Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/TDjg9kORsVZ-XeJuH5dXRfIUBwM.roa
File: TDjg9kORsVZ-XeJuH5dXRfIUBwM.roa (raw, json)
Hash identifier: pMxEnVVLEP7IrLSljgv5EkxknhvXpNCyUXpBvcsi9h4=
Subject key identifier: 4C:38:E0:F6:43:91:B1:56:7E:5D:E2:6E:1F:97:57:45:F2:14:07:03
Certificate issuer: /CN=a09d65b926fdd743da5b473d34185fe101b05a28
Certificate serial: 01A1166BCE70889D694E046CB4F84CB901F9
Authority key identifier: A0:9D:65:B9:26:FD:D7:43:DA:5B:47:3D:34:18:5F:E1:01:B0:5A:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/TDjg9kORsVZ-XeJuH5dXRfIUBwM.roa
Signing time: Wed 07 Oct 2026 12:52:06 +0000
ROA not before: Wed 07 Oct 2026 12:52:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48152
IP address blocks: 51.163.160.0/19 maxlen: 24
51.163.192.0/18 maxlen: 24
185.174.124.0/23 maxlen: 24
2a0b:9f00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 09:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:6b:ce:70:88:9d:69:4e:04:6c:b4:f8:4c:b9:01:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09d65b926fdd743da5b473d34185fe101b05a28
Validity
Not Before: Oct 7 12:52:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c38e0f64391b1567e5de26e1f975745f2140703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:16:b1:a9:52:b1:36:c0:14:f2:f6:36:89:f7:
ad:08:a5:b9:ac:b1:11:9d:b6:22:4c:27:a8:4e:fd:
77:40:6c:20:38:6e:a0:aa:50:17:d2:84:4f:e2:8e:
7e:6e:00:0f:f5:b8:08:02:0c:f1:7e:c5:6b:6a:f4:
e2:0e:7b:c0:ac:8b:53:5b:5c:f7:41:f3:c6:f5:fc:
cd:2e:d8:86:15:e0:4c:5f:16:7c:0c:4d:48:ff:fb:
66:3c:43:b9:5a:a7:9c:28:f7:95:ce:15:48:fb:e4:
9b:34:40:33:82:71:ae:5e:d4:81:a8:02:da:3b:d6:
c0:53:30:bc:1c:f9:0d:8c:3d:20:8c:46:51:eb:14:
e0:92:37:b6:ec:73:1a:f3:b7:dc:b5:69:6c:b3:82:
d2:e7:5d:1c:c5:63:7e:b7:af:9d:e6:e5:1f:84:df:
87:7a:fa:0c:35:bb:6e:b5:81:2c:0e:d3:45:b7:94:
17:3a:80:21:d9:2e:c8:31:43:03:13:85:e8:ab:e7:
e4:a4:7f:6a:3d:4b:c2:ab:a6:ed:33:99:01:d6:62:
d7:14:f8:2e:e9:19:24:db:6a:10:f3:11:ef:b5:ef:
f8:3e:7b:66:52:57:78:b7:ad:68:bb:5e:22:5a:56:
1b:63:fc:59:1f:38:1e:a1:ee:6c:15:c1:44:0c:56:
bd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:38:E0:F6:43:91:B1:56:7E:5D:E2:6E:1F:97:57:45:F2:14:07:03
X509v3 Authority Key Identifier:
keyid:A0:9D:65:B9:26:FD:D7:43:DA:5B:47:3D:34:18:5F:E1:01:B0:5A:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/TDjg9kORsVZ-XeJuH5dXRfIUBwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.163.160.0-51.163.255.255
185.174.124.0/23
IPv6:
2a0b:9f00::/29
Signature Algorithm: sha256WithRSAEncryption
87:4d:4b:07:cf:3c:8f:94:b9:6e:de:9d:ff:81:7f:ec:bc:c4:
71:22:b5:05:18:d4:b7:cb:fa:7f:aa:58:57:75:3c:9a:d2:09:
3e:ba:e9:ed:59:86:19:52:55:1d:61:4a:65:e8:ec:40:96:40:
22:73:98:2c:9b:20:7a:a9:26:ce:13:61:c1:ea:73:b1:8d:78:
1c:fe:58:d3:1a:cf:90:c4:40:a8:9f:df:2b:e9:08:61:4f:72:
8d:57:14:c8:33:4e:e4:41:8e:0f:60:13:06:78:68:81:cc:1e:
86:ee:e5:8e:58:28:58:bf:9d:35:ce:4f:f4:44:f5:0a:6f:fd:
0f:50:03:a6:da:dc:8e:b8:d9:59:b6:6f:ce:3c:84:8e:81:42:
16:3d:8d:9f:84:69:1f:a0:6e:df:fe:a5:00:6a:22:8d:b4:87:
74:22:7c:81:0a:3a:fa:0b:d9:cc:1a:d9:5d:29:e5:46:57:9c:
b4:ea:b4:4d:be:56:57:c2:6e:52:33:45:71:3c:89:29:44:15:
b0:c2:f0:e0:83:98:1d:9e:b7:47:eb:84:81:27:88:6e:5d:a9:
ed:44:02:69:36:07:b6:fe:70:46:78:40:ca:28:d8:a1:ce:78:
5b:9c:04:d6:3c:a2:f8:3c:c9:71:44:f9:7b:56:4e:e1:17:6a:
86:c1:72:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:13:14 2026 by rpki-client