Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/tWOuO39d71f5m4fAGnZWNgBEmoQ.roa
File: tWOuO39d71f5m4fAGnZWNgBEmoQ.roa (raw, json)
Hash identifier: 9CQk4BPxr4B6xZlS3j9hWqhPr4OQvnm1ZyCmYYoOxCM=
Subject key identifier: B5:63:AE:3B:7F:5D:EF:57:F9:9B:87:C0:1A:76:56:36:00:44:9A:84
Certificate issuer: /CN=c8d5e37178d8524c72660a1d796165999e586622
Certificate serial: 019E735D2EB39B34BD714DF368B1EF97DC74
Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/tWOuO39d71f5m4fAGnZWNgBEmoQ.roa
Signing time: Fri 29 May 2026 10:52:27 +0000
ROA not before: Fri 29 May 2026 10:52:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59456
IP address blocks: 185.55.24.0/22 maxlen: 22
2a01:8cc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:73:5d:2e:b3:9b:34:bd:71:4d:f3:68:b1:ef:97:dc:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622
Validity
Not Before: May 29 10:52:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b563ae3b7f5def57f99b87c01a76563600449a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:60:6e:8c:ec:fd:6e:22:a8:3b:00:87:1a:82:
75:d0:1a:c2:60:1c:32:6f:12:fe:81:2b:0e:68:cc:
65:f5:06:c1:e0:dd:f3:26:e4:d6:67:ab:20:dd:73:
b6:94:45:77:2a:ce:f2:49:19:20:1a:7a:c0:d0:f3:
4b:0f:07:db:72:0d:12:a9:1e:44:79:92:bc:48:85:
ba:82:4d:dd:d4:92:32:34:6e:11:49:c3:3a:e4:d1:
b3:d1:b5:a3:a7:07:55:d7:47:e9:12:7f:1a:7a:38:
64:35:7d:a3:32:de:21:b6:1f:12:ed:b2:33:3d:20:
75:72:22:4e:ee:4b:96:cc:3e:27:20:05:66:5e:ec:
11:fd:7a:9e:4b:9f:0a:91:3b:14:ff:f6:4d:6d:55:
b7:8e:13:fe:59:66:99:c8:40:ac:5f:7d:ac:b1:cd:
63:00:96:b2:d2:c5:be:c5:c2:e6:6e:be:b6:fe:b5:
a0:3f:cb:e3:ce:5e:6d:77:36:ad:ec:60:c8:2b:f4:
be:2d:e0:46:e2:fe:73:e1:63:f9:80:5b:e1:9b:e5:
cd:e2:66:c7:eb:c7:0b:e5:13:4c:e5:f3:02:9c:e4:
96:3a:4c:00:0e:fa:cb:69:78:f1:8b:73:de:d5:0d:
ef:92:59:ea:07:a0:5e:d8:ba:2f:f5:78:33:5f:1c:
ee:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:63:AE:3B:7F:5D:EF:57:F9:9B:87:C0:1A:76:56:36:00:44:9A:84
X509v3 Authority Key Identifier:
keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/tWOuO39d71f5m4fAGnZWNgBEmoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.24.0/22
IPv6:
2a01:8cc0::/32
Signature Algorithm: sha256WithRSAEncryption
89:bc:72:63:94:45:8f:a0:f1:5e:0f:83:bb:c3:4f:77:7d:57:
46:dc:fb:0b:ee:6c:f6:95:90:7e:75:27:f1:a4:e1:b5:7a:c2:
fc:dd:df:1a:b7:7f:e1:c3:fc:35:e8:cb:b8:bd:27:cf:48:f6:
c8:c5:35:92:34:33:13:ac:46:30:20:59:d8:9f:cb:d7:37:8c:
17:5b:13:df:da:59:80:f4:ca:c6:b5:58:5b:cd:8c:23:f7:12:
83:fb:2a:8b:41:20:32:68:7a:82:8f:68:12:49:bb:29:d3:29:
29:eb:a6:7f:46:ec:f6:6b:94:83:44:d4:9b:15:7a:01:b1:b5:
b2:a9:c2:41:be:3b:26:ae:0c:ac:aa:13:61:4b:0f:26:f0:67:
b5:4c:c7:ad:1d:fd:c6:3e:9b:84:b4:d2:ea:47:69:51:30:e8:
fa:cf:2e:e7:f6:f9:b8:0a:1e:bb:11:10:3b:fd:44:06:4c:da:
0d:78:e4:3a:cf:c1:6a:91:2d:18:20:0d:aa:49:15:33:c9:c6:
f7:4d:e2:54:ea:1f:db:fa:8a:e4:bb:e3:ef:96:ee:d1:05:97:
7e:7a:15:6f:d5:c9:9c:74:f3:a9:ea:19:25:ed:59:09:a2:e9:
48:7e:d9:d5:30:48:3d:9e:cc:fa:93:7c:62:ea:2b:02:0e:e7:
fe:a4:6e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:52:32 2026 by rpki-client