Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/T5CDK_oQYjtuRm85HhxdOK6D6ro.roa
File: T5CDK_oQYjtuRm85HhxdOK6D6ro.roa (raw, json)
Hash identifier: AghyqtWN0W0iUPw+NKSWTH4tyE+1j2q7hdV6WZEDDus=
Subject key identifier: 4F:90:83:2B:FA:10:62:3B:6E:46:6F:39:1E:1C:5D:38:AE:83:EA:BA
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 01A08A8FAF3F10C32F53963AD0C6A30E0D6B
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/T5CDK_oQYjtuRm85HhxdOK6D6ro.roa
Signing time: Thu 10 Sep 2026 09:04:27 +0000
ROA not before: Thu 10 Sep 2026 09:04:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.95.227.0/24 maxlen: 24
212.81.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8f:af:3f:10:c3:2f:53:96:3a:d0:c6:a3:0e:0d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Sep 10 09:04:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f90832bfa10623b6e466f391e1c5d38ae83eaba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:07:0e:f1:02:82:ee:4f:54:f2:c6:b0:4d:f5:
1a:98:60:44:99:70:47:7c:cd:ff:60:1f:a5:99:60:
86:70:0d:55:b0:68:1d:79:6e:a6:7f:fe:92:ec:06:
9f:73:7f:4c:70:bd:32:72:f5:26:a0:f9:ab:97:25:
49:44:bb:37:44:d9:73:52:91:12:e6:89:7e:a6:c0:
2d:a9:c7:3c:0b:b8:d3:8b:3e:81:56:3f:1f:a5:3c:
c1:bd:9c:c4:7d:1f:d8:a7:96:d4:39:19:92:81:fe:
4c:41:6c:6e:c3:dd:a5:d5:fc:a8:82:d9:fc:36:b3:
d4:23:75:b9:ea:e1:fe:88:c5:66:f9:6d:3e:5f:2d:
66:75:6c:1f:b6:a5:5d:62:f8:2b:aa:a0:1b:90:dd:
d8:2d:4a:1a:ee:b1:ab:06:bd:9b:b4:62:6d:54:1e:
f5:94:b9:bd:df:8e:05:01:91:18:db:d3:34:16:52:
b6:8c:2d:2c:30:53:ad:55:8b:ef:e3:67:12:8a:f7:
41:13:bb:f6:d1:90:d1:2d:7d:c0:bf:c9:3d:d0:df:
99:85:11:bf:a0:1b:7e:a4:d9:60:c3:47:95:11:4a:
6c:20:ff:ac:ae:2f:eb:03:51:28:54:4e:50:7e:48:
7d:20:dc:c8:d4:90:b8:ce:a8:19:a7:22:4f:13:fb:
b6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:90:83:2B:FA:10:62:3B:6E:46:6F:39:1E:1C:5D:38:AE:83:EA:BA
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/T5CDK_oQYjtuRm85HhxdOK6D6ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.227.0/24
212.81.44.0/24
Signature Algorithm: sha256WithRSAEncryption
96:9b:42:31:a4:d4:f8:ca:0c:4b:4a:ae:f9:a7:0e:2c:34:36:
96:a0:4d:2b:0f:05:58:0f:74:db:54:6f:bf:ca:6e:38:d0:a4:
7e:54:58:ac:0c:02:f8:27:97:71:57:49:59:ae:a3:a4:f2:8c:
10:1e:90:c9:93:20:e7:a8:e2:2e:63:0a:47:d9:99:88:e6:16:
6f:e2:0a:b3:13:d4:bc:46:b1:19:0f:ae:86:8b:a2:a6:e3:58:
83:1b:68:b7:14:19:60:b9:58:97:c6:be:b4:8e:be:9b:e8:b3:
7d:a1:35:27:8e:54:69:f8:84:fd:96:55:1d:03:ff:b6:6a:c3:
1a:2a:6f:48:37:c1:8e:6d:34:13:4d:76:9c:a6:82:17:2e:ef:
28:42:11:e6:60:68:9f:33:53:2b:ba:ed:fc:3c:c3:69:15:8e:
15:dd:8f:42:2c:8c:7a:ca:85:43:de:74:ef:4f:78:fd:f9:9c:
ac:e2:d8:cd:95:26:d2:1b:c7:e7:d6:36:19:e6:fa:4e:c1:64:
6c:53:d5:f6:26:f1:a9:d7:98:eb:bd:31:dc:2c:03:6b:6b:9b:
8b:18:27:f3:b8:5d:2d:6d:07:8c:1e:7f:1b:dc:6a:7e:ff:e7:
8f:4a:22:ff:56:0d:25:46:27:f3:c9:5c:1b:69:cc:ff:0a:ab:
3c:d0:12:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:56:31 2026 by rpki-client