Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/Tbj3jue4Ir34-d_uLjsDx-egkyY.roa
File: Tbj3jue4Ir34-d_uLjsDx-egkyY.roa (raw, json)
Hash identifier: e4wh+VeymAMs+D+1EUmqh3Fg1uhMKRd8ZiDK4vSEJL8=
Subject key identifier: 4D:B8:F7:8E:E7:B8:22:BD:F8:F9:DF:EE:2E:3B:03:C7:E7:A0:93:26
Certificate issuer: /CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Certificate serial: 01A18AE86A8E5106A6C46B3A8C4D74271244
Authority key identifier: 37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/Tbj3jue4Ir34-d_uLjsDx-egkyY.roa
Signing time: Fri 30 Oct 2026 03:44:09 +0000
ROA not before: Fri 30 Oct 2026 03:44:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219450
IP address blocks: 5.252.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8a:e8:6a:8e:51:06:a6:c4:6b:3a:8c:4d:74:27:12:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Validity
Not Before: Oct 30 03:44:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4db8f78ee7b822bdf8f9dfee2e3b03c7e7a09326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f8:30:17:da:ff:18:52:2c:cf:4b:75:a5:af:
84:e7:c3:25:04:0e:83:12:92:3a:22:bc:c7:b0:f8:
cc:e0:aa:3d:f7:d6:c4:12:cf:74:3a:64:b8:7e:b1:
46:50:08:98:55:7b:28:d7:8e:cb:fe:48:fc:3f:ef:
22:ab:34:03:fd:0c:01:56:8a:34:4e:e5:ae:4f:34:
8a:40:5d:3d:48:34:fd:18:9d:a5:0f:5b:c8:c3:7b:
94:d4:1c:d0:3c:34:21:3c:c7:ba:35:fd:30:f0:c0:
09:38:07:06:cc:1e:dd:e5:15:fa:b2:bb:ed:27:08:
95:95:88:c0:b9:64:d0:bd:6e:ad:d7:2b:68:7e:0a:
00:7f:1d:15:a0:09:7e:e5:e2:8f:c4:a5:a1:1e:d1:
95:d7:83:e8:9d:62:f8:a6:80:e7:b8:d9:1b:a0:61:
34:9c:65:cf:17:55:5e:3c:4a:cc:b4:37:3f:8f:3b:
be:cf:30:7a:5a:c2:d5:88:6f:5f:cf:f1:39:f0:d6:
21:81:04:33:f2:70:44:e9:ff:f5:08:85:c7:7f:41:
de:0a:1a:7d:11:c1:2d:7b:94:33:d7:51:14:aa:b8:
78:f2:6b:7b:c6:cd:44:0d:b5:b4:c7:52:f8:2a:3c:
00:78:37:9b:5b:06:dd:2c:6e:46:6a:35:8a:40:71:
eb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B8:F7:8E:E7:B8:22:BD:F8:F9:DF:EE:2E:3B:03:C7:E7:A0:93:26
X509v3 Authority Key Identifier:
keyid:37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/Tbj3jue4Ir34-d_uLjsDx-egkyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.96.0/24
Signature Algorithm: sha256WithRSAEncryption
41:4d:d1:1a:12:52:2e:ef:55:9f:0e:15:61:70:9c:a2:58:dc:
43:7c:52:49:9d:1e:f3:c9:71:ea:9c:8d:58:f8:88:e3:bf:bd:
9c:7f:b4:c6:37:83:c0:d5:08:8b:cb:62:3b:e5:dc:8f:59:94:
9a:98:be:9e:7d:2f:ac:26:33:df:00:d4:ec:66:02:79:e0:c4:
ea:0f:7c:34:7f:99:31:55:1d:1e:ca:9a:05:d7:a9:ba:b2:19:
2c:f5:f0:29:eb:6e:a0:6d:be:44:f7:1a:3a:24:13:c0:37:3e:
94:9f:97:65:86:79:8d:e5:5a:41:a8:d6:c9:55:04:73:4d:32:
31:03:b7:36:51:8c:82:9c:a6:fa:9b:7f:66:d0:4e:85:db:75:
20:14:6a:64:bf:c7:00:21:51:cb:4f:e8:ba:f0:d8:4c:73:07:
97:53:64:80:54:1a:d1:e8:54:67:5c:6f:3c:c0:26:02:af:70:
b4:c4:c1:32:79:75:e7:59:5b:d5:44:16:38:df:ef:3a:c0:49:
48:58:d2:d8:2e:a6:5e:11:28:fd:71:cc:fc:9d:66:16:1e:af:
94:96:9e:7e:9e:47:4c:6d:2c:e4:e8:64:60:08:ae:81:76:be:
a5:d7:7b:c7:b4:e6:15:cb:fc:fc:84:71:d0:c8:f0:c2:79:2c:
29:a7:59:c1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaGK6GqOUQamxGs6jE10JxJEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ZDI3ZmMyNDQ0M2ZjZGQ0YjFiNjVjZmM4MDc4YzRhMTQy
ODlmOWUwHhcNMjYxMDMwMDM0NDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGI4Zjc4ZWU3YjgyMmJkZjhmOWRmZWUyZTNiMDNjN2U3YTA5MzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPgwF9r/GFIsz0t1pa+E58MlBA6D
EpI6IrzHsPjM4Ko999bEEs90OmS4frFGUAiYVXso147L/kj8P+8iqzQD/QwBVoo0
TuWuTzSKQF09SDT9GJ2lD1vIw3uU1BzQPDQhPMe6Nf0w8MAJOAcGzB7d5RX6srvt
JwiVlYjAuWTQvW6t1ytofgoAfx0VoAl+5eKPxKWhHtGV14PonWL4poDnuNkboGE0
nGXPF1VePErMtDc/jzu+zzB6WsLViG9fz/E58NYhgQQz8nBE6f/1CIXHf0HeChp9
EcEte5Qz11EUqrh48mt7xs1EDbW0x1L4KjwAeDebWwbdLG5GajWKQHHrxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE24947nuCK9+Pnf7i47A8fnoJMmMB8GA1UdIwQY
MBaAFDfSf8JEQ/zdSxtlz8gHjEoUKJ+eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjlKX3drUkRfTjFMRzJYUHlBZU1TaFFvbjU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9kOGM1OGQtOGQyNC00MjgwLTkxZmQt
NDhiMTY2NGQ0MGQ1LzEvVGJqM2p1ZTRJcjM0LWRfdUxqc0R4LWVna3lZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9kOGM1OGQtOGQyNC00MjgwLTkxZmQtNDhiMTY2NGQ0MGQ1
LzEvTjlKX3drUkRfTjFMRzJYUHlBZU1TaFFvbjU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABfxgMA0G
CSqGSIb3DQEBCwUAA4IBAQBBTdEaElIu71WfDhVhcJyiWNxDfFJJnR7zyXHqnI1Y
+Ijjv72cf7TGN4PA1QiLy2I75dyPWZSamL6efS+sJjPfANTsZgJ54MTqD3w0f5kx
VR0eypoF16m6shks9fAp626gbb5E9xo6JBPANz6Un5dlhnmN5VpBqNbJVQRzTTIx
A7c2UYyCnKb6m39m0E6F23UgFGpkv8cAIVHLT+i68NhMcweXU2SAVBrR6FRnXG88
wCYCr3C0xMEyeXXnWVvVRBY43+86wElIWNLYLqZeESj9ccz8nWYWHq+Ulp5+nkdM
bSzk6GRgCK6Bdr6l13vHtOYVy/z8hHHQyPDCeSwpp1nB
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:25:23 2026 by rpki-client