Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/73B72Fuutv72CRfFwirCPmZ-tbo.roa
File: 73B72Fuutv72CRfFwirCPmZ-tbo.roa (raw, json)
Hash identifier: Rn+POvRPX9OA3Ci9WQyIJiYdAZH5HQimI05z8Vk74C4=
Subject key identifier: EF:70:7B:D8:5B:AE:B6:FE:F6:09:17:C5:C2:2A:C2:3E:66:7E:B5:BA
Certificate issuer: /CN=b464e0af28b755c4ec88010d94298697d1883933
Certificate serial: 01A162A6382E27E09622E620BD62710B195D
Authority key identifier: B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/73B72Fuutv72CRfFwirCPmZ-tbo.roa
Signing time: Thu 22 Oct 2026 08:07:02 +0000
ROA not before: Thu 22 Oct 2026 08:07:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2.56.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:a6:38:2e:27:e0:96:22:e6:20:bd:62:71:0b:19:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b464e0af28b755c4ec88010d94298697d1883933
Validity
Not Before: Oct 22 08:07:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef707bd85baeb6fef60917c5c22ac23e667eb5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:92:83:84:82:aa:01:5c:b4:3f:00:ec:ec:cd:
0d:d9:72:a9:73:1d:93:19:78:2b:81:b2:fe:31:e9:
ae:6a:02:70:ec:5f:66:6c:50:0d:6b:54:43:5c:9c:
e5:c3:2c:2b:7b:65:95:d4:93:7e:f5:d0:95:6e:0c:
ca:c6:93:45:ed:f1:b2:61:3c:15:fe:88:51:ad:cd:
16:d1:7d:02:b1:33:7e:3b:70:30:d1:e1:e7:57:51:
54:19:38:7f:db:82:80:bc:84:2a:00:ac:58:ba:8d:
fe:ec:6e:85:2b:2e:33:95:69:72:7c:33:39:af:4f:
f0:00:8d:0a:fe:8a:2f:85:2e:08:74:38:80:0a:ff:
a3:0d:25:7e:76:2e:55:6b:7d:3c:a7:2b:7f:c1:b6:
60:e8:36:35:f9:e1:85:f7:6a:62:57:04:c8:cd:db:
a7:be:37:04:ff:53:7d:8d:da:ed:7a:dc:3e:28:c0:
28:6a:83:95:49:4c:99:3f:d1:29:c7:bd:5f:07:1c:
f1:d5:84:11:59:36:f7:38:01:84:0d:f3:3f:29:fc:
20:f7:5d:38:b5:7b:9a:51:24:31:c9:9a:1c:d9:32:
39:03:bd:56:fa:a4:4c:9b:5a:4d:a5:86:f2:21:47:
89:d9:c8:90:97:6e:df:ed:74:a0:dc:3b:65:90:d6:
8f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:70:7B:D8:5B:AE:B6:FE:F6:09:17:C5:C2:2A:C2:3E:66:7E:B5:BA
X509v3 Authority Key Identifier:
keyid:B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/73B72Fuutv72CRfFwirCPmZ-tbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.15.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:92:ff:7c:63:c0:d7:63:c6:a0:e4:54:78:85:d4:94:7a:c6:
e2:57:73:a2:38:b3:ca:34:4a:8b:d3:7e:7b:07:bb:d5:8b:f3:
24:b9:b2:cf:25:bf:6f:fa:15:41:e0:93:89:ef:77:3c:f1:3b:
28:22:12:bc:a9:76:3a:9e:c3:b0:2b:01:28:84:fe:f1:63:27:
a8:59:08:bf:e0:c0:c9:58:f0:1c:d4:02:e1:be:5f:21:cb:8b:
61:de:75:c9:2c:29:4a:93:a2:e8:92:2f:52:40:b1:a7:a2:cb:
9f:3b:f0:d6:72:87:9a:f3:6e:5a:67:40:2a:a1:9f:9c:a7:51:
87:9e:ef:8f:a1:07:a5:46:54:d7:69:f2:c1:8c:02:b6:4d:51:
fe:2f:39:72:f5:14:12:8a:e2:fc:c6:ad:df:ac:bf:32:05:92:
33:d9:26:02:58:8c:12:71:a7:48:f3:3c:6b:70:b1:02:5f:8e:
f0:96:f8:a2:a3:a8:d3:cb:bd:cb:32:6a:0f:ca:59:63:1c:48:
f8:2b:0b:bd:fb:b7:dd:4e:42:75:c9:b9:e2:c5:61:7d:d7:22:
e0:5a:3a:d9:72:5a:ce:6c:9b:37:56:90:58:b2:fb:d8:dd:8a:
e0:f7:6e:1b:61:3e:e0:1a:d5:21:ec:da:94:24:e4:63:95:48:
c5:35:56:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 18:02:05 2026 by rpki-client