Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/TCIbufkPjrOPAFHbaMVz2PJuwNQ.roa
File: TCIbufkPjrOPAFHbaMVz2PJuwNQ.roa (raw, json)
Hash identifier: WtRiQqaxy0ZXMWLqBVnrOC4eZHImJ1xhzNYsapZ1pnA=
Subject key identifier: 4C:22:1B:B9:F9:0F:8E:B3:8F:00:51:DB:68:C5:73:D8:F2:6E:C0:D4
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 019FB9049E546A4A23F5B1D246B4958E9F16
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/TCIbufkPjrOPAFHbaMVz2PJuwNQ.roa
Signing time: Fri 31 Jul 2026 16:31:55 +0000
ROA not before: Fri 31 Jul 2026 16:31:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203919
IP address blocks: 5.10.250.0/24 maxlen: 24
5.10.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b9:04:9e:54:6a:4a:23:f5:b1:d2:46:b4:95:8e:9f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jul 31 16:31:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c221bb9f90f8eb38f0051db68c573d8f26ec0d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:02:8c:36:97:85:e3:b0:82:13:1d:da:b5:51:
0d:f7:4d:e2:e0:3f:e6:7e:b1:c4:2b:0e:8a:d3:50:
cb:e1:86:c6:b4:48:4b:0a:3c:a3:6d:7f:06:04:89:
c1:c1:40:9c:81:f7:7e:2a:c4:24:55:e5:78:de:7c:
d7:d0:2d:75:36:62:5e:d4:8f:ad:d2:b5:b0:74:f7:
79:b8:0c:30:7c:e8:64:e3:e0:8a:c5:94:38:53:15:
c8:32:6b:79:d3:02:1c:9b:85:1a:68:06:54:72:30:
3f:f5:2a:7b:7e:ef:20:b8:04:cf:64:7e:fa:88:0b:
89:e9:c6:66:d8:68:76:e2:e3:2e:19:81:c7:de:20:
95:1c:1e:a8:a3:f3:e4:cf:a9:35:32:c8:12:f9:4b:
0e:64:b1:8d:a8:89:cb:6e:7a:9f:cf:d8:1f:c1:35:
7e:c1:52:3a:16:39:ae:8f:22:cd:17:38:e1:bc:09:
4d:85:df:b2:15:37:3c:d0:db:b2:fb:58:bb:ce:d7:
ce:e5:7c:49:fa:9b:a4:95:73:9b:e4:3f:63:67:6a:
8a:8e:17:5f:3c:24:30:21:90:5d:6f:a5:a5:d0:61:
25:9c:84:bd:59:16:27:58:58:f4:dd:31:ea:51:c7:
dd:d3:8c:86:5e:1d:08:39:21:1a:a4:81:36:42:6b:
64:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:22:1B:B9:F9:0F:8E:B3:8F:00:51:DB:68:C5:73:D8:F2:6E:C0:D4
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/TCIbufkPjrOPAFHbaMVz2PJuwNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.250.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:0d:42:83:dd:20:4f:98:a9:04:f7:b2:1f:6e:a9:1d:0e:0d:
b1:c1:e2:97:6d:d5:3d:04:35:35:97:0b:98:a9:9b:6e:0a:1f:
56:aa:c3:ff:de:16:ec:12:d2:21:b0:1a:66:17:c3:3b:5c:f2:
d8:17:86:60:82:f4:90:ac:14:32:e1:63:17:4b:0b:16:2b:da:
3e:65:5c:31:d3:9d:e0:ab:29:95:5d:2d:bd:d9:f6:89:d6:23:
31:83:48:3c:34:b8:31:96:67:28:08:8b:ef:0c:d0:7e:d5:83:
ec:80:44:d6:65:5a:66:d7:5a:e4:0c:a1:bf:6d:85:b0:24:d5:
b0:9b:29:bd:b4:65:2b:93:a1:0d:b0:67:37:73:5b:10:4d:02:
fd:32:b4:25:ce:ae:f1:49:f1:78:2c:a8:33:da:64:78:03:82:
c1:78:09:22:49:1b:34:52:49:6e:5a:69:f1:85:6e:f1:f1:d8:
00:8f:8c:b2:0d:16:75:f3:1e:e1:d0:ce:5c:7c:97:73:30:7f:
e2:74:fd:04:9c:d2:87:f1:1c:77:2c:33:60:1c:3a:18:f5:92:
df:e4:c8:fa:54:ae:b6:dc:cd:c8:52:cc:8b:c5:15:d5:0c:9d:
c9:a4:43:12:14:a4:6f:19:9c:e9:0b:8b:72:7c:d3:9e:67:e8:
14:e4:11:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:41:13 2026 by rpki-client