Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/TSXro7kP0kr6K6zMwB0QwwMFymU.roa
File: TSXro7kP0kr6K6zMwB0QwwMFymU.roa (raw, json)
Hash identifier: rpZixq78F8an82UTSJ6FARybyDYbVv/rRNJIY9c9W4A=
Subject key identifier: 4D:25:EB:A3:B9:0F:D2:4A:FA:2B:AC:CC:C0:1D:10:C3:03:05:CA:65
Certificate issuer: /CN=50f5fe99bc2232887116fdac82d4082adbc6acb7
Certificate serial: 01A117A3169ECB341536D6338175EB5AA833
Authority key identifier: 50:F5:FE:99:BC:22:32:88:71:16:FD:AC:82:D4:08:2A:DB:C6:AC:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UPX-mbwiMohxFv2sgtQIKtvGrLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/TSXro7kP0kr6K6zMwB0QwwMFymU.roa
Signing time: Wed 07 Oct 2026 18:32:06 +0000
ROA not before: Wed 07 Oct 2026 18:32:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202244
IP address blocks: 176.121.252.0/24 maxlen: 24
176.121.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UPX-mbwiMohxFv2sgtQIKtvGrLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 03:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:a3:16:9e:cb:34:15:36:d6:33:81:75:eb:5a:a8:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50f5fe99bc2232887116fdac82d4082adbc6acb7
Validity
Not Before: Oct 7 18:32:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d25eba3b90fd24afa2bacccc01d10c30305ca65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a2:b4:73:83:d2:33:b1:5b:1a:2d:29:6b:c2:
cc:21:31:73:69:2e:82:f1:d2:c1:9c:a9:cd:83:bf:
e9:c8:65:ee:64:ad:bf:60:d0:5e:8d:d2:f7:d9:39:
87:0b:53:c5:53:8c:e2:90:f5:4f:91:1d:f4:e9:10:
04:18:fe:64:fe:19:4c:e9:bf:27:8a:14:a9:12:ee:
9e:af:ac:66:fb:32:f3:d8:8e:50:c4:2c:c2:c8:06:
07:33:8f:f4:4a:25:ee:d9:24:da:c8:56:ae:13:53:
ce:51:0c:ad:5a:e7:7a:79:e8:cb:e0:66:4a:3e:1b:
9e:5e:0b:c8:bf:58:70:07:8a:ac:49:8e:01:af:5e:
5b:5d:8d:94:1d:2d:b1:ff:36:06:e8:0b:5c:0e:42:
18:8d:64:11:e2:bb:5f:27:8b:89:ce:0c:cc:82:45:
27:59:98:4a:70:d1:e0:10:37:17:c4:9d:d8:55:a5:
8f:10:10:71:80:6d:e3:f2:16:a4:e5:a6:82:52:02:
95:21:e9:a7:7e:23:93:13:20:48:e0:fa:7a:4b:71:
f1:12:15:45:e2:d0:d8:29:e3:8f:f2:ef:19:fe:8e:
7c:62:0f:a4:db:4f:33:21:dc:2d:24:ee:5d:0c:c1:
8c:75:bc:ff:09:27:3c:2a:09:fe:14:fe:ac:57:ec:
12:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:25:EB:A3:B9:0F:D2:4A:FA:2B:AC:CC:C0:1D:10:C3:03:05:CA:65
X509v3 Authority Key Identifier:
keyid:50:F5:FE:99:BC:22:32:88:71:16:FD:AC:82:D4:08:2A:DB:C6:AC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPX-mbwiMohxFv2sgtQIKtvGrLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/TSXro7kP0kr6K6zMwB0QwwMFymU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/77fa2a-13fc-4da6-aebb-7456f430c3f1/1/UPX-mbwiMohxFv2sgtQIKtvGrLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.121.252.0/23
Signature Algorithm: sha256WithRSAEncryption
09:79:4e:0c:b8:73:38:b1:5c:9f:21:a2:7e:f2:4c:08:7a:36:
e3:28:c2:bf:9a:e5:84:a9:c5:e9:ea:6f:29:4d:35:4b:d0:b1:
57:65:e3:8b:d3:58:cc:58:f7:32:39:0f:76:f9:69:ef:3b:9d:
cb:63:e9:e5:90:32:63:30:30:50:94:cb:41:d4:d6:46:ce:30:
65:fa:9e:5b:3d:81:7e:b4:10:dd:58:dc:e8:d6:01:28:76:da:
dc:5c:17:a1:13:0c:7c:2f:7c:30:0b:4a:a7:c7:8a:1e:ab:aa:
68:b0:0a:f1:e9:3c:94:0a:2d:5b:ab:e2:f6:8f:d4:22:8a:cd:
bf:03:7a:43:b3:b1:32:b0:18:30:40:67:46:85:b7:bb:8d:4a:
0b:b6:94:01:3b:6d:ea:f2:29:bd:a0:7a:1d:1d:b4:e1:45:4b:
c7:ed:7a:5f:70:e6:fa:cd:f7:bd:31:9f:33:dd:36:32:35:b6:
80:98:d8:1e:4f:92:05:65:29:cc:48:8f:e5:15:af:09:72:06:
27:21:96:33:17:7e:8a:49:d4:0c:a7:83:46:85:58:e8:80:69:
d8:10:64:bd:4b:24:22:61:20:05:5e:21:1c:4d:3a:6b:86:ae:
01:d9:fa:53:85:3a:14:b2:00:31:45:06:d1:6b:45:ff:1b:c4:
ad:74:6b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:09:34 2026 by rpki-client