Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/TWJl-xTRJ8_goCGrXCr4eAxcRjg.roa
File: TWJl-xTRJ8_goCGrXCr4eAxcRjg.roa (raw, json)
Hash identifier: if2i+Zka/s9+grN1V2/K/Ot59ZG2U7P8WAzvteuUlwA=
Subject key identifier: 4D:62:65:FB:14:D1:27:CF:E0:A0:21:AB:5C:2A:F8:78:0C:5C:46:38
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019E7CE8BA8DD755C28196E2C7899BC40E69
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/TWJl-xTRJ8_goCGrXCr4eAxcRjg.roa
Signing time: Sun 31 May 2026 07:21:27 +0000
ROA not before: Sun 31 May 2026 07:21:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197223
IP address blocks: 147.90.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Jun 2026 14:52:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7c:e8:ba:8d:d7:55:c2:81:96:e2:c7:89:9b:c4:0e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: May 31 07:21:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d6265fb14d127cfe0a021ab5c2af8780c5c4638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:02:af:80:04:b8:e8:5b:80:23:1e:1c:6d:eb:
73:fa:5c:0f:ec:9e:b1:41:f9:4f:e6:49:6f:c5:b2:
c4:a7:be:58:ea:35:30:9a:4a:27:df:a7:1a:4f:0b:
1d:5f:5e:17:df:8a:69:2c:06:2a:90:20:fc:36:26:
af:84:8d:56:64:9b:87:81:9e:18:04:9c:bb:9e:68:
66:96:07:0e:2e:01:7d:2c:ba:c0:f3:26:74:89:47:
97:08:2e:4d:ec:bc:4a:fc:dd:e1:4f:e1:94:28:18:
72:88:c9:09:39:de:ab:df:08:51:68:ef:07:42:0a:
25:a4:61:8c:2e:ae:e8:3c:99:3d:67:3d:16:27:4d:
d3:da:fc:6c:de:8f:26:ff:3b:a9:fb:76:e5:ed:3d:
99:e9:d1:f6:6d:f8:a4:8f:ff:7f:8e:a8:52:a4:b7:
dc:fb:5c:15:bb:b0:d9:d5:02:5c:ad:44:4b:b4:01:
ce:cd:90:87:e6:86:b4:a5:18:78:50:48:03:1c:9f:
db:c2:c3:99:34:c3:25:70:fd:fc:89:f1:8a:08:ab:
9c:5b:3e:87:51:e0:ec:10:a6:9b:11:93:bd:a5:fb:
97:00:62:7d:25:b0:2d:c9:29:a6:42:3c:e8:4a:a2:
f6:e5:c4:f5:a7:ce:f6:08:01:74:05:f3:de:5d:21:
ac:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:62:65:FB:14:D1:27:CF:E0:A0:21:AB:5C:2A:F8:78:0C:5C:46:38
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/TWJl-xTRJ8_goCGrXCr4eAxcRjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.229.0/24
Signature Algorithm: sha256WithRSAEncryption
17:ca:da:af:b1:dc:c3:bd:1d:58:3b:99:23:e0:fc:8a:a9:03:
da:f6:86:9a:b3:cd:67:7b:35:55:e1:fb:16:17:38:6d:ef:fd:
2e:cb:69:ca:1e:cb:6d:b4:c0:8f:28:82:7d:34:d5:66:1e:f7:
12:65:9b:25:f8:f1:93:6b:8e:06:e6:39:22:67:26:86:2b:0e:
2b:93:91:00:f1:98:da:80:d1:67:f9:ec:bb:bb:0b:ea:2e:6a:
89:de:50:40:85:d2:4a:a1:8c:9c:0f:61:af:33:cd:fb:a3:a1:
e7:0e:fe:ae:45:86:38:10:fc:51:9a:43:27:60:0d:54:70:18:
db:dc:c4:41:18:a5:fd:7e:35:5c:de:6f:bd:a7:72:65:87:79:
fc:dd:92:e3:3f:ec:e5:c3:c7:2f:8f:b8:f2:50:10:df:bc:54:
15:c7:46:97:0e:f5:51:78:87:3d:54:fd:56:a3:bb:f6:83:5f:
de:6c:7e:02:45:8c:a6:0d:f3:64:ed:ec:52:05:86:bc:99:cb:
0a:ed:a6:c6:6e:4e:dc:a2:36:f3:6b:9c:a9:36:04:ed:ce:63:
e3:4a:ee:e6:25:bd:7b:d9:74:ff:93:79:2a:34:1d:94:93:a7:
57:e6:f1:5e:b4:87:b2:79:87:06:3b:06:66:7d:66:9a:4e:27:
e9:5e:fb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 00:46:27 2026 by rpki-client