Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/tWkJg-Njy_cAjwuiUk4TpSEYEvM.roa
File: tWkJg-Njy_cAjwuiUk4TpSEYEvM.roa (raw, json)
Hash identifier: 9937kKwYldSYJlo3Ui4EC2PBOZKpdB3BtsLZjtGHQBI=
Subject key identifier: B5:69:09:83:E3:63:CB:F7:00:8F:0B:A2:52:4E:13:A5:21:18:12:F3
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 01A0B54CC9C08B18FE8BD6AE07CB3F2723D7
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/tWkJg-Njy_cAjwuiUk4TpSEYEvM.roa
Signing time: Fri 18 Sep 2026 16:15:03 +0000
ROA not before: Fri 18 Sep 2026 16:15:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397630
IP address blocks: 160.238.97.0/24 maxlen: 24
160.238.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 08:58:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:4c:c9:c0:8b:18:fe:8b:d6:ae:07:cb:3f:27:23:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Sep 18 16:15:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5690983e363cbf7008f0ba2524e13a5211812f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:11:91:60:3f:12:aa:55:e9:3a:79:7d:01:9b:
8b:ce:dc:c0:1f:f3:86:8b:17:91:11:fd:42:19:a3:
bc:a4:f1:04:69:1f:f5:de:18:5a:4c:0e:2b:54:54:
15:c5:24:5c:a7:89:e1:27:39:2b:e5:bd:27:8a:b9:
b1:5d:5a:dd:2f:09:ea:12:85:fa:34:54:a2:7c:69:
15:0b:92:a2:65:9b:ed:e7:e1:b3:37:8f:52:aa:a3:
5d:2e:b0:71:2a:23:ac:e2:e0:34:ab:96:dc:2c:24:
68:c5:9c:48:fc:9b:ab:03:3b:e2:34:cb:81:1b:a0:
df:02:b6:d0:a1:7e:0d:f8:8e:3d:2c:dc:f7:3e:83:
b5:f8:c1:83:bd:66:ab:74:b1:6b:91:2a:d3:2a:a6:
17:7f:93:2c:25:61:46:a0:6f:17:31:b0:e4:0e:ff:
1b:89:6c:96:83:69:95:78:3e:18:d1:3e:63:b8:c8:
69:1b:71:f6:b5:18:27:4f:66:f8:ff:d3:9f:c6:da:
3d:2c:a2:81:7e:b6:a5:01:eb:19:e0:9c:20:27:04:
15:bb:92:6c:77:74:05:14:09:68:7d:b9:37:9c:9f:
5b:07:35:96:fa:ae:70:d6:05:10:00:ce:36:2e:cc:
77:86:43:0c:25:42:af:7f:17:99:8a:d6:d8:4c:ad:
66:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:69:09:83:E3:63:CB:F7:00:8F:0B:A2:52:4E:13:A5:21:18:12:F3
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/tWkJg-Njy_cAjwuiUk4TpSEYEvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.238.97.0-160.238.98.255
Signature Algorithm: sha256WithRSAEncryption
63:3a:3a:37:67:20:6a:81:a9:fd:57:57:b6:f7:e6:bf:87:cc:
22:65:41:6f:c2:5a:0f:f1:20:16:34:72:00:a6:37:f4:0b:4a:
f5:3f:a7:26:a2:5d:01:ab:b0:76:ea:2a:8f:40:92:52:e9:c2:
d2:40:f5:ed:2b:ae:d5:56:5c:47:30:f4:f5:35:ea:de:0e:44:
96:30:ef:5a:ab:18:3c:57:57:74:7e:86:7c:9f:4b:65:de:9f:
fc:fc:eb:4c:bd:f7:d6:34:be:14:a9:fe:39:6b:24:71:cc:1d:
ec:49:44:7d:ed:82:32:7e:1c:c3:f4:b6:84:c0:2d:6f:42:07:
be:7b:e1:12:81:14:76:6a:17:1d:3b:53:17:d1:07:ac:24:6e:
7e:af:5d:53:34:76:af:aa:76:f3:71:24:9b:30:17:28:41:2c:
63:bc:85:10:8f:12:40:ba:39:31:19:37:80:9b:64:60:87:62:
30:35:4e:df:85:70:d1:ba:d3:9a:ac:95:f1:56:b9:bc:e1:29:
42:7b:1c:86:11:19:4e:f8:91:14:3f:ad:c2:40:c4:8b:69:e9:
30:ca:56:67:c5:7e:af:5f:ab:64:5d:7b:7a:63:ba:2f:06:0b:
b6:8d:6c:aa:c3:69:b1:3f:4f:77:8c:16:6f:72:96:4c:0d:b5:
c3:6a:ca:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:55:59 2026 by rpki-client