Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/T-qUaTppWdjXOEe8zDVxP2wl2mU.roa
File: T-qUaTppWdjXOEe8zDVxP2wl2mU.roa (raw, json)
Hash identifier: BctL7i3w8G6/dn3DlfdZ96WAphGXQa+OTA6hPMPwVs4=
Subject key identifier: 4F:EA:94:69:3A:69:59:D8:D7:38:47:BC:CC:35:71:3F:6C:25:DA:65
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 01A0B4618D8DD4E2C7EA18162202B8BEB67F
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/T-qUaTppWdjXOEe8zDVxP2wl2mU.roa
Signing time: Fri 18 Sep 2026 11:58:07 +0000
ROA not before: Fri 18 Sep 2026 11:58:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48539
IP address blocks: 192.145.53.0/24 maxlen: 24
213.109.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:61:8d:8d:d4:e2:c7:ea:18:16:22:02:b8:be:b6:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Sep 18 11:58:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4fea94693a6959d8d73847bccc35713f6c25da65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:84:70:b5:ff:98:07:12:ea:4d:76:09:34:3a:
d4:4d:3b:2b:34:44:6e:f7:10:70:90:fd:17:71:0a:
a9:74:a0:b8:da:3e:71:35:81:ac:cf:96:1d:5b:cd:
39:d3:27:93:ce:14:5a:8a:c1:ef:73:35:e7:20:56:
93:fd:06:7a:d7:78:0a:f1:a7:15:32:3e:5b:7f:7c:
ab:d9:f0:9a:ff:5b:3d:cb:20:3f:d6:39:4d:20:f5:
f5:16:17:2a:d4:2a:9b:0a:bf:1c:00:57:bd:0b:1d:
35:ff:73:3e:1f:1b:f5:be:e3:88:80:de:96:02:f6:
94:fd:79:f7:0b:11:7f:5f:5e:40:23:28:30:cc:db:
c8:f4:34:de:7e:de:e7:c1:b9:1a:65:8b:2b:82:d1:
1e:9e:5e:54:55:11:b4:56:89:ad:50:83:75:61:ca:
96:51:a9:1c:6f:af:92:a8:4a:c1:6e:bf:37:01:de:
14:f1:96:b7:81:db:40:1a:ed:0c:58:2a:20:1f:7d:
1f:c7:cd:b5:a0:dc:6b:a8:f9:74:d5:d4:80:49:22:
e3:d6:99:e7:97:f7:de:94:90:42:46:af:a9:99:00:
3c:e4:65:91:eb:69:f6:3a:c6:87:df:97:07:13:05:
ab:9a:8b:94:56:10:03:4d:89:78:ad:f8:9b:e2:63:
e2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:EA:94:69:3A:69:59:D8:D7:38:47:BC:CC:35:71:3F:6C:25:DA:65
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/T-qUaTppWdjXOEe8zDVxP2wl2mU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.53.0/24
213.109.181.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:42:7c:48:09:d6:d5:a7:9d:bf:d8:4e:3e:96:1a:4f:25:70:
3b:dc:85:ff:e3:12:dd:fb:d5:04:04:f7:f8:d9:7a:4b:3c:83:
7b:05:ea:a9:ee:2f:0e:25:06:ff:2e:21:c6:fd:cd:23:e7:eb:
2f:1d:f5:a1:55:c5:0c:9f:4a:6f:1e:ac:1b:eb:55:3a:27:0d:
9d:24:67:48:44:9e:79:ae:13:1c:69:4e:9d:6b:65:cc:c6:7e:
cf:c5:e6:17:34:a5:54:c1:96:1c:be:a4:fd:3d:d4:a4:0b:2d:
49:75:0f:90:9a:bf:2f:fb:5d:df:ff:29:e8:ec:f9:c5:f1:b9:
33:ba:00:1c:48:5c:6e:98:08:44:d4:3d:42:99:15:a1:29:ba:
bd:92:15:87:c0:75:bf:91:89:3b:74:71:8c:c2:86:24:af:e3:
09:be:53:0d:54:e6:3c:47:52:a8:3d:20:f2:6b:93:a1:fa:f2:
b1:d0:27:ca:f7:7b:3d:f4:53:3f:a5:f8:12:f4:23:f3:21:52:
ab:dc:0f:ef:a1:e7:19:1b:ba:68:03:22:86:5d:a4:4f:73:6e:
60:03:aa:7b:15:33:e0:d6:10:ea:8d:ab:c3:75:c4:87:f8:eb:
ff:6e:b3:d8:a4:a3:c2:d9:99:73:5e:af:f3:7b:fc:e6:20:e0:
85:3c:db:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 09:40:39 2026 by rpki-client