Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/THki-C7K0guSV_ZsZ9wyQdtYLho.roa
File: THki-C7K0guSV_ZsZ9wyQdtYLho.roa (raw, json)
Hash identifier: ZWzAxxCBDEL9WjLGKgQ7WjQgHQWR8ZxZuQyS8uWcrRY=
Subject key identifier: 4C:79:22:F8:2E:CA:D2:0B:92:57:F6:6C:67:DC:32:41:DB:58:2E:1A
Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Certificate serial: 019C95D6798B60C7B6FC7531815675F030A7
Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/THki-C7K0guSV_ZsZ9wyQdtYLho.roa
Signing time: Wed 25 Feb 2026 17:26:26 +0000
ROA not before: Wed 25 Feb 2026 17:26:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207483
IP address blocks: 2a09:2980::/29 maxlen: 29
2a09:af80::/29 maxlen: 29
2a09:d700::/29 maxlen: 29
2a09:dd00::/29 maxlen: 29
2a09:e300::/29 maxlen: 29
2a09:ef00::/29 maxlen: 29
2a0b:9000::/29 maxlen: 29
2a0d:95c0::/29 maxlen: 29
2a0e:3f40::/29 maxlen: 29
2a11:1480::/29 maxlen: 29
2a11:1f00::/29 maxlen: 29
2a11:3440::/29 maxlen: 29
2a11:6300::/29 maxlen: 29
2a11:9380::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:95:d6:79:8b:60:c7:b6:fc:75:31:81:56:75:f0:30:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Validity
Not Before: Feb 25 17:26:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c7922f82ecad20b9257f66c67dc3241db582e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8c:bd:95:36:e1:0d:29:e0:2b:66:67:fb:19:
91:13:c8:ce:99:66:df:48:82:7f:af:28:65:d8:70:
ac:b0:b5:e3:52:9b:20:01:d3:59:1a:58:54:74:e0:
bb:c9:fc:92:96:6a:14:31:4b:f3:9e:34:8c:30:58:
6a:ac:fd:fa:f8:20:f1:78:d3:57:b8:b8:b4:6d:24:
90:d1:36:5f:87:62:4b:ab:7f:5b:3a:15:de:af:c5:
05:f6:7f:47:7e:19:54:6e:73:d6:31:88:4a:8e:39:
91:2c:d9:c2:ad:8d:c3:e7:5f:48:e7:1b:4c:51:3d:
ac:0f:c0:fe:86:76:a9:77:3a:c4:69:7d:69:56:34:
3d:59:03:97:8f:de:a7:49:af:f1:b5:ce:66:a5:47:
27:60:be:dc:bd:6e:bf:5e:d2:8a:e5:d1:6d:33:c9:
df:cb:11:b2:41:6f:6e:1e:a4:7b:cc:64:e1:5f:12:
e5:48:c2:d9:ec:3a:4f:48:20:a6:d0:3d:a9:3c:5d:
cb:a8:4a:fb:d6:23:f4:a8:6f:91:f4:c8:71:c8:11:
90:64:9b:27:75:fc:14:a8:c3:d9:f4:af:f2:1f:de:
fe:28:c2:23:9d:e1:97:7f:a3:67:ae:19:a3:72:eb:
b2:e7:2f:7a:e0:da:4a:6b:22:fa:b7:9c:03:23:da:
0f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:79:22:F8:2E:CA:D2:0B:92:57:F6:6C:67:DC:32:41:DB:58:2E:1A
X509v3 Authority Key Identifier:
keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/THki-C7K0guSV_ZsZ9wyQdtYLho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:2980::/29
2a09:af80::/29
2a09:d700::/29
2a09:dd00::/29
2a09:e300::/29
2a09:ef00::/29
2a0b:9000::/29
2a0d:95c0::/29
2a0e:3f40::/29
2a11:1480::/29
2a11:1f00::/29
2a11:3440::/29
2a11:6300::/29
2a11:9380::/29
Signature Algorithm: sha256WithRSAEncryption
81:f8:48:f1:cb:19:b4:37:ad:06:da:65:c4:7b:8f:8c:86:ba:
fc:fc:ae:51:e6:d6:64:19:ea:06:e4:07:19:5f:36:12:f7:14:
c6:92:82:5e:f5:64:e0:ab:05:d9:31:d6:01:9e:ad:64:04:01:
4f:de:f1:60:81:83:19:35:25:ff:2e:a9:eb:94:eb:cc:d3:b7:
e7:73:3c:23:f5:e7:dd:c5:c3:ae:0c:e7:8f:28:b4:b6:30:b2:
dc:8d:45:3f:af:aa:88:52:ee:6b:f8:2c:99:e6:bf:23:52:02:
12:de:0f:b4:39:63:91:d3:89:57:63:af:ef:c7:ce:df:82:67:
3d:0b:dc:b1:9e:81:10:ae:3b:0c:02:75:da:d8:ae:89:a5:9d:
a9:c0:6c:58:46:ad:1d:82:a2:02:cb:4b:9b:e1:de:15:99:f8:
67:fb:07:f8:97:24:ca:35:37:ce:7d:8d:2b:19:88:cf:fe:81:
82:0b:35:49:29:16:8b:94:7c:3a:91:05:8a:f4:0a:b3:ae:12:
5b:79:c2:db:bf:e2:7f:72:c6:19:32:a3:9a:a3:62:2b:b4:6c:
9d:ca:21:db:db:14:28:da:9d:c0:b8:78:a2:63:95:bb:ee:aa:
13:68:56:6b:f5:d0:ed:b8:34:f1:29:e1:9b:05:f1:a6:85:12:
92:2a:39:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:58:58 2026 by rpki-client