Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/TKWI8XS193ADcVFIn90ANl9IK-s.roa
File: TKWI8XS193ADcVFIn90ANl9IK-s.roa (raw, json)
Hash identifier: jQ41o4FdutHHdY4rxkf8XuJJpwDEQapMh+oZbc9vteM=
Subject key identifier: 4C:A5:88:F1:74:B5:F7:70:03:71:51:48:9F:DD:00:36:5F:48:2B:EB
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 019CA0910FC40F20B7E917402901878B9D95
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/TKWI8XS193ADcVFIn90ANl9IK-s.roa
Signing time: Fri 27 Feb 2026 19:26:27 +0000
ROA not before: Fri 27 Feb 2026 19:26:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215174
IP address blocks: 45.135.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a0:91:0f:c4:0f:20:b7:e9:17:40:29:01:87:8b:9d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Feb 27 19:26:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ca588f174b5f770037151489fdd00365f482beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7a:b3:ab:1e:b7:4c:08:aa:e5:2f:74:1c:c0:
48:22:51:ad:03:9f:fa:67:31:e7:f2:00:1a:80:77:
8c:a7:9e:fb:ad:d9:8f:bc:86:d7:72:86:6d:d9:29:
0e:27:5d:7d:76:ae:76:c6:dc:0a:c7:32:16:e9:2a:
72:a4:81:56:7b:01:ea:aa:0a:32:a2:25:44:0e:43:
23:e6:4c:cc:a5:91:89:fe:db:d1:ef:6e:ea:13:4b:
69:6b:8f:81:e0:b1:fc:03:12:49:b7:f3:ca:0d:b9:
8f:72:40:4c:65:d5:64:ac:e2:43:4f:8a:e3:4a:e9:
fe:bd:cf:3a:46:1e:5e:0f:e4:35:a6:1f:63:b2:6d:
64:a9:76:19:82:16:b9:65:2c:c3:30:ec:36:23:86:
c4:6c:05:98:30:6b:03:25:8e:86:1f:73:2b:2c:e3:
b6:79:c4:b5:be:ce:8c:5a:48:47:57:f8:1c:43:85:
84:43:a6:06:68:d5:4d:3c:66:c2:01:ab:8b:6d:75:
ee:94:34:26:fb:94:ae:c0:a1:35:5b:d1:4a:b0:2c:
72:b6:f0:bf:be:f5:b8:20:c5:99:2d:2d:c7:7c:43:
0a:69:21:14:5b:5f:c8:13:8d:40:a2:50:d2:23:c6:
55:3c:de:33:03:76:85:23:6d:1a:b3:6e:15:5a:0f:
bf:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A5:88:F1:74:B5:F7:70:03:71:51:48:9F:DD:00:36:5F:48:2B:EB
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/TKWI8XS193ADcVFIn90ANl9IK-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.232.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:aa:f3:4c:a7:cb:89:43:4b:86:60:96:38:b3:5c:07:e8:86:
bc:05:de:53:1d:8c:03:55:6a:6a:ef:18:af:ba:88:8d:5c:d8:
da:ff:6f:82:5c:fe:4e:11:2b:57:19:44:bc:a0:1d:05:71:65:
16:61:19:20:b2:60:aa:37:da:e9:03:59:25:5e:e4:11:c4:af:
f2:b9:f0:e8:2a:aa:41:f4:db:79:af:3e:bb:6c:a6:7b:2d:28:
b7:31:10:08:85:53:33:ea:77:58:43:dc:c3:de:4f:91:e1:9b:
08:6a:56:37:e2:ec:af:22:69:9f:de:c7:d8:6c:9b:e2:dc:e0:
05:ee:1a:10:e0:62:d4:17:10:c1:bb:55:f1:93:07:90:2f:34:
ed:77:51:a8:5e:eb:65:b2:f8:78:e5:48:f4:63:51:7b:ae:7d:
a0:fc:42:ab:3d:ad:2a:5c:32:f5:5c:1c:72:7a:3a:09:92:53:
7e:79:54:c2:d5:8a:70:b1:da:2d:4b:7f:89:02:50:63:18:e7:
ab:ef:85:54:bc:4a:ea:f9:d3:12:6f:df:9b:75:d0:bb:e1:f1:
3a:5d:51:1b:1d:e1:eb:b0:12:f7:74:8f:48:fd:3e:53:d7:12:
3b:6e:18:10:69:46:be:d5:3e:82:ad:83:9c:fe:ec:cd:01:11:
60:e7:07:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:06:54 2026 by rpki-client