Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/TtdPEWvpy1vrjN8AVaEW8g3l_aw.roa
File: TtdPEWvpy1vrjN8AVaEW8g3l_aw.roa (raw, json)
Hash identifier: HCIg5sUjoWKxOVomIsWp0OWpu1bLsUOZ/zujqrH9rIU=
Subject key identifier: 4E:D7:4F:11:6B:E9:CB:5B:EB:8C:DF:00:55:A1:16:F2:0D:E5:FD:AC
Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial: 019FE2C00F99CB5CEEEB34F5D92D20E4D686
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/TtdPEWvpy1vrjN8AVaEW8g3l_aw.roa
Signing time: Sat 08 Aug 2026 19:01:05 +0000
ROA not before: Sat 08 Aug 2026 19:01:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 141.98.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 15:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e2:c0:0f:99:cb:5c:ee:eb:34:f5:d9:2d:20:e4:d6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Validity
Not Before: Aug 8 19:01:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ed74f116be9cb5beb8cdf0055a116f20de5fdac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a4:8c:57:54:04:72:0c:ec:d5:89:f2:c1:41:
12:d0:23:c0:34:5e:1d:45:69:24:ea:96:06:a7:ba:
d2:f8:0d:5c:02:7e:c1:82:33:74:e3:8e:7a:57:ad:
d3:3d:fd:93:61:17:42:76:03:2c:0d:33:e8:60:5b:
f8:1b:10:4a:23:f9:04:8b:28:d3:a9:f3:a6:db:7b:
92:c8:4a:a8:47:27:59:2a:98:32:87:ab:aa:da:fb:
ce:46:3a:c7:72:3b:ed:76:86:76:6f:fb:7a:96:40:
d4:56:32:6e:20:f7:e9:58:4c:c9:7d:85:df:d4:12:
74:22:b8:3f:73:22:33:a5:99:15:97:08:0b:06:cf:
ef:96:31:91:b9:1b:d3:4c:db:60:eb:86:ab:3e:7f:
18:8c:64:5f:be:ea:a0:dc:14:16:ea:66:86:16:9c:
bf:a5:94:5a:1d:f5:43:4d:9c:a0:8e:aa:9c:52:4a:
d0:d1:97:42:31:f2:83:7d:47:34:d1:3f:b3:5f:7b:
7e:e8:f2:8b:2d:37:ee:7c:fa:3d:bd:36:c2:86:36:
79:0f:bd:c9:a9:58:d9:06:c1:e3:72:7a:42:fe:7d:
5a:f5:7e:5b:83:eb:96:5e:ce:20:a7:21:62:b7:40:
a3:ab:25:87:c7:23:ae:bb:97:ee:d3:62:34:89:60:
9f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D7:4F:11:6B:E9:CB:5B:EB:8C:DF:00:55:A1:16:F2:0D:E5:FD:AC
X509v3 Authority Key Identifier:
keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/TtdPEWvpy1vrjN8AVaEW8g3l_aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.149.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:93:c2:c2:96:24:7f:bb:6e:fd:33:16:94:0a:86:58:eb:15:
c1:e3:40:bc:ed:26:c8:6a:52:24:c5:4e:cd:77:e2:da:03:b1:
33:2f:cb:d9:e8:7b:8f:1c:54:3b:ea:f5:42:fb:a7:1e:3f:a6:
50:b9:c3:72:65:68:7a:5a:9b:82:3b:ae:a6:7b:78:42:05:19:
39:69:20:d1:2c:da:d9:56:c0:c5:07:d5:0d:f8:bf:83:47:d8:
cc:35:8c:4b:74:f7:6b:f7:7d:e1:95:8d:51:de:4c:4d:20:6c:
76:7c:4f:11:38:94:b6:37:c3:8b:9e:f1:d4:66:20:7a:42:64:
ff:92:4e:a5:69:67:ac:45:61:81:96:a2:15:12:75:45:1e:64:
10:d5:90:c6:e4:16:64:d5:78:9c:57:a6:14:8f:6d:6b:a0:c5:
91:26:14:f9:d1:58:78:32:16:3b:56:3a:ec:f5:ed:6d:0c:63:
56:7f:0f:28:ca:ab:67:ec:47:61:7d:38:bd:a7:a2:0f:0f:fc:
76:bc:1c:64:1a:d7:24:ba:c4:ae:03:fe:d3:33:59:e6:50:9b:
7f:b4:b9:3b:b3:c2:04:2f:ee:25:70:d3:8a:f6:06:f5:58:53:
69:73:b6:96:81:2e:90:07:8a:c3:1e:81:68:83:9c:35:02:42:
cf:35:64:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 21:25:03 2026 by rpki-client