Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/tTK29H8qvp4tkJzIaGJhuBe1bIU.roa
File: tTK29H8qvp4tkJzIaGJhuBe1bIU.roa (raw, json)
Hash identifier: Tx3i8lMN9fW8zjFWTFnN1j1gzmJPtjiPz2Le6ewXcA0=
Subject key identifier: B5:32:B6:F4:7F:2A:BE:9E:2D:90:9C:C8:68:62:61:B8:17:B5:6C:85
Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial: 01998BA7EEF18D14744C1BB2053662D8898E
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/tTK29H8qvp4tkJzIaGJhuBe1bIU.roa
Signing time: Sat 27 Sep 2025 14:51:02 +0000
ROA not before: Sat 27 Sep 2025 14:51:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 5.102.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:8b:a7:ee:f1:8d:14:74:4c:1b:b2:05:36:62:d8:89:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Validity
Not Before: Sep 27 14:51:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b532b6f47f2abe9e2d909cc8686261b817b56c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ff:74:8d:66:78:81:fc:1d:35:5b:92:f5:25:
94:ca:6a:a7:f3:77:a7:3a:00:60:01:a1:7a:79:6d:
41:0c:1c:f6:da:7b:cd:f1:b5:95:c9:5f:5a:91:60:
e1:51:17:89:78:ea:9c:04:19:4b:ed:c5:bd:f6:68:
d5:72:00:d7:14:17:28:5f:60:1b:74:53:1a:80:81:
1c:dc:37:1c:37:e0:d7:fb:f8:f4:72:31:d2:03:80:
d1:d9:e2:d2:5e:3c:62:18:0c:f5:d9:cf:e4:e5:c4:
96:aa:55:7f:5e:ae:59:17:6c:5b:51:b3:f7:d2:cf:
54:e8:0d:06:0e:19:7a:4e:a5:21:e0:19:9e:7d:ee:
01:67:79:de:7c:cc:85:0b:61:3b:57:83:f1:89:61:
f0:27:87:3c:63:8d:ce:b8:85:ca:4e:6d:63:0b:5d:
ed:46:04:ed:06:f7:92:9e:0c:dc:70:50:21:4d:78:
6f:83:95:42:1a:92:93:87:d8:f0:f7:24:45:64:6b:
58:a9:cf:e2:88:f0:b3:f8:8d:1e:53:5f:cf:57:00:
33:40:b9:d2:97:5b:31:1e:ab:b2:1f:94:4c:37:e0:
82:14:93:6b:49:a6:3f:b3:42:2d:e8:d1:5b:b7:3f:
c6:05:45:48:c4:4a:17:5f:c7:d0:ef:a8:0f:9c:81:
4a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:32:B6:F4:7F:2A:BE:9E:2D:90:9C:C8:68:62:61:B8:17:B5:6C:85
X509v3 Authority Key Identifier:
keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/tTK29H8qvp4tkJzIaGJhuBe1bIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.37.0/24
Signature Algorithm: sha256WithRSAEncryption
48:b7:1c:62:cd:44:b0:a8:52:71:2c:83:26:dc:02:85:00:c6:
2a:ea:9f:78:47:e5:b1:0a:ff:c1:8c:6b:6f:00:33:1b:45:97:
48:cb:14:87:ad:1c:97:45:51:f1:26:9e:6a:9b:cf:59:77:0c:
c1:04:b4:aa:42:64:a6:17:b5:5b:9d:c1:57:ac:02:b6:e9:27:
26:97:b8:76:e1:d9:62:36:40:46:d3:94:77:a2:ae:e9:32:31:
fd:e0:a9:a1:24:0c:f6:0b:d8:93:90:14:ae:b4:fd:53:cb:12:
6f:16:57:8a:28:a4:6c:fa:2a:53:97:43:3a:3b:fa:51:97:a4:
f0:8f:c1:6c:60:2e:11:08:b5:bc:1d:ea:84:55:3e:20:6f:8d:
4b:01:e7:2d:eb:77:38:15:ca:6b:70:43:73:4e:61:13:96:36:
36:45:41:3b:45:76:bb:ac:b9:96:65:1f:ae:a2:df:46:df:af:
2a:9d:ae:46:30:d3:74:0b:d5:0f:a6:64:bb:f4:24:f1:7c:da:
de:bc:34:51:cb:57:5f:45:2d:05:22:0b:5d:eb:51:28:b7:b7:
21:19:e0:c0:72:98:7d:82:0d:32:4c:0c:74:d5:32:7e:b7:af:
fe:95:27:5f:b4:c2:24:9a:43:5f:18:b1:84:cd:87:24:33:ab:
4b:16:88:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZmLp+7xjRR0TBuyBTZi2ImOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZGY3NmM1NGI5ZTY5MzVjMzBhOWI0YzliYTkzMDlhYzQ3
MGVjMDIwHhcNMjUwOTI3MTQ1MTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTMyYjZmNDdmMmFiZTllMmQ5MDljYzg2ODYyNjFiODE3YjU2Yzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/90jWZ4gfwdNVuS9SWUymqn83en
OgBgAaF6eW1BDBz22nvN8bWVyV9akWDhUReJeOqcBBlL7cW99mjVcgDXFBcoX2Ab
dFMagIEc3DccN+DX+/j0cjHSA4DR2eLSXjxiGAz12c/k5cSWqlV/Xq5ZF2xbUbP3
0s9U6A0GDhl6TqUh4Bmefe4BZ3nefMyFC2E7V4PxiWHwJ4c8Y43OuIXKTm1jC13t
RgTtBveSngzccFAhTXhvg5VCGpKTh9jw9yRFZGtYqc/iiPCz+I0eU1/PVwAzQLnS
l1sxHquyH5RMN+CCFJNrSaY/s0It6NFbtz/GBUVIxEoXX8fQ76gPnIFKwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLUytvR/Kr6eLZCcyGhiYbgXtWyFMB8GA1UdIwQY
MBaAFIvfdsVLnmk1wwqbTJupMJrEcOwCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTk5MnhVdWVhVFhEQ3B0TW02a3dtc1J3N0FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8yMTUxOWUtYjhkYy00MjQwLWFhNzgt
OGQyMTg2NjUwMjdkLzEvdFRLMjlIOHF2cDR0a0p6SWFHSmh1QmUxYklVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8yMTUxOWUtYjhkYy00MjQwLWFhNzgtOGQyMTg2NjUwMjdk
LzEvaTk5MnhVdWVhVFhEQ3B0TW02a3dtc1J3N0FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABWYlMA0G
CSqGSIb3DQEBCwUAA4IBAQBItxxizUSwqFJxLIMm3AKFAMYq6p94R+WxCv/BjGtv
ADMbRZdIyxSHrRyXRVHxJp5qm89ZdwzBBLSqQmSmF7VbncFXrAK26Scml7h24dli
NkBG05R3oq7pMjH94KmhJAz2C9iTkBSutP1TyxJvFleKKKRs+ipTl0M6O/pRl6Tw
j8FsYC4RCLW8HeqEVT4gb41LAect63c4FcprcENzTmETljY2RUE7RXa7rLmWZR+u
ot9G368qna5GMNN0C9UPpmS79CTxfNrevDRRy1dfRS0FIgtd61Eot7chGeDAcph9
gg0yTAx01TJ+t6/+lSdftMIkmkNfGLGEzYckM6tLFoht
-----END CERTIFICATE-----
Generated at Sun Oct 19 14:41:17 2025 by rpki-client