Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/TAOBPT5H68OOFn-aKgpIl79l-88.roa
File: TAOBPT5H68OOFn-aKgpIl79l-88.roa (raw, json)
Hash identifier: r/7rpZ5+y5pBnxkFqNUutBAb1N4xvdrVCeNUer0qRTE=
Subject key identifier: 4C:03:81:3D:3E:47:EB:C3:8E:16:7F:9A:2A:0A:48:97:BF:65:FB:CF
Certificate issuer: /CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Certificate serial: 019FA438349931B6C2A4752C1BB7D31706E0
Authority key identifier: 5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/TAOBPT5H68OOFn-aKgpIl79l-88.roa
Signing time: Mon 27 Jul 2026 15:36:14 +0000
ROA not before: Mon 27 Jul 2026 15:36:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 5.181.82.0/23 maxlen: 24
147.78.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:38:34:99:31:b6:c2:a4:75:2c:1b:b7:d3:17:06:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Validity
Not Before: Jul 27 15:36:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c03813d3e47ebc38e167f9a2a0a4897bf65fbcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:72:9c:e1:86:a1:7c:ad:3f:4d:6c:79:35:74:
c5:ff:c6:a4:9d:e7:52:55:cc:67:ab:c9:46:a2:10:
e6:5b:e0:23:9a:ce:23:36:b2:27:f4:e0:bb:c4:62:
8e:1c:1b:62:0e:49:bc:c6:57:c7:26:3c:75:91:04:
ff:b3:23:06:fe:3b:8a:09:20:7d:4f:ea:3c:35:2e:
eb:1d:7e:80:17:de:89:be:a9:35:5d:7d:a6:7c:24:
33:ba:2c:3a:02:c7:61:1b:c2:12:5e:cb:0b:c4:70:
3c:1a:d6:61:3f:60:66:d7:09:c2:c4:5b:7b:87:b7:
eb:a7:3d:8b:a0:7a:fb:b1:95:8f:15:33:c4:9d:a9:
c3:45:ba:14:1d:8c:0e:f4:29:91:29:a4:3f:12:97:
5a:98:dc:c9:ae:03:3c:5a:b9:02:cf:f8:6c:83:9e:
5c:f5:f9:10:57:7f:aa:5c:2d:1e:f9:7d:c1:d8:d1:
99:6b:9c:bb:51:f2:61:8c:59:c1:62:07:af:52:49:
36:4b:8a:0a:97:73:0e:56:20:eb:78:18:40:d4:c2:
7e:ac:1f:4a:1f:a6:66:48:74:96:eb:18:77:18:8c:
39:95:01:a7:08:c4:80:0c:0a:62:9b:3a:32:b3:2d:
32:34:f6:4c:93:c8:89:a4:9b:3c:96:41:de:ce:b9:
94:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:03:81:3D:3E:47:EB:C3:8E:16:7F:9A:2A:0A:48:97:BF:65:FB:CF
X509v3 Authority Key Identifier:
keyid:5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/TAOBPT5H68OOFn-aKgpIl79l-88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.82.0/23
147.78.141.0/24
Signature Algorithm: sha256WithRSAEncryption
50:17:73:43:65:3e:e7:8d:58:ab:2b:37:56:34:d6:2c:68:f5:
4f:f0:f2:14:bc:94:fe:15:02:15:0a:67:1c:19:e7:01:8d:a7:
71:cb:e9:a3:86:dd:ba:57:5b:cb:41:18:cf:bc:c7:a3:9e:65:
15:26:82:5a:95:12:a1:21:a4:2c:93:fb:de:e7:fc:77:f4:91:
1d:f3:2b:ea:7c:92:4b:0b:a1:9f:83:55:e7:96:88:d9:53:21:
67:43:ab:6e:f1:e7:fb:15:e3:44:41:a1:80:4e:0f:99:35:aa:
8c:f5:0f:e7:86:b8:92:60:94:03:e8:5c:69:d5:80:93:4a:5d:
22:8a:84:5a:0f:0a:8f:32:e8:bd:c0:34:e7:c7:a6:91:37:3f:
68:57:52:8c:b7:c5:10:ae:90:d4:fa:23:0c:eb:8d:9a:63:bb:
90:b9:78:9c:8d:04:d6:02:8b:2c:3a:a6:6c:87:8a:12:f3:4e:
4a:83:a6:f2:19:c6:64:95:0d:61:3a:48:29:4e:3d:56:4c:13:
2d:c5:14:2c:0e:e8:e5:0d:70:33:7a:24:fc:a0:a1:24:0c:b8:
ea:df:00:7b:34:5f:22:06:37:b5:46:92:18:a8:30:73:1b:47:
7e:5a:89:aa:2b:e7:1e:28:62:aa:94:93:48:e6:ba:b9:19:b2:
38:75:4d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:01:22 2026 by rpki-client