Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/THN8hCVJidCA3UH30sjY5WP-4fE.roa
File: THN8hCVJidCA3UH30sjY5WP-4fE.roa (raw, json)
Hash identifier: UUYFxGp36/YrRjz3VGHAWAoR8JxAN5Tri92IoH5+SsM=
Subject key identifier: 4C:73:7C:84:25:49:89:D0:80:DD:41:F7:D2:C8:D8:E5:63:FE:E1:F1
Certificate issuer: /CN=d44de659759b0274124a7b481d0976840b7ade06
Certificate serial: 01A0B63CB5E019E60C25CD683761517947A7
Authority key identifier: D4:4D:E6:59:75:9B:02:74:12:4A:7B:48:1D:09:76:84:0B:7A:DE:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/THN8hCVJidCA3UH30sjY5WP-4fE.roa
Signing time: Fri 18 Sep 2026 20:37:07 +0000
ROA not before: Fri 18 Sep 2026 20:37:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205087
IP address blocks: 37.143.169.0/24 maxlen: 24
2a03:8f87:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b6:3c:b5:e0:19:e6:0c:25:cd:68:37:61:51:79:47:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44de659759b0274124a7b481d0976840b7ade06
Validity
Not Before: Sep 18 20:37:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c737c84254989d080dd41f7d2c8d8e563fee1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:25:09:bf:be:88:ee:2d:d8:d9:38:e9:91:c0:
63:75:b7:dc:14:b6:79:06:16:92:5b:75:77:f5:89:
51:7b:60:c3:f5:90:04:1c:ae:51:86:a9:b4:c1:26:
40:32:0b:7b:8d:37:7c:2f:28:1c:87:81:d3:fe:30:
f8:ef:70:17:29:4a:b2:2b:84:02:7a:b3:0e:a5:97:
f1:18:07:2b:a1:0a:d6:e2:ea:4d:8b:60:59:3f:aa:
82:f5:a3:ce:18:e4:1e:b4:d4:25:81:9c:13:77:42:
b6:2a:30:b7:e3:20:a3:26:a8:f9:00:63:1d:9f:04:
75:77:51:84:83:8c:a6:a8:55:9d:0a:0a:38:95:d1:
8f:0f:17:97:7b:90:66:a7:91:ff:94:8d:3e:17:8a:
10:eb:f2:49:a6:58:72:ab:9b:0b:e8:02:85:12:55:
c9:35:3f:98:0d:38:c7:60:69:35:cc:62:63:42:32:
7a:33:b5:d0:00:5c:3c:cc:13:49:6a:ad:a4:d8:ec:
9c:5e:ab:7c:3f:d8:5d:35:f0:f4:75:84:12:5d:e5:
51:ac:a2:50:b7:ea:64:e9:bd:97:be:7e:b6:a6:45:
3e:0d:07:b6:65:6f:88:e1:01:ff:94:40:d7:dc:79:
ab:bb:b9:f2:69:5b:53:b0:82:80:ef:7b:36:e0:07:
85:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:73:7C:84:25:49:89:D0:80:DD:41:F7:D2:C8:D8:E5:63:FE:E1:F1
X509v3 Authority Key Identifier:
keyid:D4:4D:E6:59:75:9B:02:74:12:4A:7B:48:1D:09:76:84:0B:7A:DE:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/THN8hCVJidCA3UH30sjY5WP-4fE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.169.0/24
IPv6:
2a03:8f87:2::/48
Signature Algorithm: sha256WithRSAEncryption
91:5f:69:7c:e5:a4:12:ba:36:e0:18:27:d2:93:2f:0a:07:b9:
04:cd:fa:92:ef:db:63:d6:c7:f1:b6:e2:02:12:aa:bc:44:ba:
b6:79:b5:35:d5:48:1a:55:ed:38:df:32:6f:3e:76:aa:ec:b8:
39:05:bb:c0:83:93:dc:af:2f:76:cb:4a:57:96:6e:07:e3:a5:
e9:32:e8:23:33:56:c1:77:c7:33:40:bb:8c:dc:45:25:1b:f1:
da:c3:c5:10:8d:5d:64:16:2c:8e:2d:f1:b4:55:4e:33:d0:8e:
1b:6c:79:28:bc:74:2f:16:23:a9:08:1a:2d:84:3b:67:f4:dc:
2b:e3:94:b9:29:a4:53:a0:ad:f1:c9:93:da:3b:12:36:82:22:
c5:35:0e:79:29:04:de:74:69:39:d7:e5:e6:4d:78:0a:77:3c:
cd:a7:fa:d7:9c:68:7a:01:0d:93:39:34:9d:0e:00:d1:60:67:
45:17:91:e6:aa:8c:3e:eb:60:39:91:4d:be:66:a2:1b:cc:74:
e4:b0:a0:c0:d9:50:1b:32:19:77:2f:19:e7:41:4d:38:99:c3:
ff:14:cd:fa:dc:89:5d:55:46:4d:a3:7f:39:48:cf:ac:8c:9c:
88:bf:a1:29:45:3b:17:ad:22:a3:2f:a5:53:24:a4:64:44:08:
0b:fd:8f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:33:49 2026 by rpki-client