Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/tm0a-kkqdXFFww1NTW3wegOaXEM.roa
File: tm0a-kkqdXFFww1NTW3wegOaXEM.roa (raw, json)
Hash identifier: Emmyf6hWPm6LVa2knTZYifN0eqyGL50OSIkY4Krre0Y=
Subject key identifier: B6:6D:1A:FA:49:2A:75:71:45:C3:0D:4D:4D:6D:F0:7A:03:9A:5C:43
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 019FC7CDA9DBF54A24D95B6C9808A59FAA76
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/tm0a-kkqdXFFww1NTW3wegOaXEM.roa
Signing time: Mon 03 Aug 2026 13:26:11 +0000
ROA not before: Mon 03 Aug 2026 13:26:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139642
IP address blocks: 160.238.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 20:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c7:cd:a9:db:f5:4a:24:d9:5b:6c:98:08:a5:9f:aa:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Aug 3 13:26:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b66d1afa492a757145c30d4d4d6df07a039a5c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a3:15:81:a2:4c:7b:11:ab:34:16:eb:07:88:
27:77:bc:00:90:b1:4a:7f:cf:f4:8e:8f:b6:54:05:
e6:9f:11:d3:d9:1d:7a:53:e9:ec:dc:6f:81:e6:07:
d7:d6:fd:21:c1:31:a7:b2:a1:e4:3f:8b:d1:10:b3:
cf:43:60:71:23:25:7a:d6:78:34:ce:f6:5e:a0:a7:
cc:f0:d0:04:6d:aa:ef:01:91:b6:6a:50:e9:77:d4:
68:10:e6:38:cf:0c:8a:2c:fa:1c:d4:07:97:f7:ff:
f0:b8:32:ea:c6:56:e3:b4:ad:e7:d4:16:9e:65:20:
c6:fa:28:ba:83:d3:47:8b:86:f6:97:8a:db:ae:5d:
b0:ff:a7:b3:67:99:88:3d:2b:3e:d9:63:c5:fb:25:
33:af:82:7d:84:2f:c1:15:e2:48:5f:f6:4c:30:f6:
d3:ac:26:46:43:76:4b:21:c1:4b:85:b7:1a:d9:ed:
cc:c0:a8:3a:5c:48:6b:8e:f1:da:56:bf:c8:0c:56:
1c:c8:de:fa:26:52:cb:e7:be:37:d8:f1:58:a3:2e:
38:04:7d:f9:57:31:b0:6e:80:f0:27:3a:e8:01:bd:
62:6f:b0:11:8a:f9:1f:c3:09:f4:4d:89:dd:04:82:
b2:e8:63:1d:ed:47:33:d6:77:bd:a5:7a:8e:f0:dd:
85:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6D:1A:FA:49:2A:75:71:45:C3:0D:4D:4D:6D:F0:7A:03:9A:5C:43
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/tm0a-kkqdXFFww1NTW3wegOaXEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.238.97.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:74:76:67:b4:87:87:ef:36:3a:2c:de:b0:ec:81:a6:1f:a0:
2a:ff:52:ce:1f:04:6a:46:90:b4:ed:da:c6:ef:b5:06:20:6a:
24:04:03:ea:b0:62:44:7b:7b:45:8f:47:74:50:d9:63:2b:95:
bc:26:7d:a8:7f:36:37:f0:c7:d9:2b:e0:2b:2a:84:8f:a3:81:
17:d8:89:eb:04:c5:f0:3e:ef:0d:5c:20:42:e8:38:8e:5b:a6:
94:86:16:a6:ab:e2:38:50:70:4b:32:00:a6:09:60:04:c7:14:
35:88:20:0b:43:49:69:03:96:6d:85:d6:32:4c:3e:af:c4:62:
13:bb:5b:e1:ed:76:c8:b2:fd:83:92:7b:c1:00:bc:66:62:60:
2d:85:c1:8b:e3:5c:f5:1a:f5:e1:95:cc:74:a4:5e:69:e8:5c:
23:bd:36:7f:0f:ee:1e:50:92:72:cf:8f:bf:2d:e6:c6:3f:36:
33:3a:31:de:f7:f9:a7:b4:cd:eb:96:bc:4d:c8:28:55:26:c2:
a3:2c:22:2a:d5:41:9b:82:1e:29:c3:dd:f5:30:13:aa:0d:54:
bd:8a:48:35:ad:92:b4:29:d2:fc:45:eb:98:13:76:8f:68:e3:
b1:dc:3a:00:7a:c4:c0:35:0d:25:86:e3:1b:89:9d:6c:96:cf:
d6:85:c3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 02:25:20 2026 by rpki-client