Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/tvPpTj3SkVDH4hxSKMfdOwaSdvU.roa
File: tvPpTj3SkVDH4hxSKMfdOwaSdvU.roa (raw, json)
Hash identifier: iw2msWLu3sesFk56l44SUZsJ1TXs88roh5oLfwHDZK4=
Subject key identifier: B6:F3:E9:4E:3D:D2:91:50:C7:E2:1C:52:28:C7:DD:3B:06:92:76:F5
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 019FACD03689D6CDD9E4FECBC9639F33B0C1
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/tvPpTj3SkVDH4hxSKMfdOwaSdvU.roa
Signing time: Wed 29 Jul 2026 07:39:14 +0000
ROA not before: Wed 29 Jul 2026 07:39:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208314
IP address blocks: 185.95.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:d0:36:89:d6:cd:d9:e4:fe:cb:c9:63:9f:33:b0:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Jul 29 07:39:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b6f3e94e3dd29150c7e21c5228c7dd3b069276f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d2:37:14:51:b6:fd:4a:b9:7d:e7:6c:16:8f:
99:21:2c:e8:7f:74:ab:b7:b6:d8:11:c4:97:44:dc:
65:e7:4c:41:1e:00:f7:ec:8d:64:79:7a:76:bd:3f:
48:41:75:f1:b8:06:3e:24:4b:75:78:fe:f5:4c:0e:
b8:86:32:77:ba:12:f3:71:55:4c:47:d8:85:8d:10:
ce:c2:0c:58:e5:46:a6:d1:96:ff:a0:c0:14:27:48:
84:54:dc:f6:4c:98:45:5d:02:cd:47:59:7b:cc:cb:
16:af:2a:2b:54:61:1c:d6:4c:57:88:30:5c:1c:2a:
cf:fa:5d:07:b5:71:e6:1b:ed:6e:38:94:b2:42:1d:
62:22:29:b5:57:49:b7:73:fd:76:d1:4f:43:2a:d4:
e1:26:62:62:fd:ba:14:58:87:0a:71:25:c2:a6:e2:
5b:c2:d8:b0:92:78:e8:a6:c2:37:21:b9:78:3e:80:
96:54:c5:d5:4a:89:5e:a3:03:db:6b:6d:39:fe:df:
ec:8e:47:71:d5:cb:5b:6c:a9:2e:6f:a0:80:d6:14:
ac:5c:8a:e7:e0:9a:24:27:8b:a6:4d:d1:8e:46:99:
17:a5:96:e4:99:27:23:8a:d7:c9:11:ac:f8:98:f5:
45:15:37:15:1b:f0:a9:3e:f8:84:24:8a:b0:d3:2e:
ef:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F3:E9:4E:3D:D2:91:50:C7:E2:1C:52:28:C7:DD:3B:06:92:76:F5
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/tvPpTj3SkVDH4hxSKMfdOwaSdvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.229.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:e3:1e:8a:e2:0b:01:f6:4e:b3:2e:81:23:b9:39:5b:96:35:
15:f5:70:e5:77:c1:0b:77:6e:33:d2:62:5d:65:d2:ae:df:c6:
e2:71:90:20:81:c8:cb:58:e3:b3:a4:60:5b:1e:f9:d4:04:88:
76:d5:73:ba:d2:97:79:cb:87:29:2b:13:12:33:fe:1f:5b:07:
01:5f:93:20:e8:86:0a:a6:6d:d5:6e:52:ae:77:5b:34:0d:72:
1f:a9:99:12:29:a3:9d:d3:74:03:57:b3:8d:e0:ab:58:06:09:
2d:ed:93:b9:37:57:e4:7e:fa:77:bf:48:70:90:9f:f0:5f:57:
26:df:0f:d9:41:4a:ec:62:7f:95:d1:fa:75:fa:b2:fb:72:c9:
33:06:14:d5:69:bf:5a:4f:a0:1a:86:7a:de:b7:49:53:86:48:
0f:45:ee:95:93:da:1d:93:88:61:e7:8b:fd:5e:bf:83:98:0b:
3b:f9:67:ca:7a:42:3c:c3:d3:25:e2:3b:50:96:5d:8c:1b:33:
fa:47:46:c6:3e:28:eb:09:05:a4:35:d1:8c:85:33:cc:a2:46:
60:97:51:48:41:77:5f:65:5d:53:a4:44:82:72:36:d6:ca:41:
8e:51:ba:bd:dc:eb:40:f6:89:e1:29:e1:1c:8d:3a:0f:19:38:
d0:e6:40:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 18:41:55 2026 by rpki-client