Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/Trt3Dj0pMhOoJh2CPktBG3FCfVc.roa
File: Trt3Dj0pMhOoJh2CPktBG3FCfVc.roa (raw, json)
Hash identifier: NKVsMzCjrMWwvzROa6+mGi9gddLpHw4YlZvTJISf6Xg=
Subject key identifier: 4E:BB:77:0E:3D:29:32:13:A8:26:1D:82:3E:4B:41:1B:71:42:7D:57
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 01A163B6FCF71BD89B56851CBADF7D586533
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/Trt3Dj0pMhOoJh2CPktBG3FCfVc.roa
Signing time: Thu 22 Oct 2026 13:04:59 +0000
ROA not before: Thu 22 Oct 2026 13:04:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.153.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:b6:fc:f7:1b:d8:9b:56:85:1c:ba:df:7d:58:65:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: Oct 22 13:04:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ebb770e3d293213a8261d823e4b411b71427d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bc:14:3b:20:b3:6c:93:62:45:da:46:b9:15:
a4:5c:c7:e5:ea:35:f4:26:74:c1:9c:84:cf:a0:fe:
89:78:cd:f1:7b:cf:d6:bf:cd:bc:e5:4d:5d:79:c7:
b4:52:7b:85:00:8f:66:8b:15:df:7c:b0:b5:0c:e5:
f1:fb:6d:13:fa:1c:34:a0:fd:cc:16:ff:0b:49:aa:
56:9a:c4:8f:44:4e:2b:88:6e:f1:42:9d:1d:57:c6:
a6:84:8d:03:f1:96:77:a4:c7:4e:f2:f1:10:fc:7a:
ef:cd:35:1c:2c:a4:ff:67:25:d0:b1:49:26:1e:e8:
25:7f:d1:32:35:6d:c6:80:49:cf:ac:61:14:9c:b2:
5b:4c:cf:c7:8f:62:00:5f:c3:4b:d6:02:5e:a6:d8:
ce:d3:45:d3:63:a9:c1:ad:57:1d:ae:64:cb:84:cc:
20:00:44:35:d4:3d:00:a7:7e:6b:aa:e6:8b:70:38:
12:ee:9e:10:ff:13:e3:29:18:02:23:19:23:0f:0a:
c8:9a:fd:da:ff:c0:94:a4:e9:05:7a:fb:f5:c5:cd:
e7:51:d9:a5:ac:0b:39:e6:d5:43:d2:40:d3:3a:3a:
e3:73:2d:0d:ef:4a:8d:1a:05:41:8e:21:d3:ad:84:
c1:29:39:aa:11:60:25:cb:dd:40:80:ce:51:50:4f:
8e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BB:77:0E:3D:29:32:13:A8:26:1D:82:3E:4B:41:1B:71:42:7D:57
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/Trt3Dj0pMhOoJh2CPktBG3FCfVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.164.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:58:f0:17:be:6c:08:ea:ec:8f:70:ac:7d:09:a5:5d:c1:e7:
a5:9f:3d:7d:ff:aa:f0:5d:5e:df:ce:b8:b7:ef:a6:3e:a4:69:
59:2f:56:c1:cc:9a:48:c0:07:96:65:6d:ef:51:e0:1a:ce:0d:
b4:6e:e2:b0:81:b8:f6:9e:8f:81:5d:4c:00:37:3b:5b:b6:3a:
bc:c1:45:d8:78:98:4f:6b:17:a8:8a:50:92:45:e1:d7:c9:ff:
fb:a1:c1:a0:7f:61:5c:bf:3e:b7:f3:9b:79:d3:b3:17:fd:53:
f1:ca:85:a9:bc:08:1f:c9:58:69:bd:8e:e4:56:58:46:b8:b6:
2e:b6:7a:3e:d6:6c:be:7b:20:37:60:a5:b8:ae:e6:61:d9:c0:
b7:87:45:55:2f:8e:58:0a:59:2a:2c:3a:ef:30:73:30:83:1f:
8b:2b:5d:42:fc:29:42:63:e4:fa:ca:3c:c4:60:a5:82:5f:90:
30:e4:46:b0:80:39:13:c6:32:aa:3e:d2:9a:24:58:ce:0a:13:
70:77:ad:f0:8d:b8:14:9e:b7:0d:66:9a:61:23:3d:6a:b1:32:
cd:ef:80:d5:ae:9d:70:7e:2c:a5:67:20:b0:b1:25:7f:b5:62:
60:0b:0c:44:f5:69:6a:a9:01:1e:27:09:0f:34:e0:f8:ae:44:
53:02:57:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:34:02 2026 by rpki-client