Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/TSkmbBltTbG5oGpD_Y2-gqHiTBQ.roa
File: TSkmbBltTbG5oGpD_Y2-gqHiTBQ.roa (raw, json)
Hash identifier: mAgMntzkdDIt94yA57minmvIvDyj/f3wCfM5fqmRxjE=
Subject key identifier: 4D:29:26:6C:19:6D:4D:B1:B9:A0:6A:43:FD:8D:BE:82:A1:E2:4C:14
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01A0C53A9A56F639406ED41BE13EB74F81E6
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/TSkmbBltTbG5oGpD_Y2-gqHiTBQ.roa
Signing time: Mon 21 Sep 2026 18:29:07 +0000
ROA not before: Mon 21 Sep 2026 18:29:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207003
IP address blocks: 2.56.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:3a:9a:56:f6:39:40:6e:d4:1b:e1:3e:b7:4f:81:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Sep 21 18:29:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d29266c196d4db1b9a06a43fd8dbe82a1e24c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:32:5e:f1:3a:72:73:32:79:24:24:de:19:10:
a6:21:2c:d0:45:e4:d7:b1:11:0c:0c:fd:8d:a5:c1:
f3:2a:53:3d:c1:89:7d:9e:a6:68:55:fb:69:4a:73:
ec:c5:a3:ad:6e:50:f1:ce:ca:8d:a1:c8:83:a0:a0:
36:81:88:bf:d4:f6:44:4a:a1:f0:4b:65:30:09:ca:
0f:82:1f:be:97:f5:68:62:27:89:59:e2:02:61:68:
c6:f2:f3:ca:92:c3:51:3d:d2:a9:a4:93:9a:37:36:
32:79:e1:1c:c0:1b:15:9c:03:39:04:d2:9a:ab:62:
19:fd:3f:d0:f5:f8:a4:4f:2c:e5:d6:e2:26:13:18:
33:df:5c:d3:8f:09:58:5c:db:ee:3b:bf:8b:55:40:
81:52:a3:d8:7b:e8:8f:36:0d:62:10:fb:8b:19:79:
39:99:1a:13:77:e9:dd:7e:14:df:84:3b:68:fa:51:
b5:cc:d0:d4:1d:75:c2:9a:e7:64:96:55:9d:89:3b:
99:ef:32:10:fb:35:9e:dc:36:50:9b:52:a0:16:65:
c9:77:1a:6f:e8:93:9c:1f:3c:ae:6f:f2:3c:32:32:
bb:69:79:e6:c4:16:cc:1f:4a:36:f6:17:ea:8f:10:
4f:3b:02:a3:75:04:f4:54:a0:a1:56:86:72:e6:6a:
f4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:29:26:6C:19:6D:4D:B1:B9:A0:6A:43:FD:8D:BE:82:A1:E2:4C:14
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/TSkmbBltTbG5oGpD_Y2-gqHiTBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.3.0/24
Signature Algorithm: sha256WithRSAEncryption
20:ee:fa:6d:96:57:30:64:42:0e:a6:e3:10:22:4b:39:94:7a:
94:78:e7:78:3d:49:5b:e9:3f:82:b2:9a:bd:fb:a0:53:36:88:
90:33:0b:89:21:52:a0:52:ea:35:37:2a:2e:23:f0:48:c9:84:
87:73:75:ff:a0:02:b2:6c:c1:e6:fc:65:c4:f9:7b:92:61:18:
a9:94:87:8b:38:bd:11:a5:90:31:2c:57:0d:ff:6d:d8:81:22:
67:43:5f:95:f1:1f:ac:fe:a7:45:1e:ca:55:51:7a:cc:4b:85:
94:db:ee:25:de:30:7b:bf:c5:50:4c:9d:85:24:f7:d3:88:ba:
e9:0d:8e:bd:24:c8:ee:0d:cd:28:ff:13:07:9c:a2:c4:68:ec:
35:0d:c3:f7:d5:c8:bd:ad:d0:a0:b2:9b:18:5a:b5:5b:d0:18:
cc:18:ec:cc:ca:ae:82:4e:26:87:be:97:09:ee:a4:d1:e1:b5:
33:2b:8d:e4:c7:a0:46:88:5f:09:49:6e:bf:b8:66:08:6a:45:
a4:54:fb:18:4a:f7:80:39:e3:f8:02:e2:4a:11:56:fc:5a:1c:
78:b5:bb:1b:7d:f0:8b:3e:9e:d2:c6:54:3f:d6:7e:4d:a3:57:
6e:d9:8e:3f:97:1f:56:a7:bb:68:20:a1:1b:33:d3:83:78:b0:
99:b6:e6:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDFOppW9jlAbtQb4T63T4HmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw
MjNlYmUwHhcNMjYwOTIxMTgyOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDI5MjY2YzE5NmQ0ZGIxYjlhMDZhNDNmZDhkYmU4MmExZTI0YzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDJe8TpyczJ5JCTeGRCmISzQReTX
sREMDP2NpcHzKlM9wYl9nqZoVftpSnPsxaOtblDxzsqNociDoKA2gYi/1PZESqHw
S2UwCcoPgh++l/VoYieJWeICYWjG8vPKksNRPdKppJOaNzYyeeEcwBsVnAM5BNKa
q2IZ/T/Q9fikTyzl1uImExgz31zTjwlYXNvuO7+LVUCBUqPYe+iPNg1iEPuLGXk5
mRoTd+ndfhTfhDto+lG1zNDUHXXCmudkllWdiTuZ7zIQ+zWe3DZQm1KgFmXJdxpv
6JOcHzyub/I8MjK7aXnmxBbMH0o29hfqjxBPOwKjdQT0VKChVoZy5mr0MwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE0pJmwZbU2xuaBqQ/2NvoKh4kwUMB8GA1UdIwQY
MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt
OTlhY2I5OWNlNzU0LzEvVFNrbWJCbHRUYkc1b0dwRF9ZMi1ncUhpVEJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0
LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjgDMA0G
CSqGSIb3DQEBCwUAA4IBAQAg7vptllcwZEIOpuMQIks5lHqUeOd4PUlb6T+Cspq9
+6BTNoiQMwuJIVKgUuo1NyouI/BIyYSHc3X/oAKybMHm/GXE+XuSYRiplIeLOL0R
pZAxLFcN/23YgSJnQ1+V8R+s/qdFHspVUXrMS4WU2+4l3jB7v8VQTJ2FJPfTiLrp
DY69JMjuDc0o/xMHnKLEaOw1DcP31ci9rdCgspsYWrVb0BjMGOzMyq6CTiaHvpcJ
7qTR4bUzK43kx6BGiF8JSW6/uGYIakWkVPsYSveAOeP4AuJKEVb8Whx4tbsbffCL
Pp7SxlQ/1n5No1du2Y4/lx9Wp7toIKEbM9ODeLCZtuZk
-----END CERTIFICATE-----
Generated at Thu Sep 24 14:09:09 2026 by rpki-client