Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/tkXbhBvhT6LnC9BscPhnjRJnnkU.roa
File: tkXbhBvhT6LnC9BscPhnjRJnnkU.roa (raw, json)
Hash identifier: KUTTAUAtLPltSdE0PzTZ8Fu1Obnal/Vsp1G1BsopGgo=
Subject key identifier: B6:45:DB:84:1B:E1:4F:A2:E7:0B:D0:6C:70:F8:67:8D:12:67:9E:45
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 019E83B2673B87FF7AB32EE261ED502A2DBE
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/tkXbhBvhT6LnC9BscPhnjRJnnkU.roa
Signing time: Mon 01 Jun 2026 14:59:27 +0000
ROA not before: Mon 01 Jun 2026 14:59:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401009
IP address blocks: 216.236.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:83:b2:67:3b:87:ff:7a:b3:2e:e2:61:ed:50:2a:2d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Jun 1 14:59:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b645db841be14fa2e70bd06c70f8678d12679e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6c:f7:38:45:6d:36:0d:f6:5a:fd:ca:87:21:
8c:95:ee:30:ea:1f:ee:4d:4d:9a:e1:a5:8e:07:76:
4a:00:61:d1:f0:0f:6b:bf:3b:4c:3e:18:57:80:c6:
76:f0:6b:69:f0:3b:31:8a:c1:e9:23:73:01:07:2a:
56:73:cd:10:a0:49:f4:14:8f:b9:aa:ec:54:6c:34:
81:ae:74:52:fc:31:21:ee:25:ac:9e:63:e5:35:dd:
1e:6c:3b:51:95:81:49:c7:5b:dd:b0:e1:f0:04:c4:
44:cb:12:a3:3b:06:2b:d3:fd:2c:60:37:bd:3a:c2:
1a:a7:38:a0:38:06:4b:53:03:81:3e:71:3c:62:d9:
30:f7:82:6e:33:ec:e6:14:1b:a8:32:ac:92:b5:bb:
ef:15:5f:dc:e1:61:33:00:43:63:9e:70:38:8c:89:
bd:70:17:d8:06:7d:c3:0f:78:91:6b:d1:bc:38:ec:
b7:fe:74:55:76:64:1d:bf:64:9c:94:c0:76:58:33:
05:da:c0:5f:d8:d5:fd:79:06:b9:18:88:22:ae:c3:
30:22:bf:1f:e6:e6:d6:86:df:a5:43:13:48:b6:38:
b9:90:36:7c:99:6d:6b:6e:3e:e3:d2:af:2b:0a:7d:
f2:f8:62:cc:be:9a:32:53:a9:15:e4:4a:ba:76:71:
3d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:45:DB:84:1B:E1:4F:A2:E7:0B:D0:6C:70:F8:67:8D:12:67:9E:45
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/tkXbhBvhT6LnC9BscPhnjRJnnkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.236.51.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:2d:18:2e:74:1b:67:3e:00:c2:f4:62:75:73:18:6f:38:ef:
5d:77:32:40:fe:d4:8f:c1:c7:15:50:b9:bc:34:cf:35:c3:91:
e2:7e:48:70:89:8b:b8:4b:39:53:01:0f:a3:cb:45:be:38:4b:
ec:ad:10:0e:ca:3c:98:b9:03:de:f9:fe:06:ee:89:52:7a:7c:
01:76:72:f5:cd:36:7e:76:7a:91:2c:1c:32:1d:13:84:e9:82:
1d:37:f0:df:90:27:8b:a8:81:01:55:61:eb:8c:e4:c6:06:17:
7f:38:7b:6c:3d:f2:e8:74:e4:01:41:81:f8:55:69:74:ba:06:
1c:1a:20:cd:1c:b9:11:23:90:05:bb:91:55:d3:a4:c9:1a:c8:
53:ba:03:cb:17:f3:02:92:fe:27:c5:0b:3c:23:a3:76:2c:0c:
bd:5d:2e:9f:cf:94:75:5a:59:e7:ec:64:27:31:d0:d9:01:63:
78:f4:6c:2e:42:31:06:d3:7c:c6:3d:c3:46:4c:58:bd:61:d9:
b7:60:a0:c6:1e:ca:dd:b9:58:49:d8:e8:e8:f2:80:0d:d0:32:
8d:c1:ff:95:9f:8f:af:60:7f:7d:57:34:5d:58:75:ab:0f:e9:
f7:16:2d:ea:82:49:0c:53:fb:f4:9b:e1:b5:e4:10:e1:0e:a4:
3d:ae:36:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ6Dsmc7h/96sy7iYe1QKi2+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MzdjOTliMmE0YzA2MmQ1YzIwNjc4ZjlkY2YzMjA3YWVm
ZDVlNzgwHhcNMjYwNjAxMTQ1OTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjQ1ZGI4NDFiZTE0ZmEyZTcwYmQwNmM3MGY4Njc4ZDEyNjc5ZTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2z3OEVtNg32Wv3KhyGMle4w6h/u
TU2a4aWOB3ZKAGHR8A9rvztMPhhXgMZ28Gtp8DsxisHpI3MBBypWc80QoEn0FI+5
quxUbDSBrnRS/DEh7iWsnmPlNd0ebDtRlYFJx1vdsOHwBMREyxKjOwYr0/0sYDe9
OsIapzigOAZLUwOBPnE8Ytkw94JuM+zmFBuoMqyStbvvFV/c4WEzAENjnnA4jIm9
cBfYBn3DD3iRa9G8OOy3/nRVdmQdv2SclMB2WDMF2sBf2NX9eQa5GIgirsMwIr8f
5ubWht+lQxNItji5kDZ8mW1rbj7j0q8rCn3y+GLMvpoyU6kV5Eq6dnE9wQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLZF24Qb4U+i5wvQbHD4Z40SZ55FMB8GA1UdIwQY
MBaAFAg3yZsqTAYtXCBnj53PMgeu/V54MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0RmSm15cE1CaTFjSUdlUG5jOHlCNjc5WG5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wODk1ZDItYjc3OC00NmM0LWE2OTEt
ZjEyMzdmNGM1Y2Y2LzEvdGtYYmhCdmhUNkxuQzlCc2NQaG5qUkpubmtVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8wODk1ZDItYjc3OC00NmM0LWE2OTEtZjEyMzdmNGM1Y2Y2
LzEvQ0RmSm15cE1CaTFjSUdlUG5jOHlCNjc5WG5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OwzMA0G
CSqGSIb3DQEBCwUAA4IBAQC4LRgudBtnPgDC9GJ1cxhvOO9ddzJA/tSPwccVULm8
NM81w5HifkhwiYu4SzlTAQ+jy0W+OEvsrRAOyjyYuQPe+f4G7olSenwBdnL1zTZ+
dnqRLBwyHROE6YIdN/DfkCeLqIEBVWHrjOTGBhd/OHtsPfLodOQBQYH4VWl0ugYc
GiDNHLkRI5AFu5FV06TJGshTugPLF/MCkv4nxQs8I6N2LAy9XS6fz5R1Wlnn7GQn
MdDZAWN49GwuQjEG03zGPcNGTFi9Ydm3YKDGHsrduVhJ2Ojo8oAN0DKNwf+Vn4+v
YH99VzRdWHWrD+n3Fi3qgkkMU/v0m+G15BDhDqQ9rjbn
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:21:31 2026 by rpki-client