Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/12da50-ce77-4a15-9d56-8956078144a2/1/tPh9q4Es1lUOr4Bxk22S2XZXPck.roa
File: tPh9q4Es1lUOr4Bxk22S2XZXPck.roa (raw, json)
Hash identifier: Dt+BHwi/gVmE8Y3zSl5BpcPA/QBKnLsdcWn+hxuageo=
Subject key identifier: B4:F8:7D:AB:81:2C:D6:55:0E:AF:80:71:93:6D:92:D9:76:57:3D:C9
Certificate issuer: /CN=d4f0e9ca027af9258054a773d7df3585a27b43ad
Certificate serial: 019C6B527866C23ACCE1F60301FE652B330A
Authority key identifier: D4:F0:E9:CA:02:7A:F9:25:80:54:A7:73:D7:DF:35:85:A2:7B:43:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PDpygJ6-SWAVKdz1981haJ7Q60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/12da50-ce77-4a15-9d56-8956078144a2/1/tPh9q4Es1lUOr4Bxk22S2XZXPck.roa
Signing time: Tue 17 Feb 2026 11:18:12 +0000
ROA not before: Tue 17 Feb 2026 11:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210497
IP address blocks: 176.56.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/12da50-ce77-4a15-9d56-8956078144a2/1/1PDpygJ6-SWAVKdz1981haJ7Q60.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/12da50-ce77-4a15-9d56-8956078144a2/1/1PDpygJ6-SWAVKdz1981haJ7Q60.mft
rsync://rpki.ripe.net/repository/DEFAULT/1PDpygJ6-SWAVKdz1981haJ7Q60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6b:52:78:66:c2:3a:cc:e1:f6:03:01:fe:65:2b:33:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4f0e9ca027af9258054a773d7df3585a27b43ad
Validity
Not Before: Feb 17 11:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4f87dab812cd6550eaf8071936d92d976573dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1d:30:1f:23:be:f9:c0:cf:2e:7a:30:41:f0:
aa:92:58:bb:b5:d2:d3:88:a0:08:0e:77:2f:02:c9:
dc:f3:a6:07:22:77:83:41:4f:44:cc:f8:41:7e:79:
60:1a:59:ec:45:3c:29:b3:3a:11:2a:d9:46:91:b7:
2f:f9:0b:98:b7:d3:af:f0:75:d0:c3:46:90:37:44:
b6:72:44:0c:aa:ec:81:29:45:c0:01:56:47:d6:97:
ac:86:7b:d6:62:c0:8f:ed:e9:e8:e5:2b:bc:98:eb:
9d:6d:9b:8d:72:50:7a:80:70:59:7d:eb:26:b4:e1:
e7:be:62:8e:8d:b8:cb:9b:19:c5:56:9e:2c:db:4f:
4e:e8:94:ef:e2:cc:c5:c8:d6:3d:7a:aa:fc:b8:ce:
d4:2f:2c:37:aa:fd:6f:e4:c5:0e:bd:5d:4b:83:56:
8c:3b:a5:ec:ed:01:7f:07:a5:06:7b:73:d5:fa:74:
43:0f:6a:39:4c:04:6f:e3:d5:dd:58:62:35:74:3c:
68:e4:99:08:b6:e6:2e:0a:08:52:02:c3:3d:60:7e:
c3:da:8d:cd:15:53:6b:77:5a:ca:0e:a5:4a:ce:2c:
f8:65:e0:d4:ff:f2:2c:5a:3e:55:5b:d3:fc:cc:64:
c5:36:69:8a:8a:d6:f4:80:cd:96:61:e2:fb:7c:09:
32:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F8:7D:AB:81:2C:D6:55:0E:AF:80:71:93:6D:92:D9:76:57:3D:C9
X509v3 Authority Key Identifier:
keyid:D4:F0:E9:CA:02:7A:F9:25:80:54:A7:73:D7:DF:35:85:A2:7B:43:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PDpygJ6-SWAVKdz1981haJ7Q60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/12da50-ce77-4a15-9d56-8956078144a2/1/tPh9q4Es1lUOr4Bxk22S2XZXPck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/12da50-ce77-4a15-9d56-8956078144a2/1/1PDpygJ6-SWAVKdz1981haJ7Q60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.56.33.0/24
Signature Algorithm: sha256WithRSAEncryption
31:2a:70:92:1c:af:a5:6b:ec:ad:ad:dd:02:d4:dc:b4:2f:94:
f5:5b:58:d6:5c:0e:95:64:62:c7:1c:83:da:ae:71:41:5f:03:
d4:53:31:76:a9:46:41:5c:2c:7a:20:5d:ab:e7:0d:86:98:de:
29:e4:2d:47:9d:9e:64:4c:5d:f4:fd:45:ae:98:2b:c6:47:3c:
73:8a:f7:5a:c5:8f:1f:ee:d6:f4:45:c0:7d:a8:11:7a:79:eb:
df:2e:cc:cb:38:51:8e:e9:59:fc:94:38:64:36:e9:9d:9e:2a:
d4:0d:47:7c:90:b7:10:88:1f:06:cc:2c:09:85:38:9f:07:11:
3d:18:a4:fe:b8:ab:cc:1e:73:21:52:a8:d1:f6:18:da:3a:25:
f7:19:e9:41:90:8c:9a:dc:d7:87:4c:61:23:ec:f3:41:87:a9:
a8:ca:e7:34:29:84:67:b5:b5:79:7e:92:83:25:4f:a6:af:f2:
7e:33:48:b2:a0:a6:d2:4e:95:58:3c:de:c6:be:c2:b5:fd:f6:
16:56:b1:5f:7d:2a:09:1a:e3:6c:ca:2b:8b:a7:6f:c4:3a:dc:
41:e0:61:7d:dc:43:dc:d2:c2:ac:cb:24:c8:96:c4:cb:11:cb:
f5:b0:09:0c:0e:be:53:3c:28:58:15:9e:48:18:cf:18:75:68:
0d:04:24:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:08:15 2026 by rpki-client