Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/9b519c-61d0-41fc-bc66-219e0ecca660/1/TBVe841E8hTpt49jYkM2WIOXK_k.roa
File: TBVe841E8hTpt49jYkM2WIOXK_k.roa (raw, json)
Hash identifier: NOuhNXk/OufxdL7HRlmsabi419cAeXvXPi+Yj06V8K4=
Subject key identifier: 4C:15:5E:F3:8D:44:F2:14:E9:B7:8F:63:62:43:36:58:83:97:2B:F9
Certificate issuer: /CN=ba37c87a714771c2949248dffb07a155dfe32042
Certificate serial: 019FA23956B7E973B6210907007350B19EEE
Authority key identifier: BA:37:C8:7A:71:47:71:C2:94:92:48:DF:FB:07:A1:55:DF:E3:20:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujfIenFHccKUkkjf-wehVd_jIEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9b519c-61d0-41fc-bc66-219e0ecca660/1/TBVe841E8hTpt49jYkM2WIOXK_k.roa
Signing time: Mon 27 Jul 2026 06:18:14 +0000
ROA not before: Mon 27 Jul 2026 06:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 131.231.0.0/16 maxlen: 16
158.125.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/9b519c-61d0-41fc-bc66-219e0ecca660/1/ujfIenFHccKUkkjf-wehVd_jIEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/9b519c-61d0-41fc-bc66-219e0ecca660/1/ujfIenFHccKUkkjf-wehVd_jIEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ujfIenFHccKUkkjf-wehVd_jIEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 09:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:39:56:b7:e9:73:b6:21:09:07:00:73:50:b1:9e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba37c87a714771c2949248dffb07a155dfe32042
Validity
Not Before: Jul 27 06:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c155ef38d44f214e9b78f636243365883972bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e4:88:f8:1f:0a:09:b8:d3:e5:90:ea:45:b3:
45:3a:07:95:01:79:71:12:20:d2:8a:77:fa:2c:e6:
9a:33:dc:11:2d:b4:85:0a:ce:73:4a:57:26:90:1b:
bb:d9:57:08:53:da:3b:10:73:6f:e5:e2:b3:a7:fa:
2c:c2:f5:da:60:80:d4:ee:8c:16:bb:98:fc:9a:ba:
20:95:1e:0d:3f:18:9a:03:3e:99:94:ee:cc:13:e5:
67:ad:01:4d:2f:b3:d7:eb:5e:4a:5a:1c:8e:b4:77:
30:c1:48:88:93:40:c8:ff:d6:af:71:2d:cc:18:52:
b2:b3:2e:be:8b:2a:7f:0c:81:13:d4:25:76:68:48:
04:ab:bb:7b:94:3c:22:d1:57:2c:ff:e9:08:91:00:
a6:d8:34:8b:82:5e:f9:ae:7e:62:e7:51:e7:04:cd:
6d:fc:09:49:17:7c:44:89:25:dc:12:c6:b1:6b:64:
d1:99:44:99:3c:89:85:98:82:7e:e9:29:28:ce:24:
67:ed:b4:63:8e:5f:2a:65:8f:31:47:a6:a6:e7:b4:
65:dd:16:b5:1e:7f:01:39:56:be:7f:0c:a3:4b:68:
cf:df:0f:5e:43:9c:17:29:51:61:8e:39:7d:d0:d7:
86:f4:39:81:16:41:64:3e:de:1d:bc:d7:8c:4d:c8:
4f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:15:5E:F3:8D:44:F2:14:E9:B7:8F:63:62:43:36:58:83:97:2B:F9
X509v3 Authority Key Identifier:
keyid:BA:37:C8:7A:71:47:71:C2:94:92:48:DF:FB:07:A1:55:DF:E3:20:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujfIenFHccKUkkjf-wehVd_jIEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9b519c-61d0-41fc-bc66-219e0ecca660/1/TBVe841E8hTpt49jYkM2WIOXK_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9b519c-61d0-41fc-bc66-219e0ecca660/1/ujfIenFHccKUkkjf-wehVd_jIEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.231.0.0/16
158.125.0.0/16
Signature Algorithm: sha256WithRSAEncryption
93:4a:40:5e:63:93:6f:dd:01:dc:45:75:28:64:6a:19:14:91:
21:10:29:96:eb:63:3f:2e:ed:69:b2:de:6f:f5:00:e3:b1:da:
87:90:e5:68:69:fa:ea:61:cd:cc:02:6a:dd:ef:9f:d6:74:4f:
b2:07:08:3a:e4:bf:48:17:42:5d:a2:e3:ef:7d:fe:48:12:0a:
8f:ee:d1:4c:23:d8:91:ee:09:db:25:cb:95:02:43:f8:d4:d3:
b7:1e:c8:0e:ad:57:76:4a:63:49:bd:73:21:9c:31:bd:38:87:
0f:3f:09:60:27:15:c5:0d:cd:bf:01:d2:12:ac:46:1f:80:28:
d9:7a:71:f6:e2:c3:20:f6:ad:94:b3:ba:fa:a1:5b:56:b5:30:
ac:62:a5:63:0b:d8:72:2c:42:08:9a:ec:49:a0:6b:a0:0e:a8:
d5:80:07:42:9d:3e:64:3a:87:36:e6:2e:4e:f2:eb:ff:b7:a0:
3a:48:ff:c3:ba:14:23:e2:2a:4a:66:16:e0:c2:f4:b7:f6:7f:
28:7c:51:ed:10:d8:a1:db:fe:b8:32:8e:c9:70:1e:c0:33:49:
21:d1:f2:4c:f0:cb:5f:d0:d7:11:e1:7c:38:88:10:2a:bf:ab:
89:de:17:cd:fb:79:ec:5e:6f:fe:5f:6f:03:91:37:8a:73:1a:
f4:01:6e:af
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgISAZ+iOVa36XO2IQkHAHNQsZ7uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhMzdjODdhNzE0NzcxYzI5NDkyNDhkZmZiMDdhMTU1ZGZl
MzIwNDIwHhcNMjYwNzI3MDYxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzE1NWVmMzhkNDRmMjE0ZTliNzhmNjM2MjQzMzY1ODgzOTcyYmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruSI+B8KCbjT5ZDqRbNFOgeVAXlx
EiDSinf6LOaaM9wRLbSFCs5zSlcmkBu72VcIU9o7EHNv5eKzp/oswvXaYIDU7owW
u5j8mroglR4NPxiaAz6ZlO7ME+VnrQFNL7PX615KWhyOtHcwwUiIk0DI/9avcS3M
GFKysy6+iyp/DIET1CV2aEgEq7t7lDwi0Vcs/+kIkQCm2DSLgl75rn5i51HnBM1t
/AlJF3xEiSXcEsaxa2TRmUSZPImFmIJ+6SkoziRn7bRjjl8qZY8xR6am57Rl3Ra1
Hn8BOVa+fwyjS2jP3w9eQ5wXKVFhjjl90NeG9DmBFkFkPt4dvNeMTchPlQIDAQAB
o4ICDTCCAgkwHQYDVR0OBBYEFEwVXvONRPIU6bePY2JDNliDlyv5MB8GA1UdIwQY
MBaAFLo3yHpxR3HClJJI3/sHoVXf4yBCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWpmSWVuRkhjY0tVa2tqZi13ZWhWZF9qSUVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85YjUxOWMtNjFkMC00MWZjLWJjNjYt
MjE5ZTBlY2NhNjYwLzEvVEJWZTg0MUU4aFRwdDQ5allrTTJXSU9YS19rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85YjUxOWMtNjFkMC00MWZjLWJjNjYtMjE5ZTBlY2NhNjYw
LzEvdWpmSWVuRkhjY0tVa2tqZi13ZWhWZF9qSUVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAg+cDAwCe
fTANBgkqhkiG9w0BAQsFAAOCAQEAk0pAXmOTb90B3EV1KGRqGRSRIRAplutjPy7t
abLeb/UA47Hah5DlaGn66mHNzAJq3e+f1nRPsgcIOuS/SBdCXaLj733+SBIKj+7R
TCPYke4J2yXLlQJD+NTTtx7IDq1XdkpjSb1zIZwxvTiHDz8JYCcVxQ3NvwHSEqxG
H4Ao2Xpx9uLDIPatlLO6+qFbVrUwrGKlYwvYcixCCJrsSaBroA6o1YAHQp0+ZDqH
NuYuTvLr/7egOkj/w7oUI+IqSmYW4ML0t/Z/KHxR7RDYodv+uDKOyXAewDNJIdHy
TPDLX9DXEeF8OIgQKr+rid4Xzft57F5v/l9vA5E3inMa9AFurw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:03:19 2026 by rpki-client