Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/TU2ZJTkx1-4c9LViGU9hMNCIZR0.roa
File: TU2ZJTkx1-4c9LViGU9hMNCIZR0.roa (raw, json)
Hash identifier: uEpEHcPrCdDu60ROR+exluyxgZt+cDZcM0sdrdEzRew=
Subject key identifier: 4D:4D:99:25:39:31:D7:EE:1C:F4:B5:62:19:4F:61:30:D0:88:65:1D
Certificate issuer: /CN=532d1e41424819bcc0cd637d8ee141fea585d00d
Certificate serial: 01A0F6CE5F4C0E8A5092ECBE486D60100D78
Authority key identifier: 53:2D:1E:41:42:48:19:BC:C0:CD:63:7D:8E:E1:41:FE:A5:85:D0:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/TU2ZJTkx1-4c9LViGU9hMNCIZR0.roa
Signing time: Thu 01 Oct 2026 09:31:55 +0000
ROA not before: Thu 01 Oct 2026 09:31:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201404
IP address blocks: 2a04:b700:ca75::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 03:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:ce:5f:4c:0e:8a:50:92:ec:be:48:6d:60:10:0d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=532d1e41424819bcc0cd637d8ee141fea585d00d
Validity
Not Before: Oct 1 09:31:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d4d99253931d7ee1cf4b562194f6130d088651d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:17:85:29:d1:4a:8e:e3:12:54:49:12:07:09:
a2:5c:a8:e1:dd:c5:f1:03:31:44:08:af:ce:45:15:
2c:8c:0d:03:7f:5b:b7:e6:00:a8:bb:e1:4b:29:65:
97:bc:94:97:9c:4b:ea:96:6e:46:85:ab:8e:43:0a:
56:ec:b5:9c:d5:3b:6f:f0:97:16:12:8a:13:ad:03:
91:3f:5e:ec:e1:24:f1:ce:52:41:26:40:cf:40:38:
31:a4:a0:ff:38:38:d0:cd:ef:47:88:21:6c:e8:47:
43:e8:11:d8:e6:40:0c:b2:05:be:f6:f5:d6:4d:e0:
f6:d6:ab:3b:f2:f3:e4:49:43:c3:ed:b4:84:43:12:
38:01:20:4c:44:8c:fe:0a:52:33:81:f5:54:42:a0:
ab:82:13:88:9b:5b:94:d0:80:0b:58:23:1c:13:c9:
a8:88:a9:99:c7:49:f7:c4:2b:78:74:18:b7:24:86:
37:92:95:16:24:aa:aa:c8:c9:cd:57:6d:3a:dd:43:
bb:95:6e:a7:24:19:51:c7:71:9c:49:1b:9a:cb:bd:
e4:93:e1:2d:24:8e:7f:03:42:89:45:6f:9d:03:94:
0a:84:60:09:09:76:56:b5:eb:2e:d1:be:e0:42:95:
be:5f:c7:ab:21:fe:5a:84:b8:4b:3f:b2:37:9d:bc:
2a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4D:99:25:39:31:D7:EE:1C:F4:B5:62:19:4F:61:30:D0:88:65:1D
X509v3 Authority Key Identifier:
keyid:53:2D:1E:41:42:48:19:BC:C0:CD:63:7D:8E:E1:41:FE:A5:85:D0:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/TU2ZJTkx1-4c9LViGU9hMNCIZR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:b700:ca75::/48
Signature Algorithm: sha256WithRSAEncryption
68:94:f4:f9:d0:90:2f:ba:ea:3c:6a:66:ab:5f:51:b0:17:24:
87:1c:dc:43:91:83:ab:ac:e9:bb:dd:45:14:8b:df:c7:1c:16:
c6:7f:2e:2e:b1:4a:b8:c4:5f:8e:15:c6:52:dc:bf:c4:ee:a0:
fd:7e:dd:01:eb:da:8b:32:c4:2b:18:4e:f4:db:80:05:4f:ce:
41:69:9e:55:cc:4a:1d:cf:bb:ae:86:5b:67:29:bb:86:08:fb:
f8:39:41:31:40:b3:86:2f:ee:a6:3e:0a:60:06:5f:12:e6:50:
7a:d9:bf:7a:e4:0c:0d:bf:25:0f:2c:0a:c0:ae:9a:3e:19:7a:
ac:72:1a:91:61:03:a0:3a:1d:16:df:24:cc:6a:af:d1:16:d1:
f4:fc:b0:03:d3:f9:12:69:ee:1a:34:d5:49:60:be:9c:af:53:
0b:4a:b9:2b:60:7d:49:1b:59:7e:f5:71:48:40:76:8f:b4:12:
bd:c3:ca:27:d9:be:4b:e5:13:9c:aa:92:a6:41:3d:1a:a7:fa:
cf:1f:52:fa:06:ad:93:c4:95:c0:5e:c6:b6:d6:cd:c4:bc:19:
76:3c:4a:8f:1d:51:74:8c:5a:f0:f4:b4:8e:d4:05:8b:ab:f7:
2f:a1:b9:a0:41:44:ba:87:9d:11:76:01:40:ca:9c:91:56:43:
fb:3f:0e:8d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaD2zl9MDopQkuy+SG1gEA14MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMmQxZTQxNDI0ODE5YmNjMGNkNjM3ZDhlZTE0MWZlYTU4
NWQwMGQwHhcNMjYxMDAxMDkzMTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDRkOTkyNTM5MzFkN2VlMWNmNGI1NjIxOTRmNjEzMGQwODg2NTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyheFKdFKjuMSVEkSBwmiXKjh3cXx
AzFECK/ORRUsjA0Df1u35gCou+FLKWWXvJSXnEvqlm5GhauOQwpW7LWc1Ttv8JcW
EooTrQORP17s4STxzlJBJkDPQDgxpKD/ODjQze9HiCFs6EdD6BHY5kAMsgW+9vXW
TeD21qs78vPkSUPD7bSEQxI4ASBMRIz+ClIzgfVUQqCrghOIm1uU0IALWCMcE8mo
iKmZx0n3xCt4dBi3JIY3kpUWJKqqyMnNV2063UO7lW6nJBlRx3GcSRuay73kk+Et
JI5/A0KJRW+dA5QKhGAJCXZWtesu0b7gQpW+X8erIf5ahLhLP7I3nbwqwwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFE1NmSU5MdfuHPS1YhlPYTDQiGUdMB8GA1UdIwQY
MBaAFFMtHkFCSBm8wM1jfY7hQf6lhdANMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXkwZVFVSklHYnpBeldOOWp1RkJfcVdGMEEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC83OGM1NzctOGY5OC00MGIyLWIwMWQt
MTA3NzdmOWUzNjg1LzEvVFUyWkpUa3gxLTRjOUxWaUdVOWhNTkNJWlIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC83OGM1NzctOGY5OC00MGIyLWIwMWQtMTA3NzdmOWUzNjg1
LzEvVXkwZVFVSklHYnpBeldOOWp1RkJfcVdGMEEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgS3AMp1
MA0GCSqGSIb3DQEBCwUAA4IBAQBolPT50JAvuuo8amarX1GwFySHHNxDkYOrrOm7
3UUUi9/HHBbGfy4usUq4xF+OFcZS3L/E7qD9ft0B69qLMsQrGE7024AFT85BaZ5V
zEodz7uuhltnKbuGCPv4OUExQLOGL+6mPgpgBl8S5lB62b965AwNvyUPLArArpo+
GXqschqRYQOgOh0W3yTMaq/RFtH0/LAD0/kSae4aNNVJYL6cr1MLSrkrYH1JG1l+
9XFIQHaPtBK9w8on2b5L5ROcqpKmQT0ap/rPH1L6Bq2TxJXAXsa21s3EvBl2PEqP
HVF0jFrw9LSO1AWLq/cvobmgQUS6h50RdgFAypyRVkP7Pw6N
-----END CERTIFICATE-----
Generated at Sun Oct 11 08:22:32 2026 by rpki-client