Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/S-xpvTfe2PvsRXaln09DzsrWDdE.roa
File: S-xpvTfe2PvsRXaln09DzsrWDdE.roa (raw, json)
Hash identifier: Q3/9aVjL0eREXtwdx951wmOB3uEdiLjhnjXc+EgEZO8=
Subject key identifier: 4B:EC:69:BD:37:DE:D8:FB:EC:45:76:A5:9F:4F:43:CE:CA:D6:0D:D1
Certificate issuer: /CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Certificate serial: 01A1BB4C6611296B20BE6EF03CE89FB7CA25
Authority key identifier: 4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/S-xpvTfe2PvsRXaln09DzsrWDdE.roa
Signing time: Sun 08 Nov 2026 13:15:08 +0000
ROA not before: Sun 08 Nov 2026 13:15:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48539
IP address blocks: 5.252.156.0/24 maxlen: 24
79.98.33.0/24 maxlen: 24
79.98.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bb:4c:66:11:29:6b:20:be:6e:f0:3c:e8:9f:b7:ca:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Validity
Not Before: Nov 8 13:15:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4bec69bd37ded8fbec4576a59f4f43cecad60dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:dc:67:62:df:b9:46:3d:59:1f:b1:e2:ae:f9:
a9:d3:5b:55:f8:00:f6:d8:bc:b4:f8:3d:b8:52:e0:
d7:96:fe:2f:26:1b:da:20:a7:ae:2f:c1:89:4f:9f:
94:a1:6b:47:91:f5:3a:99:bc:5f:03:7b:6d:7c:d3:
d4:72:3f:ae:cb:e4:d6:02:74:db:f1:7d:62:48:3c:
00:65:c5:f7:90:32:56:b6:49:53:18:96:b5:28:b7:
8c:f6:d3:c6:bd:d2:94:4f:d0:68:0d:f8:59:f9:c1:
69:12:82:73:e5:61:b4:ef:66:6d:47:b0:d9:89:8e:
20:65:8f:4e:5e:2f:73:7f:39:85:99:f8:5a:39:ab:
32:31:44:e4:59:a0:85:f2:7a:20:ab:0a:ce:96:39:
a2:1b:0c:71:13:6a:50:f2:f3:8e:5d:c8:ad:e1:00:
53:08:c3:b0:d8:30:77:b5:fe:5b:d4:d3:ba:73:45:
ff:ce:26:42:3c:ba:db:d7:08:25:13:cd:71:48:46:
48:cf:ac:57:c0:45:48:61:d6:5e:3b:06:a7:de:9c:
57:8f:c5:95:4c:7e:bb:24:d2:7b:42:03:4c:46:04:
c4:37:10:87:26:58:09:ba:af:17:18:03:fa:1d:7d:
c4:ea:1d:b4:99:e2:c5:56:67:04:13:72:1a:e6:32:
75:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:EC:69:BD:37:DE:D8:FB:EC:45:76:A5:9F:4F:43:CE:CA:D6:0D:D1
X509v3 Authority Key Identifier:
keyid:4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/S-xpvTfe2PvsRXaln09DzsrWDdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.156.0/24
79.98.33.0/24
79.98.39.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:30:a6:f6:49:07:22:8b:23:99:b6:87:5e:d2:c7:0b:26:56:
3e:98:a4:1c:c2:58:b8:92:77:be:32:4b:b6:d0:73:3e:16:34:
37:c8:8f:03:aa:58:af:7c:32:ac:9f:83:54:23:ee:12:2e:1e:
9b:2f:8e:4b:1a:fc:91:4e:c8:31:67:ce:b5:06:ca:21:33:88:
61:e4:c1:23:cc:ea:44:76:fe:ef:05:bc:c3:90:b1:26:22:4f:
97:a3:33:c4:93:8b:58:8b:b3:ef:db:b7:5b:89:70:5c:74:d8:
1a:80:48:27:06:db:2b:b1:a3:c3:7e:05:60:f7:3b:ad:b1:09:
62:b4:88:2f:0e:69:ee:c8:91:c8:ba:18:db:98:ab:05:ac:dc:
2a:fd:01:5b:e8:ec:3c:ad:28:09:1a:86:ea:e7:c8:d2:f9:0c:
44:62:bc:64:50:56:4f:3e:79:3a:1d:6e:90:55:db:6f:1e:71:
49:c5:08:8e:8d:a5:3f:c2:a1:05:ab:c1:28:83:2e:13:93:75:
02:dd:14:d8:ec:4f:e1:b5:c6:c3:6b:ed:c5:8f:ca:37:50:13:
f8:45:5b:c0:46:2a:13:a9:4b:06:e6:76:8e:8d:a7:8b:a2:70:
b1:5d:b3:49:c1:1a:ed:f1:b4:15:72:89:a1:96:b1:db:f7:ec:
a6:8c:42:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:40:51 2026 by rpki-client