Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/Tp3iAYlWpBzKM8R4tN-VqpW4r3w.roa
File: Tp3iAYlWpBzKM8R4tN-VqpW4r3w.roa (raw, json)
Hash identifier: Xc83mkIVmwaowqosFrmOu3R3dm/XOXcYYwcGQpwmyao=
Subject key identifier: 4E:9D:E2:01:89:56:A4:1C:CA:33:C4:78:B4:DF:95:AA:95:B8:AF:7C
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 01A15AA4D58ACE196BFDE5C05B95F163DF39
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/Tp3iAYlWpBzKM8R4tN-VqpW4r3w.roa
Signing time: Tue 20 Oct 2026 18:48:34 +0000
ROA not before: Tue 20 Oct 2026 18:48:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218911
IP address blocks: 80.246.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:a4:d5:8a:ce:19:6b:fd:e5:c0:5b:95:f1:63:df:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Oct 20 18:48:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e9de2018956a41cca33c478b4df95aa95b8af7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c2:f0:f6:48:f5:5c:64:a0:c2:73:7b:7e:ff:
95:a9:bf:65:91:70:e0:d0:12:57:d7:b1:41:ea:e1:
be:fd:ac:42:85:73:90:54:e5:d4:9b:b7:f6:40:87:
e9:11:ba:ee:27:b8:b8:ab:ba:a0:fa:af:3e:06:78:
69:ea:6c:7e:1f:59:bd:0f:96:97:d6:80:5e:70:7f:
75:6e:10:38:ef:93:07:12:de:71:1f:e2:88:7a:8b:
84:3d:e3:0d:e1:9c:9a:30:a1:28:d4:f4:2a:da:68:
dd:b1:0a:de:f5:3a:89:6c:93:6c:ff:88:62:fe:21:
4a:2a:6e:f5:1e:81:52:4b:84:81:f8:82:d2:3f:ea:
1d:f3:ec:6d:e4:1e:68:6f:cc:34:0b:29:3f:f8:9f:
7e:7b:32:b5:0e:04:27:bb:22:7c:3b:11:39:17:0c:
5b:c8:c6:fe:c3:b6:f5:47:08:52:f5:e2:f4:a3:d9:
00:6f:4c:21:e9:65:4c:69:fe:3c:9b:3b:cb:0f:b8:
18:0e:59:91:e3:26:2c:e0:b5:35:ba:bb:b9:5a:ad:
1f:bc:d2:ef:44:9d:fc:a5:76:12:c5:37:d2:1d:3f:
57:dc:78:63:4f:5d:f7:9f:0c:25:06:4e:45:5b:11:
5f:dc:e8:8a:0f:64:28:0e:9c:8e:a5:8d:d5:ec:af:
5d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9D:E2:01:89:56:A4:1C:CA:33:C4:78:B4:DF:95:AA:95:B8:AF:7C
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/Tp3iAYlWpBzKM8R4tN-VqpW4r3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.231.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:4c:0e:46:81:44:f3:33:af:64:82:e9:8b:eb:ae:24:b3:88:
98:93:b3:f4:d6:d6:47:7f:63:97:a3:95:dd:3e:7e:52:8b:2c:
f1:db:cd:7f:ae:19:c7:b3:51:37:df:c9:99:8b:5b:50:9b:cc:
2a:cd:e4:34:4c:ae:6b:ae:b4:21:f1:6b:b7:f8:d3:31:83:9e:
b2:99:56:4f:7a:60:78:28:32:de:66:ce:10:3d:41:40:a4:e4:
34:e5:f6:70:d2:47:77:5e:a6:76:6c:e1:f0:3a:0c:7f:09:a5:
0d:70:ac:20:fc:7b:86:a8:dd:41:c9:be:d0:63:e8:5d:09:da:
02:a3:f3:17:c1:3b:b6:54:fa:55:6f:3e:24:70:aa:99:5e:b1:
98:0a:3c:dd:ab:69:e8:8c:b7:71:7e:79:5f:6f:5c:cc:73:2d:
56:6d:93:80:ca:be:74:11:28:ea:c2:f0:a3:3b:ef:b5:63:16:
f4:f9:12:93:e5:f7:02:fd:1e:91:e4:d9:d6:6d:2c:df:1d:e5:
5b:eb:07:36:15:71:28:53:30:4e:64:2a:b8:91:ed:12:49:6e:
f4:ee:90:8d:68:df:4a:1e:67:65:ac:01:99:93:6d:6e:3e:57:
ce:4d:26:8a:7d:39:80:22:c9:11:0b:62:00:25:e0:2a:72:55:
82:d5:3b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:21:09 2026 by rpki-client