Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/tcauu97gqx_3OsWJEyJLtylmmP8.roa
File: tcauu97gqx_3OsWJEyJLtylmmP8.roa (raw, json)
Hash identifier: g4WoFZgT3MzcoVX/LXrLBBnWdsRJpBrZA+GD6BcfKaw=
Subject key identifier: B5:C6:AE:BB:DE:E0:AB:1F:F7:3A:C5:89:13:22:4B:B7:29:66:98:FF
Certificate issuer: /CN=d485b6e9d89fb010369971ed88857205985d4918
Certificate serial: 019B7AC884303B77E7A94767A4C76B48998F
Authority key identifier: D4:85:B6:E9:D8:9F:B0:10:36:99:71:ED:88:85:72:05:98:5D:49:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/tcauu97gqx_3OsWJEyJLtylmmP8.roa
Signing time: Thu 01 Jan 2026 18:18:39 +0000
ROA not before: Thu 01 Jan 2026 18:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208725
IP address blocks: 45.87.76.0/22 maxlen: 22
2a0e:f780::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c8:84:30:3b:77:e7:a9:47:67:a4:c7:6b:48:99:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d485b6e9d89fb010369971ed88857205985d4918
Validity
Not Before: Jan 1 18:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5c6aebbdee0ab1ff73ac58913224bb7296698ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3c:82:b2:ca:c4:8c:52:cb:d5:96:d4:ac:ae:
8a:f1:2c:78:ec:5b:42:42:1b:e2:50:76:11:47:1f:
71:9f:74:a2:cd:e0:9e:19:16:bd:e8:93:18:6a:17:
4b:92:f0:7d:34:91:2f:42:d3:78:9e:34:21:eb:8d:
53:3a:2f:f3:25:c2:da:0c:41:3f:a4:95:d9:e9:1f:
02:97:63:6b:16:f0:62:ff:39:97:cb:80:b1:b6:aa:
0f:e5:2a:3e:cc:82:ea:3c:31:f5:9f:86:d8:fa:30:
34:b1:c9:92:50:09:2f:2a:f8:e0:a2:96:af:71:31:
eb:81:b2:c0:81:19:9e:58:5f:70:b1:30:fe:c3:4a:
a7:3e:3e:f3:eb:50:ed:e6:70:7d:b7:b7:39:5e:48:
1d:eb:ce:c8:87:04:eb:f6:1f:af:71:90:e1:5a:5c:
13:c1:b7:97:f1:bc:b9:3d:8d:32:ed:e4:7b:f0:fe:
1b:25:a1:62:8c:df:68:1c:d1:99:0d:e0:18:89:8e:
f2:b5:ae:c6:fb:d0:f2:2e:6c:f7:cc:3d:50:68:1a:
ea:57:51:da:91:ba:83:f4:a6:33:01:b8:60:ed:48:
da:9e:38:31:58:66:2d:d0:27:0d:0c:0c:2a:9f:38:
06:ad:f1:7c:f2:17:78:30:c1:f5:de:8d:f7:aa:98:
e0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C6:AE:BB:DE:E0:AB:1F:F7:3A:C5:89:13:22:4B:B7:29:66:98:FF
X509v3 Authority Key Identifier:
keyid:D4:85:B6:E9:D8:9F:B0:10:36:99:71:ED:88:85:72:05:98:5D:49:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/tcauu97gqx_3OsWJEyJLtylmmP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.76.0/22
IPv6:
2a0e:f780::/29
Signature Algorithm: sha256WithRSAEncryption
80:a4:fe:3d:1a:f3:28:55:52:42:21:55:ff:74:b3:d9:92:68:
d6:d4:ec:74:de:bf:74:97:25:aa:1b:04:9c:3b:a5:74:74:54:
37:92:99:a6:0c:25:46:67:6f:c0:6a:c5:d8:8f:03:e6:f7:a5:
a8:81:35:63:32:86:5d:a9:50:09:9e:1d:1a:cc:ba:4c:f2:76:
8f:31:e9:ba:5a:05:d1:b1:e8:a5:68:49:43:44:84:5b:b2:08:
f9:40:fe:e8:94:c4:ab:ae:b6:88:eb:61:09:09:34:b8:b5:5e:
75:53:cb:e1:26:60:90:bc:62:6f:19:31:f7:6d:4e:4d:fc:ba:
28:fb:f9:e3:36:46:51:5d:5f:5b:b6:b5:80:68:63:60:f4:c9:
b5:58:8e:1c:28:66:70:c5:47:cc:56:f7:59:ef:59:33:4c:0d:
75:c5:07:25:6a:bf:88:cc:7b:02:c5:c0:dd:25:78:e0:87:ba:
69:b8:b4:42:4a:21:0b:d3:ed:dc:4a:e7:9e:32:ac:3e:ff:47:
88:69:4c:fd:88:ec:93:88:59:04:0b:6e:f1:dd:6d:3b:f7:88:
b2:14:dc:1b:44:34:cb:81:eb:07:f7:ff:2e:53:b9:cd:76:2f:
a7:00:aa:6e:18:65:c7:5d:4a:e4:95:87:14:02:4f:6d:bd:19:
09:54:dc:4d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZt6yIQwO3fnqUdnpMdrSJmPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ODViNmU5ZDg5ZmIwMTAzNjk5NzFlZDg4ODU3MjA1OTg1
ZDQ5MTgwHhcNMjYwMTAxMTgxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNWM2YWViYmRlZTBhYjFmZjczYWM1ODkxMzIyNGJiNzI5NjY5OGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjyCssrEjFLL1ZbUrK6K8Sx47FtC
QhviUHYRRx9xn3SizeCeGRa96JMYahdLkvB9NJEvQtN4njQh641TOi/zJcLaDEE/
pJXZ6R8Cl2NrFvBi/zmXy4CxtqoP5So+zILqPDH1n4bY+jA0scmSUAkvKvjgopav
cTHrgbLAgRmeWF9wsTD+w0qnPj7z61Dt5nB9t7c5Xkgd687IhwTr9h+vcZDhWlwT
wbeX8by5PY0y7eR78P4bJaFijN9oHNGZDeAYiY7yta7G+9DyLmz3zD1QaBrqV1Ha
kbqD9KYzAbhg7UjanjgxWGYt0CcNDAwqnzgGrfF88hd4MMH13o33qpjgJQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFLXGrrve4Ksf9zrFiRMiS7cpZpj/MB8GA1UdIwQY
MBaAFNSFtunYn7AQNplx7YiFcgWYXUkYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUlXMjZkaWZzQkEybVhIdGlJVnlCWmhkU1JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84NTg5MTAtYzUwMS00NTljLWEzMTMt
N2FjNjgwZWQ1ZGQ3LzEvdGNhdXU5N2dxeF8zT3NXSkV5Skx0eWxtbVA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy84NTg5MTAtYzUwMS00NTljLWEzMTMtN2FjNjgwZWQ1ZGQ3
LzEvMUlXMjZkaWZzQkEybVhIdGlJVnlCWmhkU1JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLVdMMA0E
AgACMAcDBQMqDveAMA0GCSqGSIb3DQEBCwUAA4IBAQCApP49GvMoVVJCIVX/dLPZ
kmjW1Ox03r90lyWqGwScO6V0dFQ3kpmmDCVGZ2/AasXYjwPm96WogTVjMoZdqVAJ
nh0azLpM8naPMem6WgXRseilaElDRIRbsgj5QP7olMSrrraI62EJCTS4tV51U8vh
JmCQvGJvGTH3bU5N/Loo+/njNkZRXV9btrWAaGNg9Mm1WI4cKGZwxUfMVvdZ71kz
TA11xQclar+IzHsCxcDdJXjgh7ppuLRCSiEL0+3cSueeMqw+/0eIaUz9iOyTiFkE
C27x3W0794iyFNwbRDTLgesH9/8uU7nNdi+nAKpuGGXHXUrklYcUAk9tvRkJVNxN
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:41:52 2026 by rpki-client