Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/TPy7bsrR3rHmdRPQWHmTxdaMWS8.roa
File: TPy7bsrR3rHmdRPQWHmTxdaMWS8.roa (raw, json)
Hash identifier: vNjacqkelBMEtJwLV0kyf/dqQ/70VUAoh9Tq8bIaihg=
Subject key identifier: 4C:FC:BB:6E:CA:D1:DE:B1:E6:75:13:D0:58:79:93:C5:D6:8C:59:2F
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 019CE682B30FB8A2D3FD9E356CDF39A95F54
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/TPy7bsrR3rHmdRPQWHmTxdaMWS8.roa
Signing time: Fri 13 Mar 2026 09:24:10 +0000
ROA not before: Fri 13 Mar 2026 09:24:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198250
IP address blocks: 185.58.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:82:b3:0f:b8:a2:d3:fd:9e:35:6c:df:39:a9:5f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Mar 13 09:24:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4cfcbb6ecad1deb1e67513d0587993c5d68c592f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:51:65:35:85:1c:0b:44:1e:4f:11:86:98:65:
7c:1d:e2:c6:71:87:15:a0:d4:5d:97:3d:c1:87:4a:
5a:88:54:7f:5f:42:63:7a:65:4e:e4:d2:b6:9f:3f:
27:3f:68:75:52:14:a4:bf:08:2d:e5:17:88:cd:ac:
68:64:6b:50:aa:9a:ac:fa:52:c2:6e:06:73:f6:6f:
6a:0e:01:a3:7f:72:ee:b5:bb:bb:96:a4:7a:a1:4f:
54:92:8a:ba:d9:aa:f6:6b:fe:5c:3d:62:d6:bc:c3:
66:b3:71:3d:50:a9:82:22:ec:de:a5:3e:9a:72:3b:
87:e7:4c:69:04:2d:dc:8d:60:97:33:87:a5:7a:92:
8b:b0:38:b9:15:aa:a4:5d:d0:21:4f:33:b5:ef:19:
8b:f7:12:f6:b7:3a:c7:cc:b2:91:10:77:6c:fd:b7:
d6:8c:6b:27:9e:89:90:8b:ad:f0:f7:36:f9:26:3f:
fb:6f:ec:d7:4e:3b:aa:3b:ff:92:e2:a4:1c:7c:b3:
78:f9:36:f9:07:7e:fd:d0:5f:ed:d8:09:4b:71:12:
76:22:59:4b:28:24:62:00:b1:0e:e4:71:fa:88:7b:
98:01:44:a1:44:6c:86:24:2d:af:37:75:e0:aa:cd:
1b:bd:fd:ca:be:f5:e9:e3:5d:42:1f:e7:16:6b:21:
b2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FC:BB:6E:CA:D1:DE:B1:E6:75:13:D0:58:79:93:C5:D6:8C:59:2F
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/TPy7bsrR3rHmdRPQWHmTxdaMWS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.58.23.0/24
Signature Algorithm: sha256WithRSAEncryption
79:1d:c2:b4:37:41:53:b9:53:65:5b:a1:f6:41:cf:5f:2c:5d:
bb:e9:91:89:0a:71:42:92:50:1f:3b:c7:4c:0b:a1:5c:7c:ea:
be:19:55:4c:9a:ea:8d:c9:49:51:59:0b:75:a0:81:f6:9c:47:
f7:3f:82:c1:16:06:8d:99:25:90:c6:9e:cd:8a:23:2a:d4:69:
1a:49:cb:d3:cc:58:af:b0:26:8f:9e:3d:c5:69:c3:32:ee:85:
54:e0:85:f8:e3:5d:09:ac:e8:f0:b2:28:30:bd:c9:f2:0c:30:
9e:57:80:b9:f8:53:d0:ac:85:16:36:d7:4e:0d:9b:41:ef:20:
5b:56:38:06:85:b4:06:1c:de:91:70:ef:3d:a4:7f:db:11:ef:
dd:db:bd:d5:5c:da:44:38:30:cd:3c:d9:2f:38:1a:08:24:8e:
39:b7:dd:6e:aa:11:9e:3d:07:bb:34:0a:9e:4d:d5:8f:93:bb:
f2:06:6f:70:34:9e:34:54:f5:03:63:5e:79:a1:b6:ae:3c:f0:
72:67:b5:60:bf:1c:af:29:3c:fb:62:ec:f5:8c:33:79:45:25:
2b:3c:9d:2d:43:e9:58:d7:bd:df:fe:1b:45:b6:bf:a6:f1:4e:
21:9f:cd:f2:ae:75:34:dd:22:71:8b:be:94:d0:33:11:76:41:
70:09:b2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:46:28 2026 by rpki-client