Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/TbY4MLo9QmUSVk5hp07D_lX76Hc.roa
File: TbY4MLo9QmUSVk5hp07D_lX76Hc.roa (raw, json)
Hash identifier: GGTbtNI+aaL18L5FZQerRlg9rpMiVGf3/pLxdG5oxu4=
Subject key identifier: 4D:B6:38:30:BA:3D:42:65:12:56:4E:61:A7:4E:C3:FE:55:FB:E8:77
Certificate issuer: /CN=d68b6cfb720a7c92a180ca614bdb0eda1f1ebe9d
Certificate serial: 019B77591B6BF3C4C6D3C58C26938122939C
Authority key identifier: D6:8B:6C:FB:72:0A:7C:92:A1:80:CA:61:4B:DB:0E:DA:1F:1E:BE:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ots-3IKfJKhgMphS9sO2h8evp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/TbY4MLo9QmUSVk5hp07D_lX76Hc.roa
Signing time: Thu 01 Jan 2026 02:18:07 +0000
ROA not before: Thu 01 Jan 2026 02:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51480
IP address blocks: 91.217.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ots-3IKfJKhgMphS9sO2h8evp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:1b:6b:f3:c4:c6:d3:c5:8c:26:93:81:22:93:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d68b6cfb720a7c92a180ca614bdb0eda1f1ebe9d
Validity
Not Before: Jan 1 02:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4db63830ba3d426512564e61a74ec3fe55fbe877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e3:74:d2:43:50:2c:0e:9e:10:47:86:73:b1:
6e:de:b5:1c:33:fc:ba:dc:2a:85:c0:a7:58:b2:24:
0f:37:24:4a:f4:df:e4:8d:4e:b7:0c:db:46:6d:dd:
f9:51:a4:3a:0e:90:3f:63:2c:c6:d3:56:46:13:ee:
fa:de:9b:57:29:0f:05:1a:9d:f9:86:74:30:09:97:
f6:6f:ea:d0:5f:a4:1c:83:fb:22:22:44:e0:e8:a8:
3d:7f:7e:59:b7:2b:bc:2c:b9:e1:3f:9b:fe:50:ba:
4e:57:d9:a7:ea:91:a6:fc:9e:b9:68:0e:42:f9:aa:
e6:3a:8d:4e:74:95:1c:1d:8b:eb:a7:8c:8c:7a:62:
2b:4c:9c:94:20:ba:13:9f:d3:f0:6c:04:ea:b1:01:
11:31:79:eb:79:5e:ec:d0:0b:92:17:2a:98:10:5c:
cb:70:87:01:4a:4c:c5:e8:58:8c:70:30:49:34:95:
90:18:4b:aa:3d:3f:6a:d1:f0:cc:8e:7d:ee:1a:49:
99:6e:cb:b5:b5:85:a3:c2:5b:2e:2e:68:2a:17:97:
45:6a:6b:e0:3d:c2:b5:89:37:08:fc:d4:1a:bd:3d:
1b:3b:cc:7b:1f:cd:e3:c5:e7:2b:01:eb:1e:a2:41:
91:8b:90:fc:87:33:9f:27:91:5a:ad:4a:73:5f:4b:
51:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B6:38:30:BA:3D:42:65:12:56:4E:61:A7:4E:C3:FE:55:FB:E8:77
X509v3 Authority Key Identifier:
keyid:D6:8B:6C:FB:72:0A:7C:92:A1:80:CA:61:4B:DB:0E:DA:1F:1E:BE:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ots-3IKfJKhgMphS9sO2h8evp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/TbY4MLo9QmUSVk5hp07D_lX76Hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.187.0/24
Signature Algorithm: sha256WithRSAEncryption
28:fb:2d:89:f8:b5:62:e6:98:3e:a0:7f:d9:57:0e:9d:f0:b8:
9a:a7:00:fb:d0:07:30:c2:38:25:b1:b1:59:c4:23:2b:29:00:
0e:58:bd:c3:63:b8:c0:0c:8c:8d:bc:0a:98:12:86:41:d8:2d:
a0:49:d9:b9:80:b4:33:ba:d5:6c:77:60:8b:ca:7e:cb:85:a0:
56:ca:f3:3e:b2:fb:8d:10:fa:b2:89:ba:6a:5e:04:7e:0a:2e:
08:2b:ef:c7:ed:51:bf:4b:1f:66:a9:06:79:88:4e:1c:08:2b:
c2:c1:55:a3:86:6e:c3:77:de:f7:b3:a8:1d:57:e6:29:86:a4:
76:9c:7b:11:43:c6:00:8d:29:d6:9d:a1:af:d4:a4:92:6f:30:
a9:1a:a4:f1:dd:03:19:34:8f:08:42:9b:83:1f:0a:ab:d7:79:
b5:27:80:ad:f6:7a:67:2c:a4:de:88:b2:05:2c:17:66:a6:53:
a6:c9:21:40:1b:d8:eb:ef:ab:b2:fe:b9:0b:2f:9f:61:06:9f:
0b:62:2f:e1:48:69:27:bb:e7:ab:ee:03:d0:76:cf:5f:26:95:
ad:f2:4f:31:75:73:7d:59:e2:6e:d9:f4:ae:2f:0a:40:2a:cd:
c5:71:69:65:9f:f5:34:a2:34:ce:46:59:82:2c:9c:9d:64:29:
6f:e6:3b:0f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3WRtr88TG08WMJpOBIpOcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2OGI2Y2ZiNzIwYTdjOTJhMTgwY2E2MTRiZGIwZWRhMWYx
ZWJlOWQwHhcNMjYwMTAxMDIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGI2MzgzMGJhM2Q0MjY1MTI1NjRlNjFhNzRlYzNmZTU1ZmJlODc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuON00kNQLA6eEEeGc7Fu3rUcM/y6
3CqFwKdYsiQPNyRK9N/kjU63DNtGbd35UaQ6DpA/YyzG01ZGE+763ptXKQ8FGp35
hnQwCZf2b+rQX6Qcg/siIkTg6Kg9f35Ztyu8LLnhP5v+ULpOV9mn6pGm/J65aA5C
+armOo1OdJUcHYvrp4yMemIrTJyUILoTn9PwbATqsQERMXnreV7s0AuSFyqYEFzL
cIcBSkzF6FiMcDBJNJWQGEuqPT9q0fDMjn3uGkmZbsu1tYWjwlsuLmgqF5dFamvg
PcK1iTcI/NQavT0bO8x7H83jxecrAeseokGRi5D8hzOfJ5FarUpzX0tRvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE22ODC6PUJlElZOYadOw/5V++h3MB8GA1UdIwQY
MBaAFNaLbPtyCnySoYDKYUvbDtofHr6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW90cy0zSUtmSktoZ01waFM5c08yaDhldnAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iNTk0NWQtNDkxNS00YmQ3LTkxYzEt
MzNlMzE5YTQ1NGVmLzEvVGJZNE1MbzlRbVVTVms1aHAwN0RfbFg3NkhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9iNTk0NWQtNDkxNS00YmQ3LTkxYzEtMzNlMzE5YTQ1NGVm
LzEvMW90cy0zSUtmSktoZ01waFM5c08yaDhldnAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9m7MA0G
CSqGSIb3DQEBCwUAA4IBAQAo+y2J+LVi5pg+oH/ZVw6d8LiapwD70AcwwjglsbFZ
xCMrKQAOWL3DY7jADIyNvAqYEoZB2C2gSdm5gLQzutVsd2CLyn7LhaBWyvM+svuN
EPqyibpqXgR+Ci4IK+/H7VG/Sx9mqQZ5iE4cCCvCwVWjhm7Dd973s6gdV+YphqR2
nHsRQ8YAjSnWnaGv1KSSbzCpGqTx3QMZNI8IQpuDHwqr13m1J4Ct9npnLKTeiLIF
LBdmplOmySFAG9jr76uy/rkLL59hBp8LYi/hSGknu+er7gPQds9fJpWt8k8xdXN9
WeJu2fSuLwpAKs3FcWlln/U0ojTORlmCLJydZClv5jsP
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:32:25 2026 by rpki-client