Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/T0aT3QkWaPX97qryFtMvnLWmpJ0.roa
File: T0aT3QkWaPX97qryFtMvnLWmpJ0.roa (raw, json)
Hash identifier: hVVcWwS0KmrThtmWJzxkk3nULKlXJIyRvJXdRXp5mwI=
Subject key identifier: 4F:46:93:DD:09:16:68:F5:FD:EE:AA:F2:16:D3:2F:9C:B5:A6:A4:9D
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 01A07D4221950E77AD95A336CA313CDD5D1A
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/T0aT3QkWaPX97qryFtMvnLWmpJ0.roa
Signing time: Mon 07 Sep 2026 19:04:40 +0000
ROA not before: Mon 07 Sep 2026 19:04:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 262287
IP address blocks: 149.126.12.0/24 maxlen: 24
192.145.70.0/24 maxlen: 24
2a0a:8f40:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7d:42:21:95:0e:77:ad:95:a3:36:ca:31:3c:dd:5d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Sep 7 19:04:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f4693dd091668f5fdeeaaf216d32f9cb5a6a49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:51:57:6e:27:65:65:4a:0a:01:0c:22:06:0c:
45:87:02:15:a3:05:02:61:71:fb:21:a0:9b:fb:39:
83:dd:b8:6a:be:dd:41:7d:c1:7d:0e:3e:bd:79:fe:
09:8c:98:94:47:61:64:44:c4:66:ef:fb:b7:b6:99:
b7:f5:c4:a7:d3:21:66:ae:9d:48:6f:4f:ad:da:0d:
54:b2:2e:55:0a:a3:cd:df:6f:9c:53:39:e3:9a:93:
87:6b:62:c2:fa:e2:dc:48:d2:c5:7a:ca:1a:e9:55:
eb:fa:b3:48:79:8c:f9:ae:5c:b6:df:2a:b5:6c:ff:
cc:f7:2a:9f:75:84:36:bb:2e:b2:4e:61:6a:54:90:
54:27:9c:f1:2e:bd:5a:39:b5:0a:af:20:62:c0:27:
2e:39:df:22:18:16:74:57:55:ef:f7:6e:a3:f5:b2:
0f:72:51:64:ae:82:69:13:0c:a6:fd:70:e2:ec:a4:
18:ec:3c:cb:e2:4a:8c:bc:8e:a8:21:2e:aa:ef:40:
de:96:8c:3e:38:d5:f5:bc:d1:92:b4:0a:db:97:78:
1a:bb:2a:8f:7e:5c:89:1e:28:a7:09:b0:01:51:98:
0b:af:36:0c:51:67:1b:72:03:0c:4c:a1:63:66:61:
d2:12:13:48:8c:ab:4f:1d:16:99:a6:4e:d9:52:94:
59:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:46:93:DD:09:16:68:F5:FD:EE:AA:F2:16:D3:2F:9C:B5:A6:A4:9D
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/T0aT3QkWaPX97qryFtMvnLWmpJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.126.12.0/24
192.145.70.0/24
IPv6:
2a0a:8f40:5::/48
Signature Algorithm: sha256WithRSAEncryption
0f:fe:76:82:b6:26:cd:30:a0:79:aa:5c:3f:46:a2:e9:f7:66:
57:6b:29:ba:dc:1d:26:d5:f1:c9:13:a1:8a:2f:29:d8:29:1d:
f3:64:72:41:3c:a5:a2:61:45:1c:57:54:26:c5:16:c5:ba:b8:
ec:c4:f2:ec:f1:2d:39:e7:ca:8b:3f:54:8e:f2:a8:68:b7:d1:
20:b5:6d:3a:18:33:22:e6:dc:e9:ae:e7:51:7f:77:eb:09:f3:
72:bc:c9:ba:4a:99:19:b1:5a:07:97:17:62:b8:c3:81:5c:2e:
d2:74:1a:04:99:20:93:25:e5:4b:ec:3d:cd:3c:93:20:fd:44:
22:49:d9:2c:9a:e3:7a:81:a7:fe:98:41:d5:83:c8:bc:49:d6:
f3:14:cb:bd:3f:fd:f0:15:34:5e:f8:62:a7:9b:ec:19:cc:e3:
71:20:63:69:6b:5f:4a:2d:8a:5c:51:58:7a:17:10:64:3d:66:
f1:3e:9e:39:88:6f:fa:e3:69:4c:d6:aa:d2:87:e2:19:a7:ae:
97:25:16:4e:fc:89:0b:f7:a4:3a:e8:4d:03:83:04:d7:f1:d2:
28:ef:e0:a9:3a:69:95:f3:94:39:21:2c:b0:0e:e2:9c:ec:40:
d7:a1:06:c2:01:9e:7e:1a:8e:93:a1:f5:e0:9b:7f:37:7e:7b:
a8:73:1d:14
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAaB9QiGVDnetlaM2yjE83V0aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy
ZGJmMDcwHhcNMjYwOTA3MTkwNDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjQ2OTNkZDA5MTY2OGY1ZmRlZWFhZjIxNmQzMmY5Y2I1YTZhNDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslFXbidlZUoKAQwiBgxFhwIVowUC
YXH7IaCb+zmD3bhqvt1BfcF9Dj69ef4JjJiUR2FkRMRm7/u3tpm39cSn0yFmrp1I
b0+t2g1Usi5VCqPN32+cUznjmpOHa2LC+uLcSNLFesoa6VXr+rNIeYz5rly23yq1
bP/M9yqfdYQ2uy6yTmFqVJBUJ5zxLr1aObUKryBiwCcuOd8iGBZ0V1Xv926j9bIP
clFkroJpEwym/XDi7KQY7DzL4kqMvI6oIS6q70Delow+ONX1vNGStArbl3gauyqP
flyJHiinCbABUZgLrzYMUWcbcgMMTKFjZmHSEhNIjKtPHRaZpk7ZUpRZKwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFE9Gk90JFmj1/e6q8hbTL5y1pqSdMB8GA1UdIwQY
MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt
ZjNlNTA2YWVhYTAxLzEvVDBhVDNRa1dhUFg5N3FyeUZ0TXZuTFdtcEowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx
LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAlX4MAwQA
wJFGMA8EAgACMAkDBwAqCo9AAAUwDQYJKoZIhvcNAQELBQADggEBAA/+doK2Js0w
oHmqXD9Goun3ZldrKbrcHSbV8ckToYovKdgpHfNkckE8paJhRRxXVCbFFsW6uOzE
8uzxLTnnyos/VI7yqGi30SC1bToYMyLm3Omu51F/d+sJ83K8ybpKmRmxWgeXF2K4
w4FcLtJ0GgSZIJMl5UvsPc08kyD9RCJJ2Sya43qBp/6YQdWDyLxJ1vMUy70//fAV
NF74Yqeb7BnM43EgY2lrX0otilxRWHoXEGQ9ZvE+njmIb/rjaUzWqtKH4hmnrpcl
Fk78iQv3pDroTQODBNfx0ijv4Kk6aZXzlDkhLLAO4pzsQNehBsIBnn4ajpOh9eCb
fzd+e6hzHRQ=
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:06:46 2026 by rpki-client