Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/TU-8xo3zxQlZ9Vc3tqDJtRhO49M.roa
File: TU-8xo3zxQlZ9Vc3tqDJtRhO49M.roa (raw, json)
Hash identifier: qTCQKHn0kgblk7uexSC93IsYL2hwEcyFRz+mRa2HS+M=
Subject key identifier: 4D:4F:BC:C6:8D:F3:C5:09:59:F5:57:37:B6:A0:C9:B5:18:4E:E3:D3
Certificate issuer: /CN=7a8bae923305a71c526a6fcf57c29d6c16a4269e
Certificate serial: 01A09457A883FE0628A2A5BD5594C9713F15
Authority key identifier: 7A:8B:AE:92:33:05:A7:1C:52:6A:6F:CF:57:C2:9D:6C:16:A4:26:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eouukjMFpxxSam_PV8KdbBakJp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/TU-8xo3zxQlZ9Vc3tqDJtRhO49M.roa
Signing time: Sat 12 Sep 2026 06:39:27 +0000
ROA not before: Sat 12 Sep 2026 06:39:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401163
IP address blocks: 2a10:dbc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eouukjMFpxxSam_PV8KdbBakJp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 03:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:94:57:a8:83:fe:06:28:a2:a5:bd:55:94:c9:71:3f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a8bae923305a71c526a6fcf57c29d6c16a4269e
Validity
Not Before: Sep 12 06:39:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d4fbcc68df3c50959f55737b6a0c9b5184ee3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:94:59:3d:ef:fa:bc:45:48:b5:3b:68:20:72:
89:d5:38:10:96:72:7a:f9:d1:e1:b8:91:b1:01:e6:
ce:04:17:0a:8b:f9:7d:bc:cb:5b:e9:d6:96:e0:9d:
95:67:36:23:c6:af:37:ba:07:34:14:4f:b3:49:3d:
12:6e:a9:3a:67:12:ff:57:d1:66:2d:cc:c9:37:bc:
43:40:e4:2d:ff:60:6f:fe:08:2e:dc:50:6f:54:66:
40:91:a1:fa:3b:24:a4:f3:88:be:ea:31:c2:00:d8:
57:b0:40:ce:7a:2d:6c:e3:63:1e:bf:fc:ba:67:ed:
3f:b4:24:b4:19:01:96:56:4d:25:99:61:63:93:2d:
77:1a:28:27:c7:43:8d:f6:b2:a2:78:7c:21:eb:c5:
a4:5e:55:9d:dc:77:a2:34:01:03:59:c4:b4:47:dc:
aa:43:0f:0b:a3:92:98:f7:d5:24:ee:b3:a3:28:13:
50:e4:a5:7a:cb:3b:b2:c1:79:78:f2:8f:56:72:9c:
72:97:f1:70:79:a6:43:e4:35:a8:f5:22:fb:87:81:
80:9a:7b:73:41:b4:eb:9c:c4:00:01:03:e2:3c:49:
8a:81:35:30:cd:a0:75:a4:17:c7:b1:7a:d8:e8:86:
74:73:c7:e6:69:af:64:f4:c7:71:ae:4a:0b:b6:b4:
70:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4F:BC:C6:8D:F3:C5:09:59:F5:57:37:B6:A0:C9:B5:18:4E:E3:D3
X509v3 Authority Key Identifier:
keyid:7A:8B:AE:92:33:05:A7:1C:52:6A:6F:CF:57:C2:9D:6C:16:A4:26:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eouukjMFpxxSam_PV8KdbBakJp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/TU-8xo3zxQlZ9Vc3tqDJtRhO49M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:dbc0::/29
Signature Algorithm: sha256WithRSAEncryption
9b:bc:6f:fd:44:ee:45:af:a0:44:3f:2a:ed:06:ce:8b:16:26:
b6:1d:3e:70:be:94:48:84:8e:a3:3a:94:a5:c6:2f:3a:8e:81:
98:7a:26:f1:dc:df:40:c3:3d:3b:a3:b4:de:4e:0b:f4:0d:e8:
6f:b1:6e:ed:45:f5:c2:52:e1:83:26:cf:22:80:61:0b:7d:8c:
39:a8:75:68:b6:08:99:38:54:18:33:8a:a9:be:c6:75:c9:f0:
aa:70:6d:61:c2:4c:8c:e1:ad:ae:ab:36:d3:af:c9:08:39:d5:
5c:09:9d:c8:2f:86:72:fc:24:27:f4:ae:db:c7:10:f4:3b:b7:
40:9d:df:ce:2a:6b:f5:10:04:ac:83:ae:46:dc:e1:82:4a:8d:
6e:78:53:8b:f4:fd:31:92:0e:44:88:b6:51:e3:45:5b:98:89:
1e:30:17:0e:a1:bd:e6:4c:bd:1f:06:f7:e7:af:08:ac:e3:0f:
88:c3:96:8e:6d:09:f6:ca:a4:48:f2:0e:55:69:80:7e:8b:e5:
ce:e0:66:d0:4f:0e:c9:c0:82:c6:1d:c2:b4:09:55:2c:7d:cf:
39:71:b9:bd:9f:8d:4a:ad:72:59:27:26:26:fc:b0:ba:c7:0a:
cf:5a:7d:96:d3:7e:b5:57:27:d3:59:0a:11:c7:c7:25:b0:8b:
27:68:d7:e0
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaCUV6iD/gYooqW9VZTJcT8VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhOGJhZTkyMzMwNWE3MWM1MjZhNmZjZjU3YzI5ZDZjMTZh
NDI2OWUwHhcNMjYwOTEyMDYzOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDRmYmNjNjhkZjNjNTA5NTlmNTU3MzdiNmEwYzliNTE4NGVlM2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpRZPe/6vEVItTtoIHKJ1TgQlnJ6
+dHhuJGxAebOBBcKi/l9vMtb6daW4J2VZzYjxq83ugc0FE+zST0Sbqk6ZxL/V9Fm
LczJN7xDQOQt/2Bv/ggu3FBvVGZAkaH6OySk84i+6jHCANhXsEDOei1s42Mev/y6
Z+0/tCS0GQGWVk0lmWFjky13Gignx0ON9rKieHwh68WkXlWd3HeiNAEDWcS0R9yq
Qw8Lo5KY99Uk7rOjKBNQ5KV6yzuywXl48o9Wcpxyl/FweaZD5DWo9SL7h4GAmntz
QbTrnMQAAQPiPEmKgTUwzaB1pBfHsXrY6IZ0c8fmaa9k9MdxrkoLtrRwhwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFE1PvMaN88UJWfVXN7agybUYTuPTMB8GA1UdIwQY
MBaAFHqLrpIzBaccUmpvz1fCnWwWpCaeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZW91dWtqTUZweHhTYW1fUFY4S2RiQmFrSnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yYTFlNWMtMTAxMC00MDk4LTk0Yzkt
ZGUwYzU3MGJhODUwLzEvVFUtOHhvM3p4UWxaOVZjM3RxREp0UmhPNDlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8yYTFlNWMtMTAxMC00MDk4LTk0YzktZGUwYzU3MGJhODUw
LzEvZW91dWtqTUZweHhTYW1fUFY4S2RiQmFrSnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhDbwDAN
BgkqhkiG9w0BAQsFAAOCAQEAm7xv/UTuRa+gRD8q7QbOixYmth0+cL6USISOozqU
pcYvOo6BmHom8dzfQMM9O6O03k4L9A3ob7Fu7UX1wlLhgybPIoBhC32MOah1aLYI
mThUGDOKqb7GdcnwqnBtYcJMjOGtrqs206/JCDnVXAmdyC+GcvwkJ/Su28cQ9Du3
QJ3fzipr9RAErIOuRtzhgkqNbnhTi/T9MZIORIi2UeNFW5iJHjAXDqG95ky9Hwb3
568IrOMPiMOWjm0J9sqkSPIOVWmAfovlzuBm0E8OycCCxh3CtAlVLH3POXG5vZ+N
Sq1yWScmJvywuscKz1p9ltN+tVcn01kKEcfHJbCLJ2jX4A==
-----END CERTIFICATE-----
Generated at Sun Oct 11 10:43:12 2026 by rpki-client