Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/TdW91Pm4Fomu_ObKSEy4gFxbWog.roa
File: TdW91Pm4Fomu_ObKSEy4gFxbWog.roa (raw, json)
Hash identifier: qYR28sg4RNEDQfB/FKLHVq9mL2gQ6rOZW4PjApEUb8Y=
Subject key identifier: 4D:D5:BD:D4:F9:B8:16:89:AE:FC:E6:CA:48:4C:B8:80:5C:5B:5A:88
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 01A0DD876AC905526A70AF3F23162342CDD1
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/TdW91Pm4Fomu_ObKSEy4gFxbWog.roa
Signing time: Sat 26 Sep 2026 11:43:54 +0000
ROA not before: Sat 26 Sep 2026 11:43:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51618
IP address blocks: 5.160.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:87:6a:c9:05:52:6a:70:af:3f:23:16:23:42:cd:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: Sep 26 11:43:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4dd5bdd4f9b81689aefce6ca484cb8805c5b5a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e9:56:9f:26:f2:bf:a9:9c:32:23:52:d8:67:
4c:cc:9b:b6:93:54:bd:86:12:23:2a:f9:39:fa:e2:
b9:66:10:1a:62:68:95:c1:9f:e9:17:7d:a3:f7:33:
17:1f:6a:89:6a:46:2c:42:85:0d:b6:21:b5:ce:cb:
98:43:49:a7:af:98:44:71:fd:7c:53:98:d7:1b:da:
f9:13:0d:07:31:1b:c1:68:ad:e5:32:5b:2b:8c:55:
58:43:67:68:48:56:bb:38:d0:16:bc:83:cd:15:4a:
3d:fd:d0:ce:bf:78:73:43:f2:30:73:75:d7:08:72:
bd:eb:f3:ed:bc:0a:2b:f4:f7:03:48:6e:0b:a0:88:
a5:17:f1:bc:b6:75:41:30:13:45:3d:6f:3c:18:f6:
47:14:14:e3:f3:c7:0c:31:2c:13:7b:e9:b2:bf:86:
77:50:e1:bb:63:a6:44:23:9d:11:e3:e8:90:8f:80:
bf:17:12:ab:3f:81:02:52:22:43:fa:8f:c5:89:37:
64:26:75:58:1f:1a:ac:19:20:5c:99:2b:65:1f:99:
cb:11:d1:04:ab:aa:e4:c5:6a:fb:89:58:a6:e5:bd:
2e:23:4c:73:8d:e5:bc:54:3a:72:0c:a1:a9:9f:86:
60:ac:86:cd:8e:d6:f2:b3:18:b3:0e:a6:ca:af:00:
cf:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D5:BD:D4:F9:B8:16:89:AE:FC:E6:CA:48:4C:B8:80:5C:5B:5A:88
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/TdW91Pm4Fomu_ObKSEy4gFxbWog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.240.0/24
Signature Algorithm: sha256WithRSAEncryption
51:9c:22:29:2c:2a:74:6a:1a:1e:db:ae:68:21:71:af:d7:71:
0c:bc:96:c7:34:58:4a:16:28:40:c3:a9:47:85:1d:de:33:b2:
22:14:d3:97:67:ff:ed:b0:98:d3:f8:c2:72:05:c3:05:c2:5a:
3f:f1:9c:17:7a:46:b7:09:23:4a:c7:94:7f:ce:d4:a6:ac:3c:
7e:6f:0c:72:3b:c2:9e:13:75:bd:9e:93:a2:46:05:26:6e:8e:
df:ac:16:d6:9d:85:85:de:44:a2:43:37:71:dc:17:19:15:6f:
23:b5:6d:5c:ff:d1:6f:18:06:f5:ce:2e:4a:01:aa:9c:f6:eb:
b2:83:81:e9:43:aa:16:57:3e:dd:f4:aa:eb:79:75:94:41:38:
6e:80:21:8f:87:a8:d2:38:14:b3:3b:98:a7:42:8d:eb:e0:ea:
57:a1:7e:70:82:a6:f5:bb:8d:cd:39:e4:f6:66:e1:0a:cf:8b:
c0:e3:86:23:2f:09:7b:42:07:8d:3b:64:2c:6a:02:2f:4a:10:
d9:95:c7:97:45:6a:ab:6b:eb:00:3f:e7:e3:b6:8b:38:2b:4d:
47:ce:8d:40:04:8c:c0:c0:af:9c:e9:ff:fc:8e:99:ec:75:01:
49:73:10:75:69:f0:1c:94:e3:66:3c:8d:a8:36:01:41:ad:11:
10:af:93:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:50:48 2026 by rpki-client