Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/taiwWvpw25ppA7g9Q1XuWsE_s34.roa
File: taiwWvpw25ppA7g9Q1XuWsE_s34.roa (raw, json)
Hash identifier: He6fUV5BcE5qyrTu375pyEkyqiLeAHLfPkSkUA8RSOI=
Subject key identifier: B5:A8:B0:5A:FA:70:DB:9A:69:03:B8:3D:43:55:EE:5A:C1:3F:B3:7E
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01A0A587AD8339347E4812EBCE448D31EF84
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/taiwWvpw25ppA7g9Q1XuWsE_s34.roa
Signing time: Tue 15 Sep 2026 14:45:27 +0000
ROA not before: Tue 15 Sep 2026 14:45:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 77.47.142.0/24 maxlen: 24
77.47.144.0/22 maxlen: 24
195.178.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 14:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:87:ad:83:39:34:7e:48:12:eb:ce:44:8d:31:ef:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Sep 15 14:45:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5a8b05afa70db9a6903b83d4355ee5ac13fb37e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b6:66:03:4a:d0:41:2b:85:cd:14:ae:d5:ae:
a1:b7:6f:18:f7:b6:8c:c6:44:7d:38:9c:f3:59:c6:
aa:19:94:a2:db:12:ad:95:57:ae:71:d4:7e:1e:33:
a8:45:ac:fc:af:5f:80:a9:e8:d2:7c:a5:cc:6c:f3:
0d:44:d6:13:aa:a3:e7:eb:8a:c0:0d:d9:f7:91:48:
44:e7:90:05:19:b2:01:f7:4f:49:0e:82:90:44:04:
bc:fb:56:c0:a5:cf:7c:00:2b:9e:a1:85:2f:38:23:
17:5e:76:30:e9:56:44:be:bf:bf:f6:8f:8a:2c:6d:
46:aa:02:51:e1:6a:1b:9f:e5:57:ac:48:b5:28:99:
16:00:df:e8:4a:5a:b4:b1:02:01:4a:62:ad:a3:40:
cb:65:db:35:5b:f8:73:0f:c7:39:eb:f8:f0:fd:7c:
25:cf:ce:2a:e0:6a:57:09:73:72:12:82:d1:f7:5f:
5b:20:9d:a1:1f:cd:35:10:8d:c5:67:5a:e4:4c:1c:
d8:b1:80:66:ab:f6:a9:46:ed:47:96:20:f3:51:fe:
ef:52:fb:cd:6f:35:0c:da:fa:94:15:0c:74:f0:78:
9f:14:38:21:86:ee:83:0b:68:2d:d2:52:5d:95:df:
b1:e1:a6:16:27:bb:ed:d7:ab:2c:19:4d:bf:60:fc:
33:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A8:B0:5A:FA:70:DB:9A:69:03:B8:3D:43:55:EE:5A:C1:3F:B3:7E
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/taiwWvpw25ppA7g9Q1XuWsE_s34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.142.0/24
77.47.144.0/22
195.178.130.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:ba:7d:72:fd:7f:3a:5e:4e:51:03:42:fe:96:a3:ec:dd:0f:
41:2a:c5:5e:9d:0b:3d:98:91:67:56:71:f4:1f:4d:b9:c5:2a:
e6:f4:33:5b:f9:0d:39:bd:14:36:f7:4a:63:07:ba:1d:86:71:
c1:c3:36:ed:02:fa:35:94:10:a2:a8:1f:66:b6:76:a7:db:c9:
d6:4c:ac:2d:c5:bf:6c:4a:90:84:0b:3a:17:fa:0f:fa:17:b5:
4c:6d:4c:26:25:98:83:5b:1b:2b:d8:2c:e2:2d:92:52:c4:64:
34:88:78:6a:3a:15:75:d4:af:43:1f:88:52:44:df:f5:d2:de:
07:4a:3e:66:f3:2b:ea:36:4a:69:96:49:5f:f4:6f:ab:6c:cd:
29:8d:45:1e:e3:a6:2d:84:eb:dc:d5:97:5d:d9:e8:37:03:11:
72:29:14:1b:59:b5:eb:dc:c6:9b:f3:84:1e:63:4c:cd:17:3b:
f4:f3:5d:89:94:62:d5:04:ce:2b:48:44:b7:4a:07:af:05:3a:
1e:79:1f:9b:73:a8:9c:46:b2:2a:9d:0f:92:48:80:7d:71:75:
1e:d1:f0:de:6d:a5:7a:15:40:e6:69:14:a7:b2:a8:30:86:3d:
7f:ec:bd:38:b0:de:51:2e:a1:8a:79:75:b8:a2:0c:49:77:90:
6c:e7:32:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:06:57 2026 by rpki-client