Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/TXguGT_UTl1GdyDJUiKFRpuOX_o.roa
File: TXguGT_UTl1GdyDJUiKFRpuOX_o.roa (raw, json)
Hash identifier: fAuVLNao9cvO8YJmECjpJXFSsNjlEB4NUGFkoGhsksY=
Subject key identifier: 4D:78:2E:19:3F:D4:4E:5D:46:77:20:C9:52:22:85:46:9B:8E:5F:FA
Certificate issuer: /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Certificate serial: 01A0E89D8C6017BC13CA43DAEF7E36C07A9D
Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/TXguGT_UTl1GdyDJUiKFRpuOX_o.roa
Signing time: Mon 28 Sep 2026 15:23:54 +0000
ROA not before: Mon 28 Sep 2026 15:23:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 131.162.148.0/24 maxlen: 24
131.162.149.0/24 maxlen: 24
131.162.150.0/24 maxlen: 24
131.162.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:9d:8c:60:17:bc:13:ca:43:da:ef:7e:36:c0:7a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Validity
Not Before: Sep 28 15:23:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d782e193fd44e5d467720c9522285469b8e5ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ff:52:5d:27:c3:1f:88:c1:41:f2:b5:0f:ed:
30:81:ac:d5:d1:d6:6c:8d:4b:f8:2e:38:68:08:cd:
8b:67:85:22:72:15:d7:a1:a4:b7:d6:09:1e:f2:22:
eb:cc:64:db:d2:24:3b:a8:17:9e:a1:d5:a6:d7:74:
23:98:a6:32:ec:b0:35:34:0f:43:ea:fd:cd:92:4f:
cd:b1:fa:fa:3b:40:1f:22:99:63:e8:c3:13:2c:e1:
aa:11:f1:72:fe:00:b8:95:b5:17:6e:31:ed:90:5d:
13:40:11:8a:bc:5e:72:bc:9a:08:cc:a5:71:c5:57:
2c:a2:01:5a:42:d6:1e:64:e0:6e:a9:54:16:62:93:
fa:ba:bf:fa:35:a0:0c:22:b6:51:07:46:0d:45:3c:
e4:34:b4:e5:b2:3e:80:06:79:9b:0b:31:ed:00:d2:
db:9f:bf:ca:85:b3:be:67:aa:0e:19:bb:58:fa:93:
ad:f6:65:92:d4:b3:29:d0:81:83:78:5c:b4:fa:3f:
cb:2c:44:db:c2:5d:3c:22:4f:17:17:f8:77:d4:2e:
3c:8b:15:0e:d2:a0:c4:42:9e:82:1f:86:21:5c:ea:
bc:36:d4:36:dc:44:b0:e4:f8:ba:91:c2:3c:00:97:
65:d2:42:61:77:7e:93:37:0d:71:b4:27:53:bd:c6:
08:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:78:2E:19:3F:D4:4E:5D:46:77:20:C9:52:22:85:46:9B:8E:5F:FA
X509v3 Authority Key Identifier:
keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/TXguGT_UTl1GdyDJUiKFRpuOX_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.162.148.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:eb:50:b3:7b:dd:d2:5f:e9:39:b8:01:ee:15:71:13:ba:7e:
90:c4:a4:d7:b3:b5:17:4a:30:a9:31:e7:21:49:00:ea:21:ea:
f2:96:b1:35:12:5c:ae:07:6c:0b:a3:2e:f2:e7:cd:60:13:27:
10:6c:90:db:0d:fe:a3:01:7c:91:ae:6b:f8:98:67:90:0a:22:
b4:a6:f0:e9:df:bc:f2:05:17:d9:95:50:9e:97:17:79:07:0b:
b7:b6:20:e7:55:8c:d4:31:7a:ea:17:2c:d5:c2:50:39:c9:30:
29:62:4d:d2:0e:58:4b:ce:38:56:1a:c1:23:6c:07:42:61:9f:
ad:3b:9e:1c:fb:2b:6f:bf:1e:ec:b5:3b:c5:dc:4c:a8:1b:6f:
12:4a:7b:38:40:c7:7c:d2:ab:75:27:c7:6b:67:e4:10:f0:c7:
60:9e:21:40:c7:fc:ae:27:6b:8a:13:0f:70:1f:07:9b:b5:64:
15:8e:88:62:80:fc:94:18:5d:ba:f9:9d:80:fd:d5:5a:85:3a:
9a:5d:78:24:12:2e:e4:6c:32:ef:b3:95:4e:62:f5:de:a8:4d:
25:69:1f:7e:ac:54:cf:b3:05:72:ef:91:bf:75:eb:11:99:04:
c3:e5:36:83:73:a9:c4:c2:99:ec:15:27:8f:42:f3:bc:da:ab:
40:ec:aa:eb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDonYxgF7wTykPa7342wHqdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNjdiZmY3YmFkMWViODM4NGI1ODVkZjdiZWYxMjA2Zjdm
MTlmN2UwHhcNMjYwOTI4MTUyMzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDc4MmUxOTNmZDQ0ZTVkNDY3NzIwYzk1MjIyODU0NjliOGU1ZmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4v9SXSfDH4jBQfK1D+0wgazV0dZs
jUv4LjhoCM2LZ4UichXXoaS31gke8iLrzGTb0iQ7qBeeodWm13QjmKYy7LA1NA9D
6v3Nkk/Nsfr6O0AfIplj6MMTLOGqEfFy/gC4lbUXbjHtkF0TQBGKvF5yvJoIzKVx
xVcsogFaQtYeZOBuqVQWYpP6ur/6NaAMIrZRB0YNRTzkNLTlsj6ABnmbCzHtANLb
n7/KhbO+Z6oOGbtY+pOt9mWS1LMp0IGDeFy0+j/LLETbwl08Ik8XF/h31C48ixUO
0qDEQp6CH4YhXOq8NtQ23ESw5Pi6kcI8AJdl0kJhd36TNw1xtCdTvcYIKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE14Lhk/1E5dRncgyVIihUabjl/6MB8GA1UdIwQY
MBaAFLpnv/e60euDhLWF33vvEgb38Z9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYt
ZGE0NTM4MDIyYWM3LzEvVFhndUdUX1VUbDFHZHlESlVpS0ZScHVPWF9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYtZGE0NTM4MDIyYWM3
LzEvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg6KUMA0G
CSqGSIb3DQEBCwUAA4IBAQBu61Cze93SX+k5uAHuFXETun6QxKTXs7UXSjCpMech
SQDqIerylrE1ElyuB2wLoy7y581gEycQbJDbDf6jAXyRrmv4mGeQCiK0pvDp37zy
BRfZlVCelxd5Bwu3tiDnVYzUMXrqFyzVwlA5yTApYk3SDlhLzjhWGsEjbAdCYZ+t
O54c+ytvvx7stTvF3EyoG28SSns4QMd80qt1J8drZ+QQ8MdgniFAx/yuJ2uKEw9w
HwebtWQVjohigPyUGF26+Z2A/dVahTqaXXgkEi7kbDLvs5VOYvXeqE0laR9+rFTP
swVy75G/desRmQTD5TaDc6nEwpnsFSePQvO82qtA7Krr
-----END CERTIFICATE-----
Generated at Sat Oct 10 13:04:31 2026 by rpki-client