Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/TRJJWKb_7wjkntp3CGcdbFhOQt4.roa
File: TRJJWKb_7wjkntp3CGcdbFhOQt4.roa (raw, json)
Hash identifier: lX5LetRpzJkeJpuP3t0ci+4Aa6qHVDBr2/L7PwVh+Os=
Subject key identifier: 4D:12:49:58:A6:FF:EF:08:E4:9E:DA:77:08:67:1D:6C:58:4E:42:DE
Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial: 019FBC1AB83C1A0CB45667F32B9E5C89C551
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/TRJJWKb_7wjkntp3CGcdbFhOQt4.roa
Signing time: Sat 01 Aug 2026 06:54:55 +0000
ROA not before: Sat 01 Aug 2026 06:54:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200169
IP address blocks: 91.200.253.0/24 maxlen: 24
110.172.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:bc:1a:b8:3c:1a:0c:b4:56:67:f3:2b:9e:5c:89:c5:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Validity
Not Before: Aug 1 06:54:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d124958a6ffef08e49eda7708671d6c584e42de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a9:17:4b:66:30:d6:ad:50:b8:dc:b8:dc:e0:
f0:7b:ae:77:93:0f:24:c6:98:c3:52:84:89:60:57:
a0:05:b3:15:9a:90:ce:46:a4:ca:58:18:95:12:8f:
b3:8e:24:4e:3c:8e:76:27:d6:c3:02:66:73:54:bb:
d3:17:c6:e1:02:0a:03:c7:47:77:9e:54:b0:a8:1e:
59:20:d7:51:7c:f4:77:02:12:c4:38:25:04:70:d6:
54:53:2b:42:eb:ce:89:f9:59:00:9a:50:fa:23:6e:
c4:b2:7b:47:2e:de:cc:8f:05:e8:27:5f:3c:ab:34:
b9:df:b8:c9:82:ff:92:a6:f3:de:37:1e:15:22:fd:
78:6c:78:a4:e6:f4:39:12:a7:de:4a:3a:a8:03:0c:
5c:3c:f5:53:b0:2d:20:02:3c:c1:07:2b:e2:ca:78:
ea:77:76:a1:80:e1:60:b1:f3:21:f1:77:e8:64:5a:
1d:6d:5a:e7:aa:d4:83:0c:93:c4:4f:94:18:0c:6f:
bd:c6:3c:35:85:4d:17:17:9d:ec:5c:c1:cb:02:73:
12:04:74:61:d1:82:6c:a7:82:eb:c8:5f:de:b1:82:
99:7f:33:ef:ed:e8:84:fd:11:22:71:3f:08:fc:3b:
1f:8b:b5:b3:fa:5f:9e:64:8b:86:31:ca:1c:33:f3:
74:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:12:49:58:A6:FF:EF:08:E4:9E:DA:77:08:67:1D:6C:58:4E:42:DE
X509v3 Authority Key Identifier:
keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/TRJJWKb_7wjkntp3CGcdbFhOQt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.253.0/24
110.172.189.0/24
Signature Algorithm: sha256WithRSAEncryption
61:df:08:d2:2c:30:d8:1d:6f:c8:ae:e7:2f:84:35:db:f7:f0:
8f:a1:cd:3c:d1:5e:b3:2d:2d:cc:d7:42:f7:fb:8b:3e:d9:e8:
95:be:53:b2:4b:4e:ce:45:d1:df:ac:93:13:e9:b5:4e:2f:d8:
4b:e3:31:71:83:15:0e:7b:91:af:79:12:71:dc:e8:c7:50:ea:
74:df:ab:0a:af:1a:a3:f2:13:da:6b:80:f3:f2:12:02:6c:76:
94:4a:89:2c:c2:89:2f:d6:c6:aa:e0:e3:89:28:fe:2a:a0:d1:
67:15:b2:0b:67:6d:9c:9d:71:bc:e4:9d:76:3a:e3:9d:85:72:
14:1a:88:f7:e5:ea:c4:9d:70:a6:aa:ef:63:81:5a:48:15:6a:
e8:27:8a:07:16:f6:89:50:17:1f:23:7c:73:78:1e:f8:a5:38:
d5:4b:7e:fe:65:a0:e9:86:5c:d4:e2:9e:eb:5d:5f:5f:f7:74:
9c:2f:38:e6:61:80:c5:af:69:71:09:38:bd:65:cc:c2:bf:54:
f6:36:6b:06:e2:a8:74:fc:20:3b:04:12:10:b7:d3:94:99:4d:
43:40:68:0b:e7:03:62:4d:92:8b:e3:c6:6c:7d:fd:d3:ad:5d:
56:bc:af:d8:d1:b1:83:03:72:65:1c:e8:8e:7d:5f:4a:1c:54:
b2:13:f4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:34:05 2026 by rpki-client