Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/twRPR7YMxdedDnIoOoDSSMLLV5I.roa
File: twRPR7YMxdedDnIoOoDSSMLLV5I.roa (raw, json)
Hash identifier: iG5iFiWGGZ1ctfdvgUYVkBJLEXDfn4PbykZkkKVwlz8=
Subject key identifier: B7:04:4F:47:B6:0C:C5:D7:9D:0E:72:28:3A:80:D2:48:C2:CB:57:92
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 01A0953E5D9FD7CC3B37CAE98FDD553A368A
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/twRPR7YMxdedDnIoOoDSSMLLV5I.roa
Signing time: Sat 12 Sep 2026 10:51:27 +0000
ROA not before: Sat 12 Sep 2026 10:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39238
IP address blocks: 146.19.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:95:3e:5d:9f:d7:cc:3b:37:ca:e9:8f:dd:55:3a:36:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Sep 12 10:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7044f47b60cc5d79d0e72283a80d248c2cb5792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:25:9a:1d:4b:b3:70:0c:0d:66:e2:fb:a9:e5:
08:bf:c5:d2:85:b6:d5:4c:71:0f:fa:d8:06:f8:30:
60:0d:b9:dc:45:f2:02:18:04:09:1a:fd:6f:2c:ca:
18:c6:c1:6c:c0:31:c2:83:32:9b:47:bb:d8:c1:d2:
04:e2:f3:98:e0:b4:74:dc:c0:64:ba:11:eb:85:ff:
2b:86:62:41:9d:15:32:16:ab:3b:01:b5:e8:bf:11:
fe:01:2e:a9:22:87:c1:6e:57:28:36:aa:a9:80:ac:
bb:dd:c5:08:85:aa:eb:6c:71:21:ab:cb:ca:4d:3f:
c1:53:1b:82:64:4a:3c:4d:5d:ce:99:1e:51:85:d0:
39:a1:c7:67:0a:9a:e6:3c:9d:f9:43:00:ec:4a:09:
77:d1:56:d9:78:9c:22:5f:4a:bc:17:ed:4a:2e:ea:
fc:33:95:61:3e:8c:9d:ea:3b:b8:92:90:f6:e5:d3:
d7:c7:2d:40:cf:80:2a:21:55:09:3c:a5:e1:c0:20:
13:c8:ed:1c:9e:fa:da:7d:c8:71:6f:13:e6:d0:23:
8f:4b:6f:f3:d9:3b:34:c4:a2:dd:6b:b3:fa:d6:c2:
2c:14:9d:77:d3:03:57:5d:bd:3b:7f:65:30:ef:d1:
a0:a1:00:c2:0e:1a:9f:71:be:62:97:dd:d2:f0:f8:
bf:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:04:4F:47:B6:0C:C5:D7:9D:0E:72:28:3A:80:D2:48:C2:CB:57:92
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/twRPR7YMxdedDnIoOoDSSMLLV5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.233.0/24
Signature Algorithm: sha256WithRSAEncryption
63:e0:6f:54:83:e7:aa:6d:2a:97:f2:33:76:8f:5e:92:d0:9d:
84:97:58:5a:bd:f3:f4:15:6d:c1:53:c9:f2:4a:92:15:b0:fb:
19:6f:d3:10:92:c3:ee:59:2e:45:0a:7e:97:5d:42:98:43:09:
cd:65:78:06:31:10:5a:37:57:63:bd:21:4f:c4:1d:de:7c:53:
45:a1:1f:0c:49:e0:d2:0e:12:c1:53:2b:c0:8d:78:58:29:7b:
7c:16:ae:bb:98:bb:e1:d0:65:e1:48:a5:7f:0a:ef:be:45:3b:
24:f7:df:18:73:17:2f:ce:23:f5:89:7d:55:fd:28:60:ce:b9:
b8:11:23:9e:48:2f:41:56:2f:c7:0d:98:19:7c:d9:eb:35:8a:
a5:56:c2:2e:26:f6:4b:10:05:29:19:96:d0:a8:05:ba:01:43:
73:9f:b3:c7:07:a1:a0:64:fd:a8:a2:c8:dd:0e:f5:28:3f:b0:
6d:ac:3f:e1:ac:20:c7:3f:f9:ea:7b:ad:60:12:20:4a:cd:14:
bb:0e:fb:1d:69:44:10:e9:14:46:d0:99:3a:f8:ea:61:43:5a:
33:cd:51:bc:f1:c7:02:70:73:ae:d6:9f:93:7e:41:22:f8:c0:
75:93:be:f3:34:36:ef:0b:12:23:eb:87:c8:62:df:aa:1b:49:
ab:8e:42:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:26:42 2026 by rpki-client