Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ttwfN8SUYZSh8VwtnlcDNqVeEHA.roa
File: ttwfN8SUYZSh8VwtnlcDNqVeEHA.roa (raw, json)
Hash identifier: SwLFTZ+AtA8qAOzlXr8woa6caH4siPU6VLdXh8xocAM=
Subject key identifier: B6:DC:1F:37:C4:94:61:94:A1:F1:5C:2D:9E:57:03:36:A5:5E:10:70
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 019F23694D99DA288DF8EC41FBE4D4612023
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ttwfN8SUYZSh8VwtnlcDNqVeEHA.roa
Signing time: Thu 02 Jul 2026 15:18:51 +0000
ROA not before: Thu 02 Jul 2026 15:18:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207023
IP address blocks: 37.97.116.0/22 maxlen: 24
46.173.246.0/23 maxlen: 23
46.173.248.0/22 maxlen: 22
46.173.254.0/23 maxlen: 23
91.229.147.0/24 maxlen: 24
91.232.18.0/24 maxlen: 24
91.234.122.0/23 maxlen: 24
91.246.180.0/22 maxlen: 22
94.232.96.0/22 maxlen: 22
176.116.238.0/23 maxlen: 24
176.118.200.0/22 maxlen: 22
176.118.204.0/22 maxlen: 22
194.33.64.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 06:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:4d:99:da:28:8d:f8:ec:41:fb:e4:d4:61:20:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Jul 2 15:18:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b6dc1f37c4946194a1f15c2d9e570336a55e1070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8e:33:11:5c:31:03:39:91:20:d3:c3:57:d6:
15:b3:0e:b1:58:04:e6:07:9c:18:58:5a:ee:fd:fe:
53:cc:fe:fb:08:a4:70:07:13:27:90:d0:a0:7e:19:
9d:89:72:ec:b9:f7:a9:0d:45:07:10:2e:a4:95:a5:
46:f5:47:90:03:24:41:a4:eb:3c:0d:8c:68:9f:0b:
a0:98:0e:1f:7c:57:4f:7c:79:bd:75:63:1b:b8:bb:
09:6f:53:ee:dd:36:49:dd:58:29:e1:5f:3c:b8:9a:
1b:2d:f7:35:63:74:04:9b:ad:4b:3a:fd:56:69:86:
cb:25:7f:d0:8c:33:1f:80:01:83:7c:96:34:d2:c8:
fd:8f:67:8d:58:74:55:c7:f5:b1:42:e9:30:61:34:
5d:e8:72:d2:88:44:33:ca:0a:a1:35:2d:ee:38:24:
18:54:1a:41:80:a9:1b:54:3a:9d:b3:f3:34:0b:f3:
b2:d6:6f:98:55:af:e3:ed:0f:eb:a7:0a:d3:0a:65:
83:bb:76:2e:b7:ed:28:a2:86:55:db:aa:e3:f1:e4:
a2:ac:5e:7f:11:29:b9:78:73:9d:a3:4c:1e:49:90:
9f:b1:0b:e2:3b:78:c3:6a:7f:c8:48:f9:ec:f1:b7:
1b:38:68:9a:0b:96:2f:37:75:5f:f0:dd:2a:a5:56:
b6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DC:1F:37:C4:94:61:94:A1:F1:5C:2D:9E:57:03:36:A5:5E:10:70
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ttwfN8SUYZSh8VwtnlcDNqVeEHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.97.116.0/22
46.173.246.0-46.173.251.255
46.173.254.0/23
91.229.147.0/24
91.232.18.0/24
91.234.122.0/23
91.246.180.0/22
94.232.96.0/22
176.116.238.0/23
176.118.200.0/21
194.33.64.0/23
Signature Algorithm: sha256WithRSAEncryption
76:19:3a:c2:92:20:fd:aa:b7:9c:3f:4a:0d:ff:de:cb:6d:30:
2e:8a:89:55:8d:4a:f9:85:5d:5e:84:4c:33:5e:ac:8d:22:9c:
8f:3b:2a:8a:2c:6c:d7:0b:87:1e:04:79:04:e6:0f:d5:e0:8f:
01:60:f9:ad:19:65:e1:ad:0e:d3:6c:68:5d:2b:66:0f:cf:9b:
81:8d:62:09:e7:ff:b4:29:33:d4:9a:b8:27:1f:6e:3e:86:bd:
64:79:9d:38:cf:86:9b:11:be:3a:99:e6:7b:75:74:08:d0:5c:
3e:5e:bf:d0:6d:f1:a0:00:f6:a7:ce:48:6f:cf:92:c3:6d:0f:
2d:01:3f:24:1d:a6:e4:fa:a9:d3:77:03:b3:23:87:e7:8e:16:
33:9b:d2:16:05:c5:9e:46:e2:d7:39:3a:43:dd:1c:44:f4:db:
a2:18:1c:ed:e9:41:89:fb:a9:e0:60:5c:d3:2e:6a:e4:90:49:
10:a4:4f:3e:20:62:79:7e:5f:b1:11:f3:be:c1:26:1f:7a:76:
c8:e9:30:dc:09:32:93:c1:ce:96:88:c5:bb:0c:63:06:67:62:
3d:ea:97:3e:10:32:9e:98:c2:d7:a1:3f:0e:5d:2f:af:47:2b:
fc:89:d6:d0:61:c9:81:01:cc:d4:f5:fd:8c:3e:5d:7e:dc:db:
b4:e0:49:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:22:44 2026 by rpki-client