Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/TrhXkCJb8q-vuCZF4exUSreBB7E.roa
File: TrhXkCJb8q-vuCZF4exUSreBB7E.roa (raw, json)
Hash identifier: EGX2grrS3l79QBgl+a645PR4w0grZD/PxlFuVBj36pQ=
Subject key identifier: 4E:B8:57:90:22:5B:F2:AF:AF:B8:26:45:E1:EC:54:4A:B7:81:07:B1
Certificate issuer: /CN=f3544e923d883bace4aa3f7ef70072afe3511f28
Certificate serial: 019B7DC9F5BF9179A40714DC383DA45E398F
Authority key identifier: F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/TrhXkCJb8q-vuCZF4exUSreBB7E.roa
Signing time: Fri 02 Jan 2026 08:19:06 +0000
ROA not before: Fri 02 Jan 2026 08:19:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41536
IP address blocks: 91.198.59.0/24 maxlen: 24
193.222.57.0/24 maxlen: 24
195.14.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:c9:f5:bf:91:79:a4:07:14:dc:38:3d:a4:5e:39:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3544e923d883bace4aa3f7ef70072afe3511f28
Validity
Not Before: Jan 2 08:19:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4eb85790225bf2afafb82645e1ec544ab78107b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2b:eb:51:77:54:85:e0:05:f3:a8:0a:5e:24:
54:ad:f1:38:e9:f6:f5:49:81:ec:89:b9:61:f0:41:
fa:9a:d7:6c:b7:5a:33:2d:ea:46:9c:f7:29:99:72:
bf:22:e8:34:13:45:d1:cb:6a:9a:98:c8:56:a0:76:
ee:17:3c:7b:ee:9b:a2:3c:8e:24:c6:3d:07:00:72:
79:17:fd:6e:3f:81:d4:6d:65:64:87:47:34:d3:9e:
1f:ea:43:42:56:31:33:4b:64:d9:50:8b:2d:6b:3f:
c2:a2:c5:ca:96:e7:be:01:66:0b:06:2f:cd:93:62:
a0:4e:b0:85:2b:ed:79:d0:49:e2:a6:8d:c2:e8:6d:
a8:a2:86:5b:2f:91:34:23:2b:fa:eb:af:ed:01:51:
a8:8b:9d:59:4a:56:1e:9a:d7:6b:88:e6:76:60:c0:
4e:5b:70:8f:82:09:48:75:9f:e6:72:53:0d:5f:bb:
0a:55:e2:fc:56:29:cb:38:be:6e:14:64:5d:77:df:
1c:e8:db:c9:cb:02:f7:0c:7b:5f:4f:cb:ed:d9:68:
f3:5b:d9:02:d1:95:6a:73:54:62:a8:cc:94:c0:97:
8e:c6:6a:04:19:f6:c1:6c:a3:cf:2d:8e:eb:e1:80:
bb:90:44:bd:99:f3:21:60:2e:3a:23:f0:59:32:a0:
96:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B8:57:90:22:5B:F2:AF:AF:B8:26:45:E1:EC:54:4A:B7:81:07:B1
X509v3 Authority Key Identifier:
keyid:F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/TrhXkCJb8q-vuCZF4exUSreBB7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.59.0/24
193.222.57.0/24
195.14.6.0/24
Signature Algorithm: sha256WithRSAEncryption
09:50:4c:b5:41:10:8d:30:c1:88:e3:74:93:01:1a:9c:57:78:
c2:ad:21:b8:a5:a7:02:45:83:25:e0:9a:e1:a7:1e:81:a6:f2:
28:9d:8d:6e:cf:d6:f4:06:70:23:70:5d:8c:c3:4b:78:1c:6a:
de:d4:e9:4e:fe:9b:08:20:36:17:a4:c2:86:e1:64:6f:71:8d:
21:d2:d8:72:19:8c:98:3b:09:a9:c4:d7:5d:e3:0b:49:95:a7:
4b:a2:dc:62:eb:3f:05:cd:36:77:80:72:7c:e9:5d:ee:f3:68:
f4:44:10:f8:7c:e4:77:a5:ec:23:98:8f:d3:9c:ea:29:07:cd:
34:55:25:78:a3:52:4c:3c:31:fa:3a:bc:56:8b:9c:e0:fb:37:
78:71:57:23:8a:11:6d:db:a3:06:a6:e8:59:0d:9a:29:31:48:
28:57:78:22:e8:76:3d:b2:9d:fd:46:f4:71:aa:ec:e4:70:24:
e5:ee:0f:61:d9:15:40:7d:96:5a:e3:43:a3:8a:09:20:d6:d4:
d0:1e:87:dd:da:fb:c0:b4:b6:e9:39:40:57:9c:2c:12:c1:7d:
09:08:7c:f1:34:08:7a:a6:1e:68:2f:77:d1:e3:b7:c8:c5:50:
fe:f2:8a:c3:3a:1d:56:45:12:04:31:e2:04:61:ce:e3:88:e9:
8c:d9:bf:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:05:10 2026 by rpki-client