Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/THhHEbJLNflyjg0CGgDKLOWHmNw.roa
File: THhHEbJLNflyjg0CGgDKLOWHmNw.roa (raw, json)
Hash identifier: hE5im+TYFFs2d+KHjtsfg9PpKV6WFy0Jtd49aeuY6Po=
Subject key identifier: 4C:78:47:11:B2:4B:35:F9:72:8E:0D:02:1A:00:CA:2C:E5:87:98:DC
Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial: 019C4302A5CA1DCD707FEDB6927441EE7887
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/THhHEbJLNflyjg0CGgDKLOWHmNw.roa
Signing time: Mon 09 Feb 2026 15:26:12 +0000
ROA not before: Mon 09 Feb 2026 15:26:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400095
IP address blocks: 2a06:98c1:4f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:02:a5:ca:1d:cd:70:7f:ed:b6:92:74:41:ee:78:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Validity
Not Before: Feb 9 15:26:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c784711b24b35f9728e0d021a00ca2ce58798dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c8:3b:fa:0d:dc:55:80:24:20:0a:aa:25:26:
c5:b8:31:6a:3f:bd:30:b2:ca:5c:80:11:97:d7:a9:
46:60:89:29:a0:ce:1d:85:41:ba:95:84:e1:cb:a9:
82:54:96:5b:22:61:6c:95:b8:e4:f2:ee:37:98:5a:
a6:9a:ed:d3:f7:81:f4:f3:69:c9:0e:0f:01:2f:4f:
5e:9b:63:eb:9c:80:b6:03:75:54:98:5b:87:a1:c1:
2e:0d:ec:99:81:92:fe:0d:e5:df:10:95:a3:05:7e:
e5:4b:9e:4d:ee:3b:c9:4c:52:94:0b:4a:72:c3:29:
bf:b1:bf:b1:b6:77:31:6b:c4:d2:03:24:47:00:ba:
49:6a:74:42:18:4b:5e:12:c3:9a:f4:6a:96:1d:01:
98:df:ea:12:48:1e:3c:fa:a6:b0:66:c9:17:8f:32:
60:c4:60:a6:b0:90:b1:ee:c5:a7:5c:77:3b:b7:5d:
6b:82:03:7d:3d:4e:78:41:27:eb:28:d4:c3:c3:b7:
36:57:c9:6e:66:02:0b:c9:69:cd:51:42:37:d7:81:
eb:68:25:e5:a8:a9:ba:25:3d:22:cf:7a:1c:9d:44:
77:5a:ee:7d:57:48:c2:72:c8:5b:1c:d6:7c:6c:76:
92:a5:1b:3c:f1:de:73:b2:2f:5d:fc:22:a5:b3:13:
70:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:78:47:11:B2:4B:35:F9:72:8E:0D:02:1A:00:CA:2C:E5:87:98:DC
X509v3 Authority Key Identifier:
keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/THhHEbJLNflyjg0CGgDKLOWHmNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:98c1:4f::/48
Signature Algorithm: sha256WithRSAEncryption
07:96:8e:42:c4:ce:84:d8:7c:86:24:27:3a:f5:7d:e9:57:e4:
67:10:64:36:d0:ab:bb:7e:4f:de:6a:e0:fd:e6:5e:8e:b4:4d:
95:86:45:83:0a:fc:ef:8b:81:bc:2e:d9:94:48:07:61:06:03:
36:ee:91:12:5e:aa:99:72:89:0e:e0:e1:5e:bf:45:1d:ed:30:
b0:7b:3b:6f:b2:8e:1a:98:5c:62:5b:32:10:83:be:fb:94:d2:
9b:c7:54:bf:86:3b:22:5c:2d:fc:8d:7d:ab:f6:db:99:14:35:
46:b1:8b:f0:b1:31:90:bf:4f:00:08:71:21:68:27:ed:db:d2:
ca:a0:ce:78:2b:94:c7:e3:42:3f:c8:20:91:e0:d8:0e:c5:c4:
8d:82:7d:4d:b5:68:17:6f:c9:1e:a6:83:05:0c:c8:5f:1e:dd:
97:b5:d1:2e:4e:2d:e0:82:fa:ab:fd:ac:e5:76:1d:0e:4a:ee:
59:09:84:4c:3d:0c:19:7e:9f:4f:9f:c1:b6:02:ba:de:14:6f:
04:59:3d:30:cf:0d:1e:68:ae:a3:33:a4:53:09:32:6f:65:cb:
c6:a3:63:ad:8c:67:29:0c:50:97:dd:95:d2:24:3a:af:2d:34:
b6:46:61:a4:69:b3:54:56:2b:7b:42:15:15:54:c8:4b:6a:bd:
d1:15:f1:26
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZxDAqXKHc1wf+22knRB7niHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZDViZmFkNDVkN2M2NWE2ZTM0MzAyODUwOWZkMTg5MmU5
N2I5ZDAwHhcNMjYwMjA5MTUyNjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Yzc4NDcxMWIyNGIzNWY5NzI4ZTBkMDIxYTAwY2EyY2U1ODc5OGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMg7+g3cVYAkIAqqJSbFuDFqP70w
sspcgBGX16lGYIkpoM4dhUG6lYThy6mCVJZbImFslbjk8u43mFqmmu3T94H082nJ
Dg8BL09em2PrnIC2A3VUmFuHocEuDeyZgZL+DeXfEJWjBX7lS55N7jvJTFKUC0py
wym/sb+xtncxa8TSAyRHALpJanRCGEteEsOa9GqWHQGY3+oSSB48+qawZskXjzJg
xGCmsJCx7sWnXHc7t11rggN9PU54QSfrKNTDw7c2V8luZgILyWnNUUI314HraCXl
qKm6JT0iz3ocnUR3Wu59V0jCcshbHNZ8bHaSpRs88d5zsi9d/CKlsxNwewIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEx4RxGySzX5co4NAhoAyizlh5jcMB8GA1UdIwQY
MBaAFJnVv61F18ZabjQwKFCf0Ykul7nQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84MTcxZTMtMmQyOS00Y2I2LThhOTQt
NzU1MTgwOWNiNzMxLzEvVEhoSEViSkxOZmx5amcwQ0dnREtMT1dIbU53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC84MTcxZTMtMmQyOS00Y2I2LThhOTQtNzU1MTgwOWNiNzMx
LzEvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaYwQBP
MA0GCSqGSIb3DQEBCwUAA4IBAQAHlo5CxM6E2HyGJCc69X3pV+RnEGQ20Ku7fk/e
auD95l6OtE2VhkWDCvzvi4G8LtmUSAdhBgM27pESXqqZcokO4OFev0Ud7TCweztv
so4amFxiWzIQg777lNKbx1S/hjsiXC38jX2r9tuZFDVGsYvwsTGQv08ACHEhaCft
29LKoM54K5TH40I/yCCR4NgOxcSNgn1NtWgXb8kepoMFDMhfHt2XtdEuTi3ggvqr
/azldh0OSu5ZCYRMPQwZfp9Pn8G2ArreFG8EWT0wzw0eaK6jM6RTCTJvZcvGo2Ot
jGcpDFCX3ZXSJDqvLTS2RmGkabNUVit7QhUVVMhLar3RFfEm
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:52:50 2026 by rpki-client