Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/TM-R16-l-_4qBeX3WOo2R2H4k8s.roa
File: TM-R16-l-_4qBeX3WOo2R2H4k8s.roa (raw, json)
Hash identifier: ogvMCZIANzxx4zHltxVbkURfMzApLIY4irSCMQZoQ/E=
Subject key identifier: 4C:CF:91:D7:AF:A5:FB:FE:2A:05:E5:F7:58:EA:36:47:61:F8:93:CB
Certificate issuer: /CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
Certificate serial: 01A1AF85CCF377A524ED1D37B5F8B7E48B2D
Authority key identifier: 54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/TM-R16-l-_4qBeX3WOo2R2H4k8s.roa
Signing time: Fri 06 Nov 2026 06:22:23 +0000
ROA not before: Fri 06 Nov 2026 06:22:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218261
IP address blocks: 95.85.192.0/24 maxlen: 24
95.85.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:af:85:cc:f3:77:a5:24:ed:1d:37:b5:f8:b7:e4:8b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
Validity
Not Before: Nov 6 06:22:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ccf91d7afa5fbfe2a05e5f758ea364761f893cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:eb:7e:81:0b:68:03:d0:06:4a:1e:79:32:9c:
37:f4:0b:bf:9b:c6:3e:63:23:f8:9c:5c:20:a3:c1:
d0:cb:1e:5d:18:7e:d8:09:5d:67:59:fe:13:cf:ce:
03:d7:29:25:aa:ae:83:cd:57:04:7e:45:4c:51:32:
30:bd:29:9c:3d:fe:e8:f0:29:2f:34:4b:04:27:e0:
ed:20:1c:cb:fe:5d:95:2e:4a:3e:7f:4d:77:5c:94:
3f:71:d0:03:db:de:22:c1:27:c7:cc:df:c0:ad:cb:
63:93:ba:48:ae:81:ea:d1:53:c5:bd:f3:58:65:9a:
27:f2:9c:d4:2a:64:a8:a0:0e:8f:72:de:87:e2:26:
db:ea:92:4b:41:a5:cd:cd:b8:21:7b:62:f6:0c:9d:
3d:7c:28:f9:ea:96:a9:e6:bb:89:ba:ea:98:f1:d9:
a0:a4:e6:ba:eb:6d:0d:fe:88:7f:0f:be:02:6a:39:
0f:01:e0:79:f5:b9:58:d8:c0:24:7b:a1:23:95:1c:
8a:e8:40:3e:a5:c0:a7:ca:65:6b:82:49:e7:9e:1c:
bc:86:51:1f:8e:c9:5e:bb:1e:c8:0a:74:90:d3:a9:
e8:ad:ff:b8:1b:95:58:81:59:a2:43:9d:0c:82:fc:
f5:16:1a:d4:d2:60:55:5f:76:59:16:30:42:48:e8:
57:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CF:91:D7:AF:A5:FB:FE:2A:05:E5:F7:58:EA:36:47:61:F8:93:CB
X509v3 Authority Key Identifier:
keyid:54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/TM-R16-l-_4qBeX3WOo2R2H4k8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.85.192.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:d7:81:8f:74:76:f2:64:75:f5:29:e5:3d:4b:d9:31:1c:70:
97:d8:00:fe:cb:f3:58:49:3f:04:6f:c7:86:f2:93:dd:f1:d6:
ce:55:7a:37:1b:bc:c1:6e:ae:fc:a5:2c:a7:0f:e7:95:6b:5d:
a6:77:af:fc:58:e9:8b:ba:b8:06:cf:db:9b:17:c4:62:f8:b8:
ef:ec:0b:d4:45:65:89:51:6a:e2:e6:fe:74:41:a0:43:d7:64:
4a:cb:2f:c6:7b:46:0e:d4:de:af:35:60:e1:ad:3b:ed:47:9f:
40:fa:9e:cb:88:6b:a1:c6:2b:0f:1f:ca:38:ba:45:77:bd:e7:
f0:5d:30:1f:ce:03:fd:6f:c6:36:83:bc:19:1c:56:80:9f:d0:
30:d1:db:39:09:97:81:12:a6:9f:1b:90:ce:f5:b7:e9:6f:dd:
17:77:51:eb:f2:ba:78:a6:a8:2b:45:82:44:dc:ee:7c:bc:32:
b0:1c:70:4e:fe:3a:53:b2:b5:1a:da:e4:e6:b3:07:b9:dd:6a:
de:61:46:17:80:c1:8b:c4:41:b5:f2:97:57:7e:44:df:2b:01:
4f:33:2a:65:4a:36:e2:6f:63:f3:c2:26:9d:cd:60:3e:98:f1:
02:66:7f:3e:dc:37:e6:3a:cd:61:a5:55:17:8b:10:6f:60:3a:
43:c8:59:f5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaGvhczzd6Uk7R03tfi35IstMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YjBiZWM4ZjU4ZGIwY2U1YjkxZjM0NTA1Mjc3ZTQwYmZk
M2FlMTEwHhcNMjYxMTA2MDYyMjIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2NmOTFkN2FmYTVmYmZlMmEwNWU1Zjc1OGVhMzY0NzYxZjg5M2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsut+gQtoA9AGSh55Mpw39Au/m8Y+
YyP4nFwgo8HQyx5dGH7YCV1nWf4Tz84D1yklqq6DzVcEfkVMUTIwvSmcPf7o8Ckv
NEsEJ+DtIBzL/l2VLko+f013XJQ/cdAD294iwSfHzN/Arctjk7pIroHq0VPFvfNY
ZZon8pzUKmSooA6Pct6H4ibb6pJLQaXNzbghe2L2DJ09fCj56pap5ruJuuqY8dmg
pOa6620N/oh/D74CajkPAeB59blY2MAke6EjlRyK6EA+pcCnymVrgknnnhy8hlEf
jsleux7ICnSQ06norf+4G5VYgVmiQ50Mgvz1FhrU0mBVX3ZZFjBCSOhXWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEzPkdevpfv+KgXl91jqNkdh+JPLMB8GA1UdIwQY
MBaAFFSwvsj1jbDOW5HzRQUnfkC/064RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkxDLXlQV05zTTVia2ZORkJTZC1RTF9UcmhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8yYWQzNGUtYjFlNS00ZDhjLTk0OGUt
MGY0ZGJiODkwYmQwLzEvVE0tUjE2LWwtXzRxQmVYM1dPbzJSMkg0azhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8yYWQzNGUtYjFlNS00ZDhjLTk0OGUtMGY0ZGJiODkwYmQw
LzEvVkxDLXlQV05zTTVia2ZORkJTZC1RTF9UcmhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBX1XAMA0G
CSqGSIb3DQEBCwUAA4IBAQBP14GPdHbyZHX1KeU9S9kxHHCX2AD+y/NYST8Eb8eG
8pPd8dbOVXo3G7zBbq78pSynD+eVa12md6/8WOmLurgGz9ubF8Ri+Ljv7AvURWWJ
UWri5v50QaBD12RKyy/Ge0YO1N6vNWDhrTvtR59A+p7LiGuhxisPH8o4ukV3vefw
XTAfzgP9b8Y2g7wZHFaAn9Aw0ds5CZeBEqafG5DO9bfpb90Xd1Hr8rp4pqgrRYJE
3O58vDKwHHBO/jpTsrUa2uTmswe53WreYUYXgMGLxEG18pdXfkTfKwFPMyplSjbi
b2PzwiadzWA+mPECZn8+3DfmOs1hpVUXixBvYDpDyFn1
-----END CERTIFICATE-----
Generated at Sat Nov 14 23:23:50 2026 by rpki-client