Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/TrTwjbYZVQnpx21mwUQojkF1K7w.roa
File: TrTwjbYZVQnpx21mwUQojkF1K7w.roa (raw, json)
Hash identifier: /tObYYDcG5it76EMRHtb0fqj7ca14pgmJwbFzVuz53c=
Subject key identifier: 4E:B4:F0:8D:B6:19:55:09:E9:C7:6D:66:C1:44:28:8E:41:75:2B:BC
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019FCCFD28119131832AF3196B35E22FEFE5
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/TrTwjbYZVQnpx21mwUQojkF1K7w.roa
Signing time: Tue 04 Aug 2026 13:36:10 +0000
ROA not before: Tue 04 Aug 2026 13:36:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215073
IP address blocks: 185.254.29.0/24 maxlen: 24
193.35.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:fd:28:11:91:31:83:2a:f3:19:6b:35:e2:2f:ef:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Aug 4 13:36:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4eb4f08db6195509e9c76d66c144288e41752bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:48:a6:b2:7e:ef:63:d4:90:b1:9f:b9:aa:96:
b2:34:a7:4f:07:89:09:a6:71:88:0c:36:6c:4d:f2:
54:4c:25:b7:8f:b7:aa:49:47:21:8b:6b:fa:7e:55:
5b:3c:4c:97:3b:0f:4e:dd:f4:83:e7:1a:d5:6c:70:
4b:92:42:c3:96:25:5c:99:43:bd:d2:d2:5c:4d:fc:
94:37:28:70:f6:c5:b3:3c:d9:4a:fb:e8:d6:a2:b6:
5b:ed:05:b9:37:8e:11:fd:53:9e:6c:6d:90:61:4e:
45:34:67:eb:0c:d6:af:1f:94:ff:57:f1:7c:7a:91:
6b:23:16:88:45:e2:d1:ac:06:9b:d0:b8:da:6d:e4:
9e:fc:b2:05:08:e8:90:db:88:5a:4c:59:29:56:68:
ac:5f:66:58:fe:87:b6:fb:e4:02:cf:7e:98:33:02:
45:77:8d:19:1c:0b:54:9d:4e:0a:a5:cf:81:d2:aa:
c0:39:83:a9:22:53:ca:52:96:80:14:02:67:47:56:
5e:8b:83:91:7e:0e:a2:e9:55:b6:5b:cd:22:1e:ed:
5a:69:ff:c9:73:f6:ba:d5:f8:c0:52:99:7e:57:62:
92:b1:bf:92:b8:dd:29:78:97:23:74:7d:70:a6:49:
b5:c9:72:8f:48:d8:90:7f:a7:5a:f7:33:12:74:f6:
6c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B4:F0:8D:B6:19:55:09:E9:C7:6D:66:C1:44:28:8E:41:75:2B:BC
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/TrTwjbYZVQnpx21mwUQojkF1K7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.29.0/24
193.35.152.0/24
Signature Algorithm: sha256WithRSAEncryption
51:dd:ca:0e:cd:54:fc:df:2b:3b:13:61:4b:20:e5:0c:01:d2:
a0:6f:44:c1:1f:f6:d8:b4:6b:82:0d:50:c5:0a:02:df:55:9f:
96:13:e9:4c:06:9a:f3:4d:cf:3f:35:27:aa:eb:97:4b:f5:21:
73:e4:05:e8:25:be:58:4e:d3:dc:3b:a2:ed:9c:bc:0c:a4:a8:
ed:c2:0a:f0:62:d8:d9:e8:c9:0f:d3:c4:c6:f4:b7:56:2a:ae:
25:ae:6e:f5:fb:6c:da:92:68:d2:6e:d4:97:69:49:74:a5:e3:
c8:4d:62:2f:cb:2e:87:0c:d3:d6:fb:70:26:98:c6:93:38:d7:
6a:37:21:c9:a0:28:23:33:a2:87:1e:92:3c:33:07:1a:f2:1f:
0c:42:9a:d6:94:2f:1d:6e:b8:e0:94:3b:86:94:6b:f9:03:81:
cb:55:61:00:81:26:da:bc:0f:e5:ba:70:0e:6f:7a:f0:3c:e7:
ba:22:21:d0:07:e1:fa:c9:77:a0:66:bd:71:10:05:c3:07:67:
c3:7c:d7:74:fc:62:7b:c0:29:d3:7c:4a:83:ec:37:6c:f4:88:
96:dd:a4:67:a9:32:26:30:df:bf:e8:3b:5e:65:59:df:aa:c4:
44:0c:48:72:d4:7e:b9:86:89:c7:85:c5:cd:7e:3d:a7:5e:85:
39:ff:17:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:45 2026 by rpki-client