Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/4_TTRfrA4hvyb8aeVnebRoG9aZ4.roa
File: 4_TTRfrA4hvyb8aeVnebRoG9aZ4.roa (raw, json)
Hash identifier: 3NbkuqOTF46pDYs4QB6pgruxYNEcPm4QNzecOj1ivnE=
Subject key identifier: E3:F4:D3:45:FA:C0:E2:1B:F2:6F:C6:9E:56:77:9B:46:81:BD:69:9E
Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Certificate serial: 019F17AD0C65EC79747CC7CB78B684CD5CF5
Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/4_TTRfrA4hvyb8aeVnebRoG9aZ4.roa
Signing time: Tue 30 Jun 2026 08:37:24 +0000
ROA not before: Tue 30 Jun 2026 08:37:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211912
IP address blocks: 65.181.120.0/24 maxlen: 24
65.181.121.0/24 maxlen: 24
65.181.122.0/24 maxlen: 24
65.181.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:ad:0c:65:ec:79:74:7c:c7:cb:78:b6:84:cd:5c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Validity
Not Before: Jun 30 08:37:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3f4d345fac0e21bf26fc69e56779b4681bd699e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9a:71:e2:33:8f:7b:d5:ed:ec:72:ed:d2:1a:
fd:6f:b8:65:de:67:b2:37:c1:ac:56:28:9f:95:29:
27:54:a9:bb:ca:a4:b8:65:23:9b:cf:68:4c:d8:bf:
72:0a:7a:5c:25:25:26:ce:dc:cf:70:a5:5f:c5:54:
f1:ed:8a:5e:24:79:8c:f2:9c:d8:a3:89:56:24:2d:
96:4e:6a:21:68:e2:ff:88:a9:43:c4:78:13:4a:6c:
ee:13:77:13:85:60:a8:39:f1:52:59:9e:95:83:5a:
fd:97:4e:47:c4:b5:a7:d1:b1:0c:3c:82:cd:1f:dc:
05:06:88:7e:86:3f:a2:da:86:53:91:62:b1:da:55:
3c:bc:fe:0c:f7:b2:07:fe:e8:e6:19:45:b4:1f:e0:
c6:0a:5b:f0:93:72:d6:7e:29:c0:8f:bd:05:06:60:
f4:24:39:80:df:b0:31:23:0d:ed:82:3b:c7:95:47:
be:13:74:d8:c2:7b:42:c5:a9:38:77:37:f8:94:b8:
02:78:7d:a3:1a:6b:bb:d2:a0:c7:64:ea:ab:ed:76:
d4:89:16:a5:17:98:5c:5e:6a:a0:dc:a2:b0:ef:a3:
e2:f8:5a:a5:3a:8a:41:95:d8:f8:26:94:2d:1a:7e:
0c:f2:85:d2:9a:ac:6b:46:76:ed:45:7e:e0:53:b9:
86:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F4:D3:45:FA:C0:E2:1B:F2:6F:C6:9E:56:77:9B:46:81:BD:69:9E
X509v3 Authority Key Identifier:
keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/4_TTRfrA4hvyb8aeVnebRoG9aZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.181.120.0-65.181.122.255
65.181.126.0/24
Signature Algorithm: sha256WithRSAEncryption
49:e3:d4:0c:14:99:54:ce:69:30:36:5e:5f:bc:82:78:0a:e2:
d6:c7:40:33:c8:b6:06:61:03:33:13:93:2d:e4:95:22:69:3c:
5b:3b:3c:3a:2a:44:71:82:f6:9f:02:b9:b6:37:a8:74:47:8a:
f1:85:8c:4e:ba:3c:2e:01:ee:e2:8e:9a:e7:1f:d5:8a:6f:80:
16:91:a9:67:58:be:8d:d2:88:f9:ac:0b:e6:56:ac:b5:d6:c2:
b6:f7:e2:e6:7f:ac:38:9c:55:d5:58:07:e2:ab:9f:a0:28:16:
18:da:9e:84:b1:87:bf:d7:af:24:93:e7:38:2a:48:45:c5:cb:
d2:0c:f2:58:34:a9:77:99:6b:79:c8:4b:3a:32:47:90:33:1b:
cf:7e:91:53:82:6e:50:84:59:71:24:52:aa:42:29:34:67:9d:
00:97:8b:27:1d:24:98:36:71:10:8f:3f:d4:3e:68:30:63:2b:
51:37:c8:2a:bb:42:ac:5f:d3:03:9f:9b:7f:74:9f:5c:29:55:
54:6c:a2:57:94:13:62:8d:57:48:cd:0a:8b:36:c0:8c:b8:d6:
c3:d1:5d:91:68:77:9c:98:ff:ff:6d:2d:7c:e7:e6:9d:4d:2a:
87:90:41:63:5e:0e:2e:fd:6e:38:5f:12:29:b4:94:ed:e7:08:
cf:d5:42:3b
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZ8XrQxl7Hl0fMfLeLaEzVz1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyY2Q5YTY1MTJkYmYyNWE1ZjE5YjgyN2Q3YTJjN2UyMmEy
ZWU4ZGQwHhcNMjYwNjMwMDgzNzI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2Y0ZDM0NWZhYzBlMjFiZjI2ZmM2OWU1Njc3OWI0NjgxYmQ2OTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZpx4jOPe9Xt7HLt0hr9b7hl3mey
N8GsViiflSknVKm7yqS4ZSObz2hM2L9yCnpcJSUmztzPcKVfxVTx7YpeJHmM8pzY
o4lWJC2WTmohaOL/iKlDxHgTSmzuE3cThWCoOfFSWZ6Vg1r9l05HxLWn0bEMPILN
H9wFBoh+hj+i2oZTkWKx2lU8vP4M97IH/ujmGUW0H+DGClvwk3LWfinAj70FBmD0
JDmA37AxIw3tgjvHlUe+E3TYwntCxak4dzf4lLgCeH2jGmu70qDHZOqr7XbUiRal
F5hcXmqg3KKw76Pi+FqlOopBldj4JpQtGn4M8oXSmqxrRnbtRX7gU7mGHQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFOP000X6wOIb8m/GnlZ3m0aBvWmeMB8GA1UdIwQY
MBaAFFLNmmUS2/JaXxm4J9eix+IqLujdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUt
Y2NhMzc2MDZiZjE4LzEvNF9UVFJmckE0aHZ5YjhhZVZuZWJSb0c5YVo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUtY2NhMzc2MDZiZjE4
LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBANBtXgD
BABBtXoDBABBtX4wDQYJKoZIhvcNAQELBQADggEBAEnj1AwUmVTOaTA2Xl+8gngK
4tbHQDPItgZhAzMTky3klSJpPFs7PDoqRHGC9p8CubY3qHRHivGFjE66PC4B7uKO
mucf1YpvgBaRqWdYvo3SiPmsC+ZWrLXWwrb34uZ/rDicVdVYB+Krn6AoFhjanoSx
h7/XryST5zgqSEXFy9IM8lg0qXeZa3nISzoyR5AzG89+kVOCblCEWXEkUqpCKTRn
nQCXiycdJJg2cRCPP9Q+aDBjK1E3yCq7Qqxf0wOfm390n1wpVVRsoleUE2KNV0jN
Cos2wIy41sPRXZFod5yY//9tLXzn5p1NKoeQQWNeDi79bjhfEim0lO3nCM/VQjs=
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:08:13 2026 by rpki-client