Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TIhi7Vy-hmqTcxKKa7tXwbl-B20.roa
File: TIhi7Vy-hmqTcxKKa7tXwbl-B20.roa (raw, json)
Hash identifier: YKLcsdm9NF0vtSP14JfQ7qo38RXAAQkIOojvs6Nu6l8=
Subject key identifier: 4C:88:62:ED:5C:BE:86:6A:93:73:12:8A:6B:BB:57:C1:B9:7E:07:6D
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A098F1F24BC7971294F2EFF58D77CEBC12
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TIhi7Vy-hmqTcxKKa7tXwbl-B20.roa
Signing time: Sun 13 Sep 2026 04:06:28 +0000
ROA not before: Sun 13 Sep 2026 04:06:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53107
IP address blocks: 185.47.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:98:f1:f2:4b:c7:97:12:94:f2:ef:f5:8d:77:ce:bc:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 13 04:06:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c8862ed5cbe866a9373128a6bbb57c1b97e076d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ac:5a:d9:40:be:9f:3d:ac:38:d2:11:3e:25:
2b:b7:e1:d5:cc:82:62:4c:bd:ef:69:96:e1:be:fe:
df:5a:69:48:a3:a0:af:bb:c6:ec:5e:0a:54:13:48:
8e:76:af:cf:25:c8:e1:02:16:ea:5d:81:ba:4b:42:
bd:2e:0e:74:0d:b7:0b:55:57:38:fd:c1:32:79:4a:
44:51:4c:3a:82:66:c8:02:5b:09:94:73:11:62:c6:
8f:2f:0f:3a:a6:b7:92:e6:bb:44:ec:3a:61:3e:60:
d2:7d:38:68:6f:a7:8d:14:5d:31:7f:46:28:8a:8e:
db:4b:40:bf:70:1e:04:6d:9f:9e:e9:2a:5c:bc:a4:
6e:02:0d:06:53:c7:f5:fe:15:f7:c4:2a:ce:48:aa:
ea:ef:7a:5c:41:9c:a5:8e:28:7c:a2:81:e9:05:6d:
66:74:15:f3:1d:9b:bf:47:e0:ab:f0:e4:be:06:8c:
83:49:73:c3:5d:cb:ad:e0:76:08:69:c6:0d:ba:24:
f3:47:54:d5:fb:19:8a:f2:bc:20:54:8e:c1:40:40:
84:3b:af:35:85:f7:f7:6b:8c:64:c7:c7:f6:af:e5:
5e:02:7c:88:f8:a4:7f:36:6e:e2:fd:27:6c:0c:33:
ff:e2:54:c6:aa:cc:ab:8d:18:94:d7:12:fd:3b:c6:
ab:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:88:62:ED:5C:BE:86:6A:93:73:12:8A:6B:BB:57:C1:B9:7E:07:6D
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/TIhi7Vy-hmqTcxKKa7tXwbl-B20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.143.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:67:bc:c8:d4:24:66:55:72:55:e9:2a:54:cf:e8:8a:42:1b:
da:94:57:67:35:be:d7:04:09:6d:75:14:96:a6:e8:70:e1:1d:
9b:ab:e2:4c:4f:5a:87:17:e8:05:78:e5:ac:ad:27:b6:94:b7:
4d:37:ff:0c:75:dc:c0:55:a4:63:4c:30:ac:3c:14:68:7d:51:
27:b4:3c:18:35:b0:40:16:1f:6c:fe:f5:6a:11:ae:ae:eb:94:
25:0a:1c:65:40:da:b8:d1:50:7a:b4:90:39:4f:e6:12:91:b9:
3d:f2:c2:06:72:75:9d:e1:53:ae:de:2b:1d:e9:2a:65:81:03:
40:68:51:11:55:88:89:b0:90:56:4a:07:d7:fa:00:ba:7e:4d:
13:da:d2:17:83:55:99:be:23:ee:7d:b5:e8:0c:5f:88:ab:ac:
0c:e3:b7:69:e6:cc:30:10:c7:1a:2e:67:7a:c4:e0:19:74:15:
b9:5d:bc:db:d3:2a:29:e1:4f:a4:50:3d:e8:68:2f:a1:5a:6f:
ff:b6:d1:98:3a:bc:36:51:62:41:c6:17:43:1d:80:a6:90:6f:
e2:4f:b6:5a:b1:03:00:89:bd:37:29:ca:99:44:fc:73:d0:e3:
55:5d:53:08:85:ce:f7:0b:0a:81:97:2e:eb:9f:af:b7:dd:3a:
29:ad:f3:07
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCY8fJLx5cSlPLv9Y13zrwSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwOTEzMDQwNjI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Yzg4NjJlZDVjYmU4NjZhOTM3MzEyOGE2YmJiNTdjMWI5N2UwNzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7qxa2UC+nz2sONIRPiUrt+HVzIJi
TL3vaZbhvv7fWmlIo6Cvu8bsXgpUE0iOdq/PJcjhAhbqXYG6S0K9Lg50DbcLVVc4
/cEyeUpEUUw6gmbIAlsJlHMRYsaPLw86preS5rtE7DphPmDSfThob6eNFF0xf0Yo
io7bS0C/cB4EbZ+e6SpcvKRuAg0GU8f1/hX3xCrOSKrq73pcQZyljih8ooHpBW1m
dBXzHZu/R+Cr8OS+BoyDSXPDXcut4HYIacYNuiTzR1TV+xmK8rwgVI7BQECEO681
hff3a4xkx8f2r+VeAnyI+KR/Nm7i/SdsDDP/4lTGqsyrjRiU1xL9O8arOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEyIYu1cvoZqk3MSimu7V8G5fgdtMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvVEloaTdWeS1obXFUY3hLS2E3dFh3YmwtQjIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuS+PMA0G
CSqGSIb3DQEBCwUAA4IBAQAfZ7zI1CRmVXJV6SpUz+iKQhvalFdnNb7XBAltdRSW
puhw4R2bq+JMT1qHF+gFeOWsrSe2lLdNN/8MddzAVaRjTDCsPBRofVEntDwYNbBA
Fh9s/vVqEa6u65QlChxlQNq40VB6tJA5T+YSkbk98sIGcnWd4VOu3isd6SplgQNA
aFERVYiJsJBWSgfX+gC6fk0T2tIXg1WZviPufbXoDF+Iq6wM47dp5swwEMcaLmd6
xOAZdBW5Xbzb0yop4U+kUD3oaC+hWm//ttGYOrw2UWJBxhdDHYCmkG/iT7ZasQMA
ib03KcqZRPxz0ONVXVMIhc73CwqBly7rn6+33ToprfMH
-----END CERTIFICATE-----
Generated at Mon Sep 21 10:06:44 2026 by rpki-client