Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/3d9ae6-d986-4f77-aa5c-64ca2236e0f8/1/T4C3ngZ0kiOERSm8KIUL6SFIVCw.roa
File: T4C3ngZ0kiOERSm8KIUL6SFIVCw.roa (raw, json)
Hash identifier: tZwjPSBZgMqEIOo7Vw/0mMnq5X49xxkO30FWElQAEqs=
Subject key identifier: 4F:80:B7:9E:06:74:92:23:84:45:29:BC:28:85:0B:E9:21:48:54:2C
Certificate issuer: /CN=adfbf109fd7c0439076c41ac0034145b18f2ba95
Certificate serial: 01A0C27D4EBCAC2D788B86A6AD80BB5C4085
Authority key identifier: AD:FB:F1:09:FD:7C:04:39:07:6C:41:AC:00:34:14:5B:18:F2:BA:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfvxCf18BDkHbEGsADQUWxjyupU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3d9ae6-d986-4f77-aa5c-64ca2236e0f8/1/T4C3ngZ0kiOERSm8KIUL6SFIVCw.roa
Signing time: Mon 21 Sep 2026 05:43:07 +0000
ROA not before: Mon 21 Sep 2026 05:43:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218762
IP address blocks: 168.113.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3d9ae6-d986-4f77-aa5c-64ca2236e0f8/1/rfvxCf18BDkHbEGsADQUWxjyupU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3d9ae6-d986-4f77-aa5c-64ca2236e0f8/1/rfvxCf18BDkHbEGsADQUWxjyupU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfvxCf18BDkHbEGsADQUWxjyupU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:7d:4e:bc:ac:2d:78:8b:86:a6:ad:80:bb:5c:40:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adfbf109fd7c0439076c41ac0034145b18f2ba95
Validity
Not Before: Sep 21 05:43:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f80b79e06749223844529bc28850be92148542c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cf:b1:24:fc:9e:d3:7d:f4:46:42:47:8c:69:
33:e9:31:b0:da:6c:bf:a5:d0:6a:dd:c3:d7:13:5f:
5a:ed:af:20:8b:fb:cf:32:5d:e0:cc:6f:73:9c:1f:
9d:19:ca:d1:9d:8e:b1:74:ac:19:da:6b:4e:ef:2e:
d6:38:b0:c0:48:55:99:03:70:b4:f2:eb:da:b9:24:
8d:53:02:60:35:75:93:40:be:5e:4a:86:32:ae:4c:
84:e9:39:a7:20:49:8d:df:d3:89:88:c9:06:84:2e:
90:0b:fd:1c:fe:a3:25:57:29:5d:bd:57:4a:5c:b1:
6c:b2:02:3a:71:8f:78:48:ce:e7:ef:fa:a8:0d:8a:
32:dc:c9:5c:c3:4a:31:f1:0f:56:85:4f:63:25:5e:
02:5b:55:e0:0f:9d:20:30:76:6a:d2:30:94:ad:11:
b9:35:01:72:15:fb:b8:86:4b:f5:6c:ef:ed:9f:39:
f8:60:ca:f2:c2:08:65:94:d2:ad:8c:34:64:39:76:
65:ad:46:01:c9:b4:f2:b6:7f:03:1c:53:ae:9d:38:
c9:74:2c:92:d3:de:9c:a6:77:81:e6:8c:97:eb:8d:
40:2d:14:5c:27:49:bd:6d:a9:5d:03:e3:ac:49:08:
61:1b:8b:3d:3d:37:c6:f8:ea:43:2b:b7:ff:ad:d2:
51:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:80:B7:9E:06:74:92:23:84:45:29:BC:28:85:0B:E9:21:48:54:2C
X509v3 Authority Key Identifier:
keyid:AD:FB:F1:09:FD:7C:04:39:07:6C:41:AC:00:34:14:5B:18:F2:BA:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfvxCf18BDkHbEGsADQUWxjyupU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3d9ae6-d986-4f77-aa5c-64ca2236e0f8/1/T4C3ngZ0kiOERSm8KIUL6SFIVCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3d9ae6-d986-4f77-aa5c-64ca2236e0f8/1/rfvxCf18BDkHbEGsADQUWxjyupU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.113.250.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:24:62:03:de:5f:61:13:ff:ab:47:09:88:e9:a8:00:2b:ab:
b4:94:4e:09:a8:cb:fa:d4:1c:25:2a:49:fe:28:9b:2b:b4:86:
6a:15:38:05:42:fc:20:40:17:77:4f:28:e2:4d:f4:7b:c9:01:
cf:ff:1b:db:b7:55:c2:38:3a:07:d8:68:4b:a4:b3:89:28:07:
e2:ec:b9:bb:0e:a8:bb:06:4f:d1:e6:53:f6:4e:92:65:f3:47:
a3:a2:26:51:a7:8d:4f:ab:52:5d:ff:f2:60:d0:78:3a:7c:e1:
67:a5:cd:25:12:46:31:f0:5c:dc:4c:5b:35:94:96:bb:5f:81:
a7:a0:ad:da:26:c6:11:cc:b2:b4:03:9f:38:22:a2:b1:cc:1d:
e0:8e:92:4e:29:bd:91:4f:2b:29:46:c6:bd:aa:85:6f:4a:b3:
72:96:bf:ed:80:7a:2d:ee:bd:61:39:07:d3:75:09:64:6b:f6:
90:88:22:79:0e:20:e7:97:13:c1:02:42:f5:4c:02:b6:a0:e8:
13:58:bd:9f:82:bc:6e:b2:99:11:64:9d:07:f8:54:24:91:16:
d7:57:4d:7a:56:6c:11:c1:eb:0e:cc:9f:88:f2:87:5a:8f:d0:
6b:dc:21:9a:88:49:82:71:7d:46:0a:d9:ff:f2:44:9b:0e:b1:
68:8c:9f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:52:56 2026 by rpki-client