Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/THkP_WMs844JJ4UTW2iusEvO7og.roa
File: THkP_WMs844JJ4UTW2iusEvO7og.roa (raw, json)
Hash identifier: q+i+yw1ZT8GT9Tqd+7XX30HpCs4PHYhN3cI+hYf+RFc=
Subject key identifier: 4C:79:0F:FD:63:2C:F3:8E:09:27:85:13:5B:68:AE:B0:4B:CE:EE:88
Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Certificate serial: 01A12C72FB2E99F119A9B5BA6BB0F7CA4805
Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/THkP_WMs844JJ4UTW2iusEvO7og.roa
Signing time: Sun 11 Oct 2026 19:31:35 +0000
ROA not before: Sun 11 Oct 2026 19:31:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7843
IP address blocks: 9.175.64.0/18 maxlen: 18
9.175.128.0/17 maxlen: 17
135.137.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:72:fb:2e:99:f1:19:a9:b5:ba:6b:b0:f7:ca:48:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Validity
Not Before: Oct 11 19:31:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c790ffd632cf38e092785135b68aeb04bceee88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:21:9f:55:7b:3b:14:a7:91:d4:4d:51:fe:d0:
35:28:a7:cd:f2:55:0b:58:a8:e4:4f:7d:65:1a:fc:
8b:fd:d4:c3:a0:37:54:31:2c:40:d9:e5:b8:41:88:
e7:64:91:94:74:96:f3:46:2e:d4:9e:3e:ec:44:ea:
19:5a:e5:d8:63:bd:81:d2:2e:6b:12:19:fd:2b:ef:
ce:19:e3:59:84:96:04:c5:cd:89:eb:ed:fc:5a:f5:
69:93:3c:6b:29:8c:56:81:4e:0d:18:df:ec:dd:50:
e6:a3:c6:0f:d4:c2:28:87:96:f3:2b:2d:69:a8:a5:
8f:c5:bf:49:5a:bf:fb:7c:60:62:24:c9:f8:bd:7d:
73:b4:f7:03:6c:73:f6:ba:b2:f3:8e:a1:d4:45:f1:
0e:be:98:95:c7:73:a2:71:b0:82:36:f4:45:9b:2f:
c3:a4:40:98:2c:67:98:15:ce:10:93:45:a8:d6:08:
cf:e3:58:13:eb:83:cf:b1:70:29:8d:cc:c9:8c:48:
8c:b1:77:41:69:b5:75:d9:38:38:fa:c3:5d:4c:d5:
17:22:99:6e:9f:5f:db:14:1a:5e:33:6f:87:cd:90:
58:ad:57:5f:32:d0:6d:22:9f:42:5a:5e:85:75:95:
17:9c:a7:64:f6:22:3a:69:06:4b:cf:6d:91:ac:99:
2d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:79:0F:FD:63:2C:F3:8E:09:27:85:13:5B:68:AE:B0:4B:CE:EE:88
X509v3 Authority Key Identifier:
keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/THkP_WMs844JJ4UTW2iusEvO7og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.175.64.0-9.175.255.255
135.137.0.0/18
Signature Algorithm: sha256WithRSAEncryption
33:26:68:85:7b:ac:ec:7d:07:63:3f:8b:cc:34:41:b3:6b:99:
1c:92:a7:2e:63:11:65:c0:34:81:36:5b:a5:87:c2:4b:40:56:
5b:bd:19:a1:08:f9:67:be:f1:ca:a2:5a:1f:1c:ee:69:de:b9:
5a:d0:6f:26:b6:93:a3:92:8d:60:21:89:80:fc:37:cf:6c:00:
0d:76:34:0a:8a:85:0b:73:c1:2e:ee:ff:49:aa:35:98:e8:55:
13:4b:e0:ef:cd:f9:bd:ee:aa:34:3d:07:27:66:da:b8:78:a3:
dc:b0:b6:45:a2:ec:87:ac:11:15:c3:cb:42:34:45:ac:8f:3b:
1d:2a:92:62:f0:6a:26:be:d7:ee:22:5c:63:a8:ee:58:a8:6f:
5b:9e:a2:2a:33:e1:f9:58:74:43:c4:93:e8:5e:68:66:ec:8b:
76:a7:53:98:1d:ab:c5:ad:40:b2:5e:45:19:bc:d9:db:21:20:
79:b4:bb:12:d7:b0:9a:a9:a2:67:23:3a:3e:1b:e0:b7:fb:95:
2c:05:47:ce:50:6c:32:c3:cf:80:28:f9:3a:a5:71:f5:47:b5:
97:5e:de:cb:f2:6a:a4:85:0c:5d:ee:8c:e5:71:a1:b8:6a:d6:
89:3e:7e:c5:c3:c9:2f:6e:ac:16:03:46:b3:e8:0f:94:c0:2f:
57:0e:0f:85
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAaEscvsumfEZqbW6a7D3ykgFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYjJiYjdiYWQ1MGYxOTIxODEwYTAyOGU3OGVkZDY1Zjgx
ZjZhN2QwHhcNMjYxMDExMTkzMTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Yzc5MGZmZDYzMmNmMzhlMDkyNzg1MTM1YjY4YWViMDRiY2VlZTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yGfVXs7FKeR1E1R/tA1KKfN8lUL
WKjkT31lGvyL/dTDoDdUMSxA2eW4QYjnZJGUdJbzRi7Unj7sROoZWuXYY72B0i5r
Ehn9K+/OGeNZhJYExc2J6+38WvVpkzxrKYxWgU4NGN/s3VDmo8YP1MIoh5bzKy1p
qKWPxb9JWr/7fGBiJMn4vX1ztPcDbHP2urLzjqHURfEOvpiVx3OicbCCNvRFmy/D
pECYLGeYFc4Qk0Wo1gjP41gT64PPsXApjczJjEiMsXdBabV12Tg4+sNdTNUXIplu
n1/bFBpeM2+HzZBYrVdfMtBtIp9CWl6FdZUXnKdk9iI6aQZLz22RrJktSQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFEx5D/1jLPOOCSeFE1torrBLzu6IMB8GA1UdIwQY
MBaAFE+yu3utUPGSGBCgKOeO3WX4H2p9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYt
MjdmYmM5OWVhM2M2LzEvVEhrUF9XTXM4NDRKSjRVVFcyaXVzRXZPN29nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYtMjdmYmM5OWVhM2M2
LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATMAsDBAYJr0AD
AwQJoAMEBoeJADANBgkqhkiG9w0BAQsFAAOCAQEAMyZohXus7H0HYz+LzDRBs2uZ
HJKnLmMRZcA0gTZbpYfCS0BWW70ZoQj5Z77xyqJaHxzuad65WtBvJraTo5KNYCGJ
gPw3z2wADXY0CoqFC3PBLu7/Sao1mOhVE0vg7835ve6qND0HJ2bauHij3LC2RaLs
h6wRFcPLQjRFrI87HSqSYvBqJr7X7iJcY6juWKhvW56iKjPh+Vh0Q8ST6F5oZuyL
dqdTmB2rxa1Asl5FGbzZ2yEgebS7EtewmqmiZyM6Phvgt/uVLAVHzlBsMsPPgCj5
OqVx9Ue1l17ey/JqpIUMXe6M5XGhuGrWiT5+xcPJL26sFgNGs+gPlMAvVw4PhQ==
-----END CERTIFICATE-----
Generated at Mon Oct 26 02:09:41 2026 by rpki-client