Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/772bad-ecea-4fe2-bc54-6cf9dd5de847/1/hT9HthKgWyq8q-rVTBF9p1k9TLA.roa
File: hT9HthKgWyq8q-rVTBF9p1k9TLA.roa (raw, json)
Hash identifier: McToG8l4SQVqpZGlyPlZlL8W9BAUD58LKc6OEh1ORDk=
Subject key identifier: 85:3F:47:B6:12:A0:5B:2A:BC:AB:EA:D5:4C:11:7D:A7:59:3D:4C:B0
Certificate issuer: /CN=04b369617b5df2a5cfc6e3c9ec1b7039df54b8c3
Certificate serial: 019F50FCA92EEC75EDD5AF016B93584B823B
Authority key identifier: 04:B3:69:61:7B:5D:F2:A5:CF:C6:E3:C9:EC:1B:70:39:DF:54:B8:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLNpYXtd8qXPxuPJ7BtwOd9UuMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/772bad-ecea-4fe2-bc54-6cf9dd5de847/1/hT9HthKgWyq8q-rVTBF9p1k9TLA.roa
Signing time: Sat 11 Jul 2026 11:42:43 +0000
ROA not before: Sat 11 Jul 2026 11:42:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215709
IP address blocks: 45.88.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/772bad-ecea-4fe2-bc54-6cf9dd5de847/1/BLNpYXtd8qXPxuPJ7BtwOd9UuMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/772bad-ecea-4fe2-bc54-6cf9dd5de847/1/BLNpYXtd8qXPxuPJ7BtwOd9UuMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BLNpYXtd8qXPxuPJ7BtwOd9UuMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:50:fc:a9:2e:ec:75:ed:d5:af:01:6b:93:58:4b:82:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04b369617b5df2a5cfc6e3c9ec1b7039df54b8c3
Validity
Not Before: Jul 11 11:42:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=853f47b612a05b2abcabead54c117da7593d4cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c3:1c:51:a8:ec:fa:bb:8c:6f:77:77:25:98:
c6:db:f1:43:da:bd:db:33:b5:5f:52:fe:f0:1a:4c:
bc:d4:fd:10:db:35:49:97:4a:d8:5b:89:45:38:86:
db:28:64:e7:77:d3:b3:dd:3d:30:7d:1c:92:38:87:
2e:3c:d7:cd:39:34:7f:40:ea:55:c3:f6:b9:15:b7:
27:16:a4:51:39:23:a2:d4:9a:31:20:3c:ed:61:ad:
3d:1e:5e:3f:2a:e1:ac:1d:d1:20:8f:c3:09:a2:81:
c2:8f:b4:5e:5a:28:75:a9:0e:7e:bd:b9:45:2a:ba:
dd:8b:07:21:ed:36:60:9b:11:95:d5:9b:ec:9d:42:
d3:d5:a4:48:e7:31:ec:5e:a0:d6:2c:45:20:f7:d5:
74:44:99:d2:2d:41:3a:8d:26:31:c6:47:5f:b6:0d:
09:b7:71:23:c7:01:6f:84:64:59:44:fb:f6:be:07:
c9:8f:9b:97:01:45:40:a1:29:f3:56:f7:f1:5b:61:
11:78:c4:89:a0:0a:fc:5d:8e:88:37:93:2b:54:92:
a0:74:2c:77:8b:59:12:97:ce:a3:d4:68:8e:38:a2:
5b:91:1e:a1:2c:71:c7:0e:22:84:2d:bf:97:a0:cb:
4d:38:c0:d2:05:c3:3f:a6:56:93:2d:b6:94:19:b9:
04:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3F:47:B6:12:A0:5B:2A:BC:AB:EA:D5:4C:11:7D:A7:59:3D:4C:B0
X509v3 Authority Key Identifier:
keyid:04:B3:69:61:7B:5D:F2:A5:CF:C6:E3:C9:EC:1B:70:39:DF:54:B8:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLNpYXtd8qXPxuPJ7BtwOd9UuMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/772bad-ecea-4fe2-bc54-6cf9dd5de847/1/hT9HthKgWyq8q-rVTBF9p1k9TLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/772bad-ecea-4fe2-bc54-6cf9dd5de847/1/BLNpYXtd8qXPxuPJ7BtwOd9UuMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.59.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:3d:d9:d0:44:04:43:db:04:15:8d:cf:ad:0a:d6:9c:54:aa:
ff:e2:65:f4:10:25:e3:46:3b:da:2a:d4:cd:37:fc:60:57:5e:
1d:e4:c9:13:a4:a5:e4:5c:15:05:75:84:f6:b3:a7:b0:ae:d5:
78:42:5c:2a:cb:fd:aa:10:15:d7:d5:0a:06:95:75:9c:02:de:
d2:0a:f7:32:71:88:c0:66:d6:b2:86:bc:38:8d:d5:71:7b:43:
1a:c8:ce:d6:e5:2a:a6:c9:29:42:f4:34:0b:96:ba:48:a2:93:
da:21:ff:fd:01:e1:f7:78:83:4a:6d:67:a6:91:3c:d4:de:30:
11:93:f2:7c:15:37:db:82:4b:53:1f:ba:17:52:a9:40:f8:69:
c6:d5:4e:95:83:04:14:af:86:59:df:ef:4b:df:3f:61:17:47:
56:11:3a:46:b5:d4:fd:bb:3b:91:a2:cd:a7:61:2e:3b:52:ac:
fd:b2:33:d8:69:07:24:6b:c8:fe:93:2e:d8:5a:c6:3d:4d:c4:
13:8e:27:16:39:74:a2:58:66:bb:b9:65:a9:b1:c9:e0:3a:4a:
84:5d:e4:cf:97:cc:29:fe:8f:87:12:a5:cb:ba:a5:b0:2c:0c:
ad:59:a6:7e:d0:f9:b1:66:f0:1a:e9:42:1b:2f:9d:26:87:f3:
d5:de:05:95
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9Q/Kku7HXt1a8Ba5NYS4I7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YjM2OTYxN2I1ZGYyYTVjZmM2ZTNjOWVjMWI3MDM5ZGY1
NGI4YzMwHhcNMjYwNzExMTE0MjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTNmNDdiNjEyYTA1YjJhYmNhYmVhZDU0YzExN2RhNzU5M2Q0Y2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8McUajs+ruMb3d3JZjG2/FD2r3b
M7VfUv7wGky81P0Q2zVJl0rYW4lFOIbbKGTnd9Oz3T0wfRySOIcuPNfNOTR/QOpV
w/a5FbcnFqRROSOi1JoxIDztYa09Hl4/KuGsHdEgj8MJooHCj7ReWih1qQ5+vblF
Krrdiwch7TZgmxGV1ZvsnULT1aRI5zHsXqDWLEUg99V0RJnSLUE6jSYxxkdftg0J
t3EjxwFvhGRZRPv2vgfJj5uXAUVAoSnzVvfxW2EReMSJoAr8XY6IN5MrVJKgdCx3
i1kSl86j1GiOOKJbkR6hLHHHDiKELb+XoMtNOMDSBcM/plaTLbaUGbkEcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIU/R7YSoFsqvKvq1UwRfadZPUywMB8GA1UdIwQY
MBaAFASzaWF7XfKlz8bjyewbcDnfVLjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkxOcFlYdGQ4cVhQeHVQSjdCdHdPZDlVdU1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My83NzJiYWQtZWNlYS00ZmUyLWJjNTQt
NmNmOWRkNWRlODQ3LzEvaFQ5SHRoS2dXeXE4cS1yVlRCRjlwMWs5VExBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My83NzJiYWQtZWNlYS00ZmUyLWJjNTQtNmNmOWRkNWRlODQ3
LzEvQkxOcFlYdGQ4cVhQeHVQSjdCdHdPZDlVdU1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVg7MA0G
CSqGSIb3DQEBCwUAA4IBAQBuPdnQRARD2wQVjc+tCtacVKr/4mX0ECXjRjvaKtTN
N/xgV14d5MkTpKXkXBUFdYT2s6ewrtV4Qlwqy/2qEBXX1QoGlXWcAt7SCvcycYjA
Ztayhrw4jdVxe0MayM7W5SqmySlC9DQLlrpIopPaIf/9AeH3eINKbWemkTzU3jAR
k/J8FTfbgktTH7oXUqlA+GnG1U6VgwQUr4ZZ3+9L3z9hF0dWETpGtdT9uzuRos2n
YS47Uqz9sjPYaQcka8j+ky7YWsY9TcQTjicWOXSiWGa7uWWpscngOkqEXeTPl8wp
/o+HEqXLuqWwLAytWaZ+0PmxZvAa6UIbL50mh/PV3gWV
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:11:29 2026 by rpki-client