Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/T4s5U1kBkhiB9WozjuHNDxBJBJg.roa
File: T4s5U1kBkhiB9WozjuHNDxBJBJg.roa (raw, json)
Hash identifier: NtcZQ+kpI/7HehNTUjPJKVo09mKaUlReAanTnbKc3mU=
Subject key identifier: 4F:8B:39:53:59:01:92:18:81:F5:6A:33:8E:E1:CD:0F:10:49:04:98
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 01A193251E51E42BA45BE93A4E988C69C852
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/T4s5U1kBkhiB9WozjuHNDxBJBJg.roa
Signing time: Sat 31 Oct 2026 18:07:25 +0000
ROA not before: Sat 31 Oct 2026 18:07:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218232
IP address blocks: 213.182.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:93:25:1e:51:e4:2b:a4:5b:e9:3a:4e:98:8c:69:c8:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Oct 31 18:07:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f8b39535901921881f56a338ee1cd0f10490498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ec:3d:5f:08:cc:2d:5b:a6:bb:c0:19:37:67:
d2:bb:82:f9:22:e5:4d:68:c9:ad:69:40:a5:52:de:
1e:1b:5a:e4:c8:4f:a4:51:55:ad:c0:d2:35:6e:19:
f0:d3:48:8a:8f:7a:64:f5:4d:89:5f:2f:9c:12:95:
6d:0c:52:80:36:e8:27:8a:28:a1:db:54:38:b0:90:
76:e3:a7:2b:71:c5:bf:b4:af:48:75:3d:62:b6:dc:
99:d7:2d:20:c1:5e:8d:72:1b:28:08:d4:f1:1b:07:
c0:11:dc:88:7a:cc:96:17:ea:d4:4f:cc:0d:a3:46:
15:75:0f:c3:16:42:1c:c9:97:cf:9d:20:eb:55:2f:
4d:78:a5:ef:49:72:ca:7b:3c:2b:e0:65:84:a0:dd:
2d:c7:99:12:55:77:fc:78:be:bc:81:a7:0b:39:c0:
43:07:87:92:37:3a:f1:de:a7:67:e8:08:2a:e0:28:
46:27:d3:8d:3f:12:a3:7f:fb:8b:99:ac:6b:5c:c1:
7d:81:f1:90:a7:0d:c3:fa:b2:8a:a1:ef:85:2c:fd:
0a:d6:eb:87:55:ae:ea:82:63:97:59:f9:13:5d:aa:
98:e3:02:e0:28:8b:d1:0e:64:9c:9c:7f:dd:12:3f:
39:6c:f5:fd:81:0f:0d:6d:aa:76:3b:24:8d:4a:be:
11:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8B:39:53:59:01:92:18:81:F5:6A:33:8E:E1:CD:0F:10:49:04:98
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/T4s5U1kBkhiB9WozjuHNDxBJBJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.182.200.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:55:ca:4a:c0:e8:5d:6d:6a:80:ce:99:8d:f0:2f:5f:dc:99:
f3:1e:36:27:7a:aa:1c:10:7f:2b:06:22:39:e8:70:e7:5f:43:
8c:d4:39:16:04:a8:82:1d:9a:73:6e:8b:92:db:71:69:63:91:
0a:a7:38:ef:d8:e5:aa:75:8d:c2:c8:0f:01:f1:b4:27:62:2f:
81:81:12:80:62:b3:8a:06:09:e7:e3:25:07:ea:f6:1c:23:4f:
3d:44:10:ba:66:8b:05:0b:8e:d6:2f:11:22:b7:fe:e5:dc:61:
60:22:64:e7:c8:a9:ef:9f:45:f1:63:fd:26:56:9e:66:21:e5:
0c:19:fe:9c:c6:76:c9:ef:40:95:a9:e3:33:b0:d5:2c:5a:2e:
60:15:7e:29:f3:25:db:25:af:cb:4a:94:2b:6d:51:88:80:a9:
4d:2e:9e:0e:4f:0a:7e:f6:5c:9d:46:6b:ab:40:49:eb:e3:7a:
57:b5:43:99:49:81:60:c5:46:30:d0:61:ff:52:a9:0a:44:5d:
5b:70:1a:5b:dc:98:89:7e:81:8f:38:14:f1:79:59:f6:6c:0e:
f8:46:3b:7d:74:d2:a4:4f:2a:b8:90:20:51:56:31:95:06:08:
27:5e:61:59:f7:6c:11:8b:83:73:81:e9:75:28:47:f6:49:2f:
c0:fc:80:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 01:42:52 2026 by rpki-client