Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/TWbCTwDnys208grtWi4L9d1lq6s.roa
File: TWbCTwDnys208grtWi4L9d1lq6s.roa (raw, json)
Hash identifier: +ftR3wfvVv49VPzjWv+X3HJTgQfHYyU1PAP5N6+M9DY=
Subject key identifier: 4D:66:C2:4F:00:E7:CA:CD:B4:F2:0A:ED:5A:2E:0B:F5:DD:65:AB:AB
Certificate issuer: /CN=8925ae3234a2c97c27f75ef51d3ff326be060e2c
Certificate serial: 019F31EE3902A252044F856BD9E4350186A7
Authority key identifier: 89:25:AE:32:34:A2:C9:7C:27:F7:5E:F5:1D:3F:F3:26:BE:06:0E:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/TWbCTwDnys208grtWi4L9d1lq6s.roa
Signing time: Sun 05 Jul 2026 10:58:43 +0000
ROA not before: Sun 05 Jul 2026 10:58:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203378
IP address blocks: 82.197.54.0/24 maxlen: 24
82.197.55.0/24 maxlen: 24
185.117.130.0/23 maxlen: 23
185.117.130.0/24 maxlen: 24
185.117.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:31:ee:39:02:a2:52:04:4f:85:6b:d9:e4:35:01:86:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8925ae3234a2c97c27f75ef51d3ff326be060e2c
Validity
Not Before: Jul 5 10:58:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d66c24f00e7cacdb4f20aed5a2e0bf5dd65abab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:be:f0:46:93:5b:aa:f3:6d:e1:83:45:8d:16:
a9:1e:66:83:3e:0c:da:3a:8e:a0:c1:b8:b3:52:7d:
e2:eb:c4:36:1f:81:40:4f:17:f3:ec:8c:27:9c:a4:
f2:a8:ad:c2:f1:6a:d7:0f:c1:b1:2f:f9:fa:e2:af:
84:ad:0b:88:cf:72:37:26:23:13:91:ff:d7:48:8c:
09:03:07:22:f4:e8:fe:0f:f1:9b:b2:11:62:48:46:
25:7b:f3:dd:0e:80:5d:c6:6e:a0:83:8a:4f:1d:37:
62:c7:6f:c8:05:54:ff:6b:cf:79:9a:b3:04:66:a4:
99:12:66:29:24:0f:a2:c0:e4:2c:b5:5d:52:bd:c7:
35:80:0c:cb:c5:35:63:e4:8c:54:99:79:00:6a:ea:
fb:d5:ea:5a:0e:3f:cb:cf:3a:66:77:f2:74:f6:f8:
fe:1c:c7:4d:61:57:c7:72:74:20:31:c0:0a:24:f0:
a4:4d:67:8a:33:b1:b1:86:42:16:ad:ca:03:aa:89:
d4:68:7e:b6:5c:7f:b8:47:92:e0:40:98:68:70:1a:
23:93:b5:c0:26:ba:be:f4:98:f0:4d:b3:c2:bc:a0:
8d:97:ce:75:83:f9:40:a0:36:14:3e:50:f1:84:bb:
6c:4f:9e:74:11:5d:77:61:1e:9c:33:a7:ff:28:10:
b2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:66:C2:4F:00:E7:CA:CD:B4:F2:0A:ED:5A:2E:0B:F5:DD:65:AB:AB
X509v3 Authority Key Identifier:
keyid:89:25:AE:32:34:A2:C9:7C:27:F7:5E:F5:1D:3F:F3:26:BE:06:0E:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/TWbCTwDnys208grtWi4L9d1lq6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.197.54.0/23
185.117.130.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:97:74:0a:49:65:1b:00:e7:4f:f4:b0:3b:85:89:04:19:d3:
25:5a:3c:dc:ae:f4:05:d6:10:16:38:0c:66:4c:27:ed:28:00:
85:e3:7f:10:5b:59:c3:9e:fa:3e:f0:11:be:d9:01:ac:51:f3:
1c:21:96:08:9c:8e:a6:22:b6:62:dc:c8:0b:5d:c0:fd:f6:01:
3b:0c:87:42:e9:49:3a:ed:85:72:48:0c:9f:66:19:e4:20:81:
8b:ff:4f:9e:93:47:95:43:a7:4f:bd:b8:3c:f4:92:7f:67:75:
43:de:dc:91:e5:96:a1:9f:56:18:5b:d4:b4:40:0c:ee:00:be:
c0:e2:8a:54:90:54:b8:d3:7c:eb:ab:b2:dc:41:69:66:c6:42:
ef:c2:eb:bf:f5:46:c6:6c:b8:a1:03:de:01:b4:0c:48:4c:7c:
78:56:3b:b0:a4:14:76:32:5c:1e:83:db:f8:a0:3b:53:84:60:
22:6c:76:94:4c:8a:ec:21:43:2a:c9:6b:67:eb:57:6f:0f:6b:
a3:e7:c8:dd:db:17:4e:46:1c:9e:17:d2:91:d9:ea:35:2f:72:
3d:41:70:22:3a:e1:69:a9:0d:07:b4:8d:c8:be:d3:58:f9:83:
1b:2e:fb:1c:c4:dc:74:1a:e7:74:30:30:c8:9f:fc:90:1c:f3:
bb:21:fd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:58:27 2026 by rpki-client