Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/TwYdkpiCJJm8w_F24fC17MCAcD8.roa
File: TwYdkpiCJJm8w_F24fC17MCAcD8.roa (raw, json)
Hash identifier: yt568WG76atWSCYFWmSZIdq4fTsqg4rCiVdR6I1evzs=
Subject key identifier: 4F:06:1D:92:98:82:24:99:BC:C3:F1:76:E1:F0:B5:EC:C0:80:70:3F
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019F3C985409E0253B90CD203641A4212DA9
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/TwYdkpiCJJm8w_F24fC17MCAcD8.roa
Signing time: Tue 07 Jul 2026 12:40:43 +0000
ROA not before: Tue 07 Jul 2026 12:40:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 192.144.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3c:98:54:09:e0:25:3b:90:cd:20:36:41:a4:21:2d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Jul 7 12:40:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f061d9298822499bcc3f176e1f0b5ecc080703f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ef:78:33:64:b7:53:7c:8d:a4:d4:ab:e3:05:
eb:51:ae:ec:de:cb:bc:ae:85:3e:c5:bc:ec:86:8a:
af:73:f4:8e:c4:6f:c0:c0:94:9a:f6:0e:0f:37:a9:
82:2c:6d:4f:ae:21:ab:65:52:14:5b:b4:2d:83:0c:
4a:38:7b:6c:82:36:b8:b8:35:21:44:2e:0a:46:b6:
bb:fa:89:8a:1d:ac:91:ab:6d:c6:75:aa:7a:f6:87:
af:83:69:84:81:80:a3:6a:a9:cd:58:38:db:b2:3e:
cf:be:74:74:09:d9:ae:5f:92:5a:dd:6f:15:ae:5f:
45:ca:c1:c6:24:3b:1b:5e:41:aa:fb:b6:c2:dc:d3:
cd:25:b7:19:ac:52:a0:86:3a:25:ce:4d:1d:c4:0f:
f4:d2:d3:15:a6:db:03:37:1a:18:18:32:9b:b8:eb:
6c:ad:77:c6:81:7c:45:cd:26:bf:fc:7a:18:87:59:
dd:2c:e8:5a:a9:7a:c0:12:a4:3c:d4:98:3f:fd:44:
5d:58:d4:1d:b7:74:f7:38:c3:50:cc:6e:1b:4a:12:
d3:2f:95:0f:ee:3f:3e:89:02:02:69:44:09:81:f7:
ec:04:e4:47:f8:7a:cc:96:11:0b:45:ab:8c:41:ca:
d8:db:42:96:21:d2:64:c0:3d:29:3d:96:33:80:6f:
83:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:06:1D:92:98:82:24:99:BC:C3:F1:76:E1:F0:B5:EC:C0:80:70:3F
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/TwYdkpiCJJm8w_F24fC17MCAcD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.144.78.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:82:12:20:b9:9f:98:91:bf:e9:e0:67:d2:32:33:16:38:f4:
40:15:72:b8:10:24:90:5b:a2:25:28:81:29:cf:e1:bf:e5:10:
80:2d:d3:70:46:f7:89:79:e9:99:1e:f7:a5:e9:16:9f:9b:f9:
60:92:28:a2:a1:d3:f0:24:48:51:bf:30:90:f4:78:f1:c1:67:
73:25:c7:3e:a1:9d:cb:0f:d1:76:79:88:bc:d0:2f:6b:a1:f1:
81:5b:50:72:04:b8:c1:fe:66:c2:e9:7c:c4:3d:7a:ed:7f:6c:
f0:3c:dc:4d:59:9f:8e:50:49:3b:9c:c0:2c:4c:e5:56:2b:41:
5a:60:a5:67:ba:7e:1b:75:25:74:da:ca:d7:3e:c3:ec:29:0b:
33:c2:87:eb:c0:4c:25:1e:82:33:b2:59:86:0c:c2:66:15:01:
8c:11:19:eb:b8:8b:28:dc:35:8d:d8:dc:b9:12:0f:16:57:1e:
3c:4e:f4:3b:fe:30:e8:af:ef:d9:2a:2d:fe:77:9b:7a:ff:4b:
fc:b6:d6:d1:25:d8:a2:45:ad:ec:d1:7b:9a:2d:64:c8:70:9a:
c5:50:c3:d4:6f:42:a2:53:e5:07:06:d1:a1:5a:c0:a9:a8:79:
a2:b6:45:1c:6a:b4:70:43:d0:d9:f1:3a:a8:58:16:89:3c:19:
08:2f:e6:50
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ88mFQJ4CU7kM0gNkGkIS2pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1
YTkyOTQwHhcNMjYwNzA3MTI0MDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjA2MWQ5Mjk4ODIyNDk5YmNjM2YxNzZlMWYwYjVlY2MwODA3MDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+94M2S3U3yNpNSr4wXrUa7s3su8
roU+xbzshoqvc/SOxG/AwJSa9g4PN6mCLG1PriGrZVIUW7QtgwxKOHtsgja4uDUh
RC4KRra7+omKHayRq23Gdap69oevg2mEgYCjaqnNWDjbsj7PvnR0CdmuX5Ja3W8V
rl9FysHGJDsbXkGq+7bC3NPNJbcZrFKghjolzk0dxA/00tMVptsDNxoYGDKbuOts
rXfGgXxFzSa//HoYh1ndLOhaqXrAEqQ81Jg//URdWNQdt3T3OMNQzG4bShLTL5UP
7j8+iQICaUQJgffsBORH+HrMlhELRauMQcrY20KWIdJkwD0pPZYzgG+DGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE8GHZKYgiSZvMPxduHwtezAgHA/MB8GA1UdIwQY
MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt
NGEzNDhlN2JlNDQxLzEvVHdZZGtwaUNKSm04d19GMjRmQzE3TUNBY0Q4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx
LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJBOMA0G
CSqGSIb3DQEBCwUAA4IBAQCNghIguZ+Ykb/p4GfSMjMWOPRAFXK4ECSQW6IlKIEp
z+G/5RCALdNwRveJeemZHvel6Rafm/lgkiiiodPwJEhRvzCQ9HjxwWdzJcc+oZ3L
D9F2eYi80C9rofGBW1ByBLjB/mbC6XzEPXrtf2zwPNxNWZ+OUEk7nMAsTOVWK0Fa
YKVnun4bdSV02srXPsPsKQszwofrwEwlHoIzslmGDMJmFQGMERnruIso3DWN2Ny5
Eg8WVx48TvQ7/jDor+/ZKi3+d5t6/0v8ttbRJdiiRa3s0XuaLWTIcJrFUMPUb0Ki
U+UHBtGhWsCpqHmitkUcarRwQ9DZ8TqoWBaJPBkIL+ZQ
-----END CERTIFICATE-----
Generated at Tue Jul 21 17:23:49 2026 by rpki-client