Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/tf7qsoBJv3De1Wk8Ek1C5caXYHI.roa
File: tf7qsoBJv3De1Wk8Ek1C5caXYHI.roa (raw, json)
Hash identifier: 1AFVc5hvdCXIYWW7f4ZfIsCQuhue8YXSXmhg1aCkuDw=
Subject key identifier: B5:FE:EA:B2:80:49:BF:70:DE:D5:69:3C:12:4D:42:E5:C6:97:60:72
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01A155903DD6BBAFE485B923D0FE063FB407
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/tf7qsoBJv3De1Wk8Ek1C5caXYHI.roa
Signing time: Mon 19 Oct 2026 19:07:58 +0000
ROA not before: Mon 19 Oct 2026 19:07:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218550
IP address blocks: 2.56.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:90:3d:d6:bb:af:e4:85:b9:23:d0:fe:06:3f:b4:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Oct 19 19:07:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5feeab28049bf70ded5693c124d42e5c6976072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7a:bd:2c:ba:27:53:15:42:a2:76:7a:d4:56:
bb:a7:f3:b4:1c:6d:0e:4c:44:18:55:8f:fd:f6:70:
a0:6e:e2:7c:e8:1e:5c:25:ea:dc:3f:a4:cb:ef:c5:
d5:a6:a2:3e:aa:8a:ee:c5:70:c7:7c:74:c1:ff:eb:
40:91:53:7b:43:40:3d:5f:91:5c:b4:3c:67:c7:a8:
6e:88:62:4f:55:2c:90:f6:ed:a4:12:0d:7c:43:cc:
ce:58:1b:b3:98:2b:79:2c:06:a4:fe:33:cf:e0:ed:
5c:c3:3a:3a:cc:15:0c:b9:75:16:95:4e:2b:fb:81:
61:ac:03:b9:a8:8d:0a:42:fd:c5:03:ce:55:ab:74:
f8:c2:d4:5d:7f:20:02:cb:a6:6a:48:3c:76:7f:16:
1d:85:9e:ea:d8:b1:76:3d:a7:f1:b2:42:6e:6e:83:
c4:9b:18:6d:04:f1:b2:e9:f4:92:78:74:b7:16:08:
74:10:b0:57:13:0b:d8:ed:1a:0a:ce:22:50:62:81:
b0:fc:b5:48:ee:a1:94:31:a0:7c:cd:ea:14:ad:87:
5b:a5:09:f7:d1:99:1a:c8:b6:49:7b:2b:88:37:0d:
cc:38:6b:da:44:a1:4f:42:47:b0:9c:31:b9:fb:1f:
af:b2:a3:2c:47:8e:70:78:9a:fc:b3:3e:a1:9e:49:
8c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FE:EA:B2:80:49:BF:70:DE:D5:69:3C:12:4D:42:E5:C6:97:60:72
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/tf7qsoBJv3De1Wk8Ek1C5caXYHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.0.0/24
Signature Algorithm: sha256WithRSAEncryption
31:44:8b:f8:86:11:4f:7a:dc:5c:9b:39:c5:87:b3:a8:0b:59:
d6:b2:72:fb:4b:e1:c4:95:72:4e:35:d3:07:9d:62:3b:b6:2d:
ba:4b:bb:17:e0:78:ff:e3:43:cf:30:ad:cf:f2:9e:9d:d4:5f:
33:31:f6:55:f2:18:13:7e:d2:51:44:e5:ef:13:f2:75:23:e6:
d0:22:56:5c:9b:0c:5f:de:00:5b:9a:7e:fb:50:f6:28:d6:5c:
26:c7:c3:76:5f:9d:7e:2b:f3:04:2e:39:fe:19:be:e5:4d:3d:
18:f7:e0:bc:ef:62:a2:34:a2:a8:05:d8:6a:2c:56:6c:4a:7c:
c7:91:b4:a9:ce:fb:d4:72:0f:6e:48:18:b6:c2:d4:ee:4a:02:
15:cd:c6:20:c3:f3:ed:15:b1:06:ed:ea:9d:e3:57:cf:84:3b:
a3:51:07:08:64:e4:40:36:86:59:46:28:75:48:d2:34:82:17:
93:e5:97:d8:99:5c:0d:1f:09:49:4d:00:f7:3a:78:1c:4f:88:
dd:49:29:cb:37:88:f7:84:98:a1:c5:2a:70:38:f1:ee:0c:51:
fa:7a:f6:a8:8b:95:52:e6:95:12:3b:59:3c:7d:75:57:e4:68:
27:10:ab:e8:ab:44:66:d6:3d:84:fd:0d:8e:66:59:33:da:2f:
36:98:e8:8f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFVkD3Wu6/khbkj0P4GP7QHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw
MjNlYmUwHhcNMjYxMDE5MTkwNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNWZlZWFiMjgwNDliZjcwZGVkNTY5M2MxMjRkNDJlNWM2OTc2MDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43q9LLonUxVConZ61Fa7p/O0HG0O
TEQYVY/99nCgbuJ86B5cJercP6TL78XVpqI+qoruxXDHfHTB/+tAkVN7Q0A9X5Fc
tDxnx6huiGJPVSyQ9u2kEg18Q8zOWBuzmCt5LAak/jPP4O1cwzo6zBUMuXUWlU4r
+4FhrAO5qI0KQv3FA85Vq3T4wtRdfyACy6ZqSDx2fxYdhZ7q2LF2PafxskJuboPE
mxhtBPGy6fSSeHS3Fgh0ELBXEwvY7RoKziJQYoGw/LVI7qGUMaB8zeoUrYdbpQn3
0ZkayLZJeyuINw3MOGvaRKFPQkewnDG5+x+vsqMsR45weJr8sz6hnkmMqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLX+6rKASb9w3tVpPBJNQuXGl2ByMB8GA1UdIwQY
MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt
OTlhY2I5OWNlNzU0LzEvdGY3cXNvQkp2M0RlMVdrOEVrMUM1Y2FYWUhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0
LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjgAMA0G
CSqGSIb3DQEBCwUAA4IBAQAxRIv4hhFPetxcmznFh7OoC1nWsnL7S+HElXJONdMH
nWI7ti26S7sX4Hj/40PPMK3P8p6d1F8zMfZV8hgTftJRROXvE/J1I+bQIlZcmwxf
3gBbmn77UPYo1lwmx8N2X51+K/MELjn+Gb7lTT0Y9+C872KiNKKoBdhqLFZsSnzH
kbSpzvvUcg9uSBi2wtTuSgIVzcYgw/PtFbEG7eqd41fPhDujUQcIZORANoZZRih1
SNI0gheT5ZfYmVwNHwlJTQD3OngcT4jdSSnLN4j3hJihxSpwOPHuDFH6evaoi5VS
5pUSO1k8fXVX5GgnEKvoq0Rm1j2E/Q2OZlkz2i82mOiP
-----END CERTIFICATE-----
Generated at Wed Nov 4 16:42:46 2026 by rpki-client