Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/T-CdKowBxcawPxfIinNabl-tk4c.roa
File: T-CdKowBxcawPxfIinNabl-tk4c.roa (raw, json)
Hash identifier: T9Nd588lh0vdUT3bIxFko46RMi6SHwHwUzWl9OsxPJw=
Subject key identifier: 4F:E0:9D:2A:8C:01:C5:C6:B0:3F:17:C8:8A:73:5A:6E:5F:AD:93:87
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01A0AEBC13A95DADA680D6A463E9DBDE38BE
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/T-CdKowBxcawPxfIinNabl-tk4c.roa
Signing time: Thu 17 Sep 2026 09:39:16 +0000
ROA not before: Thu 17 Sep 2026 09:39:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212477
IP address blocks: 194.61.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:bc:13:a9:5d:ad:a6:80:d6:a4:63:e9:db:de:38:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Sep 17 09:39:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4fe09d2a8c01c5c6b03f17c88a735a6e5fad9387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3a:f4:59:9a:1f:ad:7e:49:1e:ad:af:3e:b1:
df:49:5d:3d:7c:35:d7:82:4d:48:7a:4f:da:b5:a6:
d8:5c:de:95:44:0f:f3:18:cd:cd:50:cd:6b:7c:13:
24:62:22:a8:ea:e2:34:23:ec:90:7f:85:be:ed:af:
8b:59:ca:7d:66:08:83:4f:b0:31:40:41:a5:9d:38:
ac:ba:30:a3:e5:b2:74:8a:0c:a3:40:5d:c1:a9:e9:
a0:83:99:62:17:68:ed:b7:eb:4e:59:c5:1c:cb:16:
13:04:cc:b0:95:f3:68:f4:14:29:aa:6d:f1:9f:1b:
9b:22:59:e9:23:e8:45:bb:ec:6c:8b:af:f3:70:c2:
9b:a9:82:bd:9d:31:1f:22:e2:6c:91:e0:8e:63:76:
41:6b:65:8a:bc:a8:62:e3:a1:71:ee:63:70:71:b2:
fa:07:a8:5e:e8:99:d4:a4:e9:6f:2c:c4:93:ec:20:
ce:6b:56:cc:ff:b6:9a:0a:86:c6:b4:32:9e:57:02:
2b:27:d9:12:41:3b:d1:7f:60:82:97:8e:6a:c7:33:
e7:4d:f0:55:73:c5:1f:58:e3:fe:f9:f7:e2:18:50:
bf:92:6b:fc:9e:6b:38:81:12:32:52:a7:8d:69:f0:
86:90:4b:03:f2:84:cb:f0:a7:9e:aa:de:76:1a:be:
56:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E0:9D:2A:8C:01:C5:C6:B0:3F:17:C8:8A:73:5A:6E:5F:AD:93:87
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/T-CdKowBxcawPxfIinNabl-tk4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.75.0/24
Signature Algorithm: sha256WithRSAEncryption
08:68:9c:bc:43:65:e4:ca:81:1d:85:77:74:2e:eb:af:b8:31:
34:f5:b8:9a:26:a5:b7:aa:67:66:c6:10:20:d9:a9:d2:8c:85:
9a:f6:21:3f:fd:34:3e:73:d2:92:79:77:2b:0b:70:9a:90:a8:
03:9a:c3:b5:88:f9:6e:07:38:2f:0f:b2:09:e4:31:61:29:15:
5c:75:25:72:ca:d2:ac:b3:fb:84:71:5d:ee:0b:6e:b1:7e:1f:
35:d8:d1:38:a8:1d:f2:5d:87:64:31:74:ea:f4:b2:c8:fe:9b:
5f:af:ef:90:87:ca:99:59:d1:95:cc:e7:36:6e:be:38:a7:ca:
88:b3:08:6d:83:5f:bb:12:2f:f5:34:48:63:e5:fc:d2:cb:0f:
06:0d:a7:f0:65:ab:f1:49:4d:7f:bb:4a:b5:99:fa:eb:8c:ec:
a6:29:aa:41:69:36:08:bd:db:04:1c:d2:31:af:a5:18:31:f8:
ac:a8:2e:db:59:61:f0:8e:c1:8b:b4:31:5d:b5:14:17:10:f8:
f3:ec:09:02:c0:7c:43:58:db:3b:99:10:79:1d:12:c5:62:da:
f5:4a:2d:ed:3c:79:47:1f:6d:02:c0:d1:fe:a4:92:1a:f9:69:
b7:b4:3e:fb:17:6e:73:46:7c:bf:61:5f:e1:2d:79:eb:74:aa:
c3:aa:1a:f7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCuvBOpXa2mgNakY+nb3ji+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjYwOTE3MDkzOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZmUwOWQyYThjMDFjNWM2YjAzZjE3Yzg4YTczNWE2ZTVmYWQ5Mzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozr0WZofrX5JHq2vPrHfSV09fDXX
gk1Iek/atabYXN6VRA/zGM3NUM1rfBMkYiKo6uI0I+yQf4W+7a+LWcp9ZgiDT7Ax
QEGlnTisujCj5bJ0igyjQF3Bqemgg5liF2jtt+tOWcUcyxYTBMywlfNo9BQpqm3x
nxubIlnpI+hFu+xsi6/zcMKbqYK9nTEfIuJskeCOY3ZBa2WKvKhi46Fx7mNwcbL6
B6he6JnUpOlvLMST7CDOa1bM/7aaCobGtDKeVwIrJ9kSQTvRf2CCl45qxzPnTfBV
c8UfWOP++ffiGFC/kmv8nms4gRIyUqeNafCGkEsD8oTL8Keeqt52Gr5W1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE/gnSqMAcXGsD8XyIpzWm5frZOHMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvVC1DZEtvd0J4Y2F3UHhmSWluTmFibC10azRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwj1LMA0G
CSqGSIb3DQEBCwUAA4IBAQAIaJy8Q2XkyoEdhXd0LuuvuDE09biaJqW3qmdmxhAg
2anSjIWa9iE//TQ+c9KSeXcrC3CakKgDmsO1iPluBzgvD7IJ5DFhKRVcdSVyytKs
s/uEcV3uC26xfh812NE4qB3yXYdkMXTq9LLI/ptfr++Qh8qZWdGVzOc2br44p8qI
swhtg1+7Ei/1NEhj5fzSyw8GDafwZavxSU1/u0q1mfrrjOymKapBaTYIvdsEHNIx
r6UYMfisqC7bWWHwjsGLtDFdtRQXEPjz7AkCwHxDWNs7mRB5HRLFYtr1Si3tPHlH
H20CwNH+pJIa+Wm3tD77F25zRny/YV/hLXnrdKrDqhr3
-----END CERTIFICATE-----
Generated at Tue Sep 22 11:19:25 2026 by rpki-client