f:ad:30:28:8e:27:
63:a0:7a:37:54:a6:5c:69:6e:ff:d1:56:e8:1a:5d:
bb:24:e9:8a:f8:45:2c:b7:80:69:74:57:dc:96:9d:
3b:fe:0e:77:d4:ba:cc:01:f9:84:66:33:ea:cc:82:
ba:25:ef:1b:5b:bb:f3:d5:ba:02:93:3f:ba:d5:54:
e5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1C:4E:CC:74:CE:E9:DA:F6:AB:D4:E0:C2:8E:39:13:2B:48:EA:77
X509v3 Authority Key Identifier:
keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/TBxOzHTO6dr2q9Tgwo45EytI6nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.216.0/24
5.10.222.0/24
185.23.237.0/24
Signature Algorithm: sha256WithRSAEncryption
12:39:ea:a8:19:0e:fe:bc:11:e8:31:24:c1:be:3c:fa:66:db:
27:22:7b:86:75:06:e5:8f:2d:8b:ea:4a:48:c0:11:2c:1b:b6:
c4:50:d7:de:00:52:43:a3:52:64:2f:a8:de:94:7a:9d:90:e5:
17:8a:37:a5:d6:85:69:9c:5b:dd:ba:30:5f:c5:5a:80:da:a7:
6a:ba:ff:e0:d0:b1:ff:e0:43:e1:30:82:e1:4c:d9:76:d4:e0:
17:56:3a:14:17:9c:72:94:6d:6a:1e:18:e8:3d:91:e1:d3:04:
77:b7:cb:67:51:1c:97:8f:7a:f1:33:d8:b8:47:fa:0a:7a:25:
e0:8f:ed:67:e6:3e:b5:bd:ee:c8:e5:47:e1:b0:9b:67:53:c8:
27:c2:11:92:f5:d7:b0:8f:f2:0f:15:b3:50:5a:61:d6:12:44:
10:64:1e:fd:88:cd:a9:a9:21:4b:07:31:3a:ac:c2:20:24:f2:
30:8a:a6:94:64:e7:f7:76:49:9f:2e:64:fa:d8:09:57:29:56:
46:ab:92:93:92:78:ae:c8:29:b1:19:ad:49:f0:ea:48:05:6f:
b8:f6:15:52:8d:b4:b5:81:c7:64:70:75:a2:94:1a:e3:26:82:
a4:c0:38:44:5e:6e:a0:a3:c1:df:8e:ed:08:e8:e8:44:6b:63:
27:2c:42:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 22:25:06 2026 by rpki-client