Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/TTvte-vG-uL-QJEIgq3vCyoRt5s.roa
File: TTvte-vG-uL-QJEIgq3vCyoRt5s.roa (raw, json)
Hash identifier: SkEV3UZWo3lRtSvULxQM+XKWPgskfo67/AN3jkd+Qtg=
Subject key identifier: 4D:3B:ED:7B:EB:C6:FA:E2:FE:40:91:08:82:AD:EF:0B:2A:11:B7:9B
Certificate issuer: /CN=940a74ddb75c69a845d7cc569aeda2667f141b46
Certificate serial: 019F236868A652F1BC3C7BFC758F21D6C972
Authority key identifier: 94:0A:74:DD:B7:5C:69:A8:45:D7:CC:56:9A:ED:A2:66:7F:14:1B:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/TTvte-vG-uL-QJEIgq3vCyoRt5s.roa
Signing time: Thu 02 Jul 2026 15:17:52 +0000
ROA not before: Thu 02 Jul 2026 15:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7029
IP address blocks: 217.9.1.0/24 maxlen: 24
217.9.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 15:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:68:a6:52:f1:bc:3c:7b:fc:75:8f:21:d6:c9:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a74ddb75c69a845d7cc569aeda2667f141b46
Validity
Not Before: Jul 2 15:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d3bed7bebc6fae2fe40910882adef0b2a11b79b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:22:07:a8:cf:09:23:d1:92:72:4f:41:00:91:
8c:9d:fb:57:b2:81:00:8f:b9:4f:d6:db:6e:0c:76:
23:94:e5:35:3d:51:9d:e8:46:7d:92:ce:2e:97:e9:
38:41:58:b5:a8:9f:8f:aa:3c:c1:91:84:a3:19:69:
9e:bb:99:03:c3:00:97:e2:d7:83:de:5e:21:c9:f4:
19:23:6d:11:dc:0a:97:44:5c:64:6d:0e:44:9a:8d:
b3:38:5d:65:26:d9:70:20:5d:7f:57:7b:e7:1f:5f:
a9:41:f1:34:08:68:35:c8:83:ab:ec:c6:71:09:c9:
38:a6:ef:6b:1c:e7:4e:28:02:24:db:83:ee:72:2a:
ca:a7:0b:48:7e:fe:cf:6f:f6:cd:3b:c5:ba:57:bc:
22:41:dc:71:76:53:58:c3:70:f7:02:17:47:2e:c9:
ce:cf:0c:57:01:5d:88:35:20:09:1e:a7:b3:d7:c8:
71:33:8f:86:42:e9:bc:eb:c7:53:e5:b7:0a:3a:bb:
78:dc:59:0b:22:a0:48:ce:ad:e3:59:26:a4:57:c2:
d7:68:66:b2:1c:38:83:b6:8e:1a:97:18:24:d6:91:
92:85:e4:d0:13:d1:27:ff:69:fa:16:4c:ef:59:50:
c0:0d:08:53:41:ae:af:c8:13:73:09:5e:ab:bf:80:
fc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3B:ED:7B:EB:C6:FA:E2:FE:40:91:08:82:AD:EF:0B:2A:11:B7:9B
X509v3 Authority Key Identifier:
keyid:94:0A:74:DD:B7:5C:69:A8:45:D7:CC:56:9A:ED:A2:66:7F:14:1B:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/TTvte-vG-uL-QJEIgq3vCyoRt5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.9.1.0-217.9.2.255
Signature Algorithm: sha256WithRSAEncryption
31:d7:9a:35:6c:8e:1d:49:4c:70:eb:39:ad:84:ff:91:e9:28:
38:b4:ba:4c:19:a2:38:5a:a9:25:6d:33:d4:bf:5e:03:2c:e8:
00:7a:bc:69:c0:4c:1c:fe:34:43:f8:83:46:89:21:ba:31:5c:
02:8d:d5:b0:44:a0:bf:94:2a:c0:0c:16:ed:5b:fc:07:74:cb:
6b:a0:9b:e2:e9:2f:66:b1:ed:09:25:8a:72:74:c3:1c:80:c7:
dc:e4:45:b8:30:93:26:27:dd:ba:d9:9d:e6:eb:d5:97:bb:b0:
1a:01:8a:80:20:9e:e6:26:b5:e4:39:c1:7c:c4:96:c1:5f:5d:
dc:5e:e2:99:3b:57:7f:6b:3e:15:88:28:aa:dc:c9:20:41:90:
c4:d2:b2:35:e7:73:8a:c1:60:98:ee:2c:b8:ae:4a:4a:85:5c:
f3:e4:0d:5b:1b:60:cc:83:21:ee:e8:9f:7e:ea:b9:c6:8b:24:
80:5c:30:85:68:1a:50:e8:6d:c3:86:28:81:56:53:e3:f4:44:
dd:93:c1:5b:bb:59:11:6f:9c:d5:b6:f6:b4:2b:8e:ab:81:89:
53:10:af:b1:11:8c:66:91:d1:8b:c8:9d:ef:d3:0e:8a:0a:fb:
99:fa:c5:7c:e6:d1:f5:e1:bd:ae:d9:09:3a:18:55:5a:36:1d:
83:6e:8a:e2
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZ8jaGimUvG8PHv8dY8h1slyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MGE3NGRkYjc1YzY5YTg0NWQ3Y2M1NjlhZWRhMjY2N2Yx
NDFiNDYwHhcNMjYwNzAyMTUxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDNiZWQ3YmViYzZmYWUyZmU0MDkxMDg4MmFkZWYwYjJhMTFiNzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyIHqM8JI9GSck9BAJGMnftXsoEA
j7lP1ttuDHYjlOU1PVGd6EZ9ks4ul+k4QVi1qJ+PqjzBkYSjGWmeu5kDwwCX4teD
3l4hyfQZI20R3AqXRFxkbQ5Emo2zOF1lJtlwIF1/V3vnH1+pQfE0CGg1yIOr7MZx
Cck4pu9rHOdOKAIk24PucirKpwtIfv7Pb/bNO8W6V7wiQdxxdlNYw3D3AhdHLsnO
zwxXAV2INSAJHqez18hxM4+GQum868dT5bcKOrt43FkLIqBIzq3jWSakV8LXaGay
HDiDto4alxgk1pGSheTQE9En/2n6FkzvWVDADQhTQa6vyBNzCV6rv4D8XQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFE077Xvrxvri/kCRCIKt7wsqEbebMB8GA1UdIwQY
MBaAFJQKdN23XGmoRdfMVprtomZ/FBtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEFwMDNiZGNhYWhGMTh4V211MmlabjhVRzBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDkt
NmI1ZjY4NTIyYTdkLzEvVFR2dGUtdkctdUwtUUpFSWdxM3ZDeW9SdDVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDktNmI1ZjY4NTIyYTdk
LzEvbEFwMDNiZGNhYWhGMTh4V211MmlabjhVRzBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADZCQED
BADZCQIwDQYJKoZIhvcNAQELBQADggEBADHXmjVsjh1JTHDrOa2E/5HpKDi0ukwZ
ojhaqSVtM9S/XgMs6AB6vGnATBz+NEP4g0aJIboxXAKN1bBEoL+UKsAMFu1b/Ad0
y2ugm+LpL2ax7QklinJ0wxyAx9zkRbgwkyYn3brZnebr1Ze7sBoBioAgnuYmteQ5
wXzElsFfXdxe4pk7V39rPhWIKKrcySBBkMTSsjXnc4rBYJjuLLiuSkqFXPPkDVsb
YMyDIe7on37qucaLJIBcMIVoGlDobcOGKIFWU+P0RN2TwVu7WRFvnNW29rQrjquB
iVMQr7ERjGaR0YvIne/TDooK+5n6xXzm0fXhva7ZCToYVVo2HYNuiuI=
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:30 2026 by rpki-client