Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/03d41c-e185-4a9d-9331-802a03119521/1/TgHm2Yr6MieIjlchX0bTfQ7gnKU.roa
File: TgHm2Yr6MieIjlchX0bTfQ7gnKU.roa (raw, json)
Hash identifier: vdDuBpHduQahc3PKMIxcchCSqY/670u9m9pvbt17bp4=
Subject key identifier: 4E:01:E6:D9:8A:FA:32:27:88:8E:57:21:5F:46:D3:7D:0E:E0:9C:A5
Certificate issuer: /CN=7fbea42a3cce48b8be17da99379d571e73690b38
Certificate serial: 01A17841347C43E72FAFAD507971D7A85DD6
Authority key identifier: 7F:BE:A4:2A:3C:CE:48:B8:BE:17:DA:99:37:9D:57:1E:73:69:0B:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f76kKjzOSLi-F9qZN51XHnNpCzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/03d41c-e185-4a9d-9331-802a03119521/1/TgHm2Yr6MieIjlchX0bTfQ7gnKU.roa
Signing time: Mon 26 Oct 2026 12:48:21 +0000
ROA not before: Mon 26 Oct 2026 12:48:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3292
IP address blocks: 45.158.208.0/24 maxlen: 24
45.158.209.0/24 maxlen: 24
45.158.210.0/24 maxlen: 24
45.158.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/03d41c-e185-4a9d-9331-802a03119521/1/f76kKjzOSLi-F9qZN51XHnNpCzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/03d41c-e185-4a9d-9331-802a03119521/1/f76kKjzOSLi-F9qZN51XHnNpCzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/f76kKjzOSLi-F9qZN51XHnNpCzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:41:34:7c:43:e7:2f:af:ad:50:79:71:d7:a8:5d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fbea42a3cce48b8be17da99379d571e73690b38
Validity
Not Before: Oct 26 12:48:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e01e6d98afa3227888e57215f46d37d0ee09ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:99:c1:7c:84:f2:bb:e1:f5:3c:bc:db:fb:57:
2f:54:93:28:86:61:49:97:f9:e0:a3:ee:8a:28:67:
7e:58:60:e3:34:bb:03:08:38:82:7e:5f:44:60:26:
a7:77:a3:3e:c7:98:69:95:7a:5f:fc:6f:00:4e:6f:
61:76:30:d1:3c:de:03:85:7a:19:8d:f4:6c:68:c0:
0a:ed:ac:a6:28:a5:3f:3e:ac:c4:2e:e9:4b:21:e0:
4b:14:0d:38:0b:93:0d:3a:c8:ef:27:35:31:18:05:
f5:42:65:a6:83:38:11:6a:17:8c:8e:72:f1:21:41:
ad:99:9a:ff:d8:57:9a:71:07:4b:4b:3c:6d:41:17:
43:cb:73:26:1c:35:0c:12:cb:8c:aa:cd:55:7d:eb:
cc:46:1d:8e:24:3a:0a:2a:31:a8:4c:4d:ea:d9:fa:
46:b9:49:c4:57:e8:bc:64:c7:96:57:dc:06:51:dd:
21:9b:9e:33:95:02:16:ae:c0:75:5d:48:a6:99:92:
0e:6a:4d:46:b6:86:02:ab:34:ed:92:29:23:93:2d:
23:c1:4f:de:d8:97:08:4c:ab:c0:5c:f9:82:b2:5d:
46:94:9f:ef:86:4b:a0:a4:95:b1:a9:f4:2e:11:46:
3f:5d:59:7f:a7:43:b9:de:b6:e8:f4:00:c8:b2:02:
52:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:01:E6:D9:8A:FA:32:27:88:8E:57:21:5F:46:D3:7D:0E:E0:9C:A5
X509v3 Authority Key Identifier:
keyid:7F:BE:A4:2A:3C:CE:48:B8:BE:17:DA:99:37:9D:57:1E:73:69:0B:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f76kKjzOSLi-F9qZN51XHnNpCzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/03d41c-e185-4a9d-9331-802a03119521/1/TgHm2Yr6MieIjlchX0bTfQ7gnKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/03d41c-e185-4a9d-9331-802a03119521/1/f76kKjzOSLi-F9qZN51XHnNpCzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.208.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:f2:e3:5d:b9:f4:0a:03:bd:46:02:30:77:c5:53:1c:33:e4:
35:d7:5f:0c:85:8e:73:d8:41:83:12:17:1f:e0:e9:91:1c:1f:
ee:75:95:f6:87:84:58:48:91:c6:ae:3c:ae:9e:eb:3c:e6:ea:
cf:86:8d:51:86:a3:fa:3c:12:f5:32:0c:0b:c8:21:a0:1a:b4:
f3:17:dd:4e:72:86:99:64:aa:94:64:23:e0:9f:f0:d6:27:ec:
11:b6:1a:e5:b1:aa:3d:9b:01:a3:8a:46:93:61:81:6c:e4:32:
97:06:39:a1:6f:f3:f3:72:f0:7d:89:23:b2:53:f7:77:e8:3b:
a0:3c:f9:43:e6:5e:e2:39:84:a8:df:22:18:39:34:da:11:b4:
95:d2:01:fe:c1:7a:b1:fb:0d:4c:86:58:ef:dc:74:ce:21:b1:
53:79:6e:68:d0:0a:11:e6:65:f4:77:2b:43:0b:54:8e:26:60:
ca:61:a2:b9:c0:62:a0:32:43:7f:4b:66:73:62:6e:c0:ee:95:
f6:0b:36:b5:a2:77:a3:d4:60:f2:36:46:ad:9c:00:4d:d6:3e:
c1:24:13:4a:c3:fd:d9:77:6c:85:46:bc:f5:f9:b2:8e:ac:16:
4a:4a:40:62:d4:c2:67:82:3b:0c:6d:c1:d4:91:b2:09:78:bf:
fd:f8:bd:76
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaF4QTR8Q+cvr61QeXHXqF3WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmYmVhNDJhM2NjZTQ4YjhiZTE3ZGE5OTM3OWQ1NzFlNzM2
OTBiMzgwHhcNMjYxMDI2MTI0ODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTAxZTZkOThhZmEzMjI3ODg4ZTU3MjE1ZjQ2ZDM3ZDBlZTA5Y2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopnBfITyu+H1PLzb+1cvVJMohmFJ
l/ngo+6KKGd+WGDjNLsDCDiCfl9EYCand6M+x5hplXpf/G8ATm9hdjDRPN4DhXoZ
jfRsaMAK7aymKKU/PqzELulLIeBLFA04C5MNOsjvJzUxGAX1QmWmgzgRaheMjnLx
IUGtmZr/2FeacQdLSzxtQRdDy3MmHDUMEsuMqs1VfevMRh2OJDoKKjGoTE3q2fpG
uUnEV+i8ZMeWV9wGUd0hm54zlQIWrsB1XUimmZIOak1GtoYCqzTtkikjky0jwU/e
2JcITKvAXPmCsl1GlJ/vhkugpJWxqfQuEUY/XVl/p0O53rbo9ADIsgJSlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE4B5tmK+jIniI5XIV9G030O4JylMB8GA1UdIwQY
MBaAFH++pCo8zki4vhfamTedVx5zaQs4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjc2a0tqek9TTGktRjlxWk41MVhIbk5wQ3pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8wM2Q0MWMtZTE4NS00YTlkLTkzMzEt
ODAyYTAzMTE5NTIxLzEvVGdIbTJZcjZNaWVJamxjaFgwYlRmUTdnbktVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8wM2Q0MWMtZTE4NS00YTlkLTkzMzEtODAyYTAzMTE5NTIx
LzEvZjc2a0tqek9TTGktRjlxWk41MVhIbk5wQ3pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZ7QMA0G
CSqGSIb3DQEBCwUAA4IBAQC/8uNdufQKA71GAjB3xVMcM+Q1118MhY5z2EGDEhcf
4OmRHB/udZX2h4RYSJHGrjyunus85urPho1RhqP6PBL1MgwLyCGgGrTzF91OcoaZ
ZKqUZCPgn/DWJ+wRthrlsao9mwGjikaTYYFs5DKXBjmhb/PzcvB9iSOyU/d36Dug
PPlD5l7iOYSo3yIYOTTaEbSV0gH+wXqx+w1Mhljv3HTOIbFTeW5o0AoR5mX0dytD
C1SOJmDKYaK5wGKgMkN/S2ZzYm7A7pX2Cza1onej1GDyNkatnABN1j7BJBNKw/3Z
d2yFRrz1+bKOrBZKSkBi1MJngjsMbcHUkbIJeL/9+L12
-----END CERTIFICATE-----
Generated at Fri Oct 30 14:57:43 2026 by rpki-client