Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/TW0bYmE97OfIWhnm-YjDfqyzpDU.roa
File: TW0bYmE97OfIWhnm-YjDfqyzpDU.roa (raw, json)
Hash identifier: mMjagBSbp5ealGPA0hsHC5rLIyTqZHJ/U2hyOnXcBQg=
Subject key identifier: 4D:6D:1B:62:61:3D:EC:E7:C8:5A:19:E6:F9:88:C3:7E:AC:B3:A4:35
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A05D0F385D4DE6FF96D271C75908DE1675
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/TW0bYmE97OfIWhnm-YjDfqyzpDU.roa
Signing time: Tue 01 Sep 2026 13:01:13 +0000
ROA not before: Tue 01 Sep 2026 13:01:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207057
IP address blocks: 89.125.155.0/24 maxlen: 24
167.17.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:31:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:0f:38:5d:4d:e6:ff:96:d2:71:c7:59:08:de:16:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 1 13:01:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d6d1b62613dece7c85a19e6f988c37eacb3a435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:32:19:41:12:b4:35:7a:84:66:e3:49:04:7f:
97:08:a9:00:48:b0:6c:23:27:68:4f:6b:f1:3f:fd:
90:52:01:c1:08:f4:0b:a1:2e:65:b1:88:06:fb:d2:
c8:ee:fc:26:9c:1b:d5:ac:94:c2:31:f9:35:5d:e0:
90:7a:81:36:e0:9c:4a:f9:52:e3:39:5a:d3:ac:a4:
6c:45:3d:8a:4e:8b:a7:ba:f4:98:10:cb:1d:5d:9f:
1d:0d:2f:cb:4f:1c:d8:82:27:8e:b0:d6:4d:5e:af:
1f:f5:56:df:00:e8:b9:12:66:64:be:66:3d:19:48:
d2:99:6e:e3:44:90:29:2b:ed:d1:c2:fa:e5:24:0b:
94:69:e7:7f:73:97:46:68:40:25:40:94:89:cb:c6:
0f:b9:8b:08:6b:2f:05:37:f5:a5:07:36:56:62:db:
b2:91:74:4b:12:e1:d4:ab:a1:65:81:1d:8d:2b:e8:
2e:2a:6a:af:5d:7b:dd:01:1b:7a:3a:f1:2c:39:7d:
61:89:12:38:a6:c7:ce:74:20:9b:1d:b7:c9:94:31:
cc:87:37:06:20:ad:72:bb:e1:49:de:6a:c5:5f:1f:
5d:49:29:77:fa:8a:eb:2c:7e:7c:d1:92:bc:8a:a0:
ad:94:f6:c6:d0:1f:df:cf:d8:2f:89:52:80:2b:67:
e3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6D:1B:62:61:3D:EC:E7:C8:5A:19:E6:F9:88:C3:7E:AC:B3:A4:35
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/TW0bYmE97OfIWhnm-YjDfqyzpDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.155.0/24
167.17.191.0/24
Signature Algorithm: sha256WithRSAEncryption
03:df:58:4e:48:54:93:7d:65:01:84:d8:f5:66:79:d3:86:35:
d6:86:f3:f8:5e:61:7c:d3:32:bb:24:3c:ca:f0:c3:3e:27:ea:
cd:c3:b9:3e:3a:06:8e:b4:d4:ed:5b:df:59:be:bf:da:a1:2f:
59:02:f9:00:f0:1c:1d:e1:eb:44:54:74:70:a4:09:2e:b3:79:
9e:f0:bb:16:c0:95:5f:76:a7:b8:17:56:78:1d:e7:be:a8:95:
41:98:7b:2b:86:2e:ca:db:7c:6c:ce:9c:c5:42:d7:3c:de:7a:
7a:07:9a:7f:44:11:99:44:0f:e3:4b:53:06:90:dc:c9:06:4b:
c6:00:30:fe:59:50:a7:43:11:a6:73:86:d4:63:86:02:2a:de:
ff:48:d8:2a:11:f2:a2:50:36:0c:31:a3:0e:ca:8d:fc:83:08:
40:b2:96:f7:52:f5:eb:07:5e:fb:b7:89:e4:f7:e0:29:c3:db:
0e:1c:3b:8b:59:ca:7b:5d:11:82:8e:7f:ab:5a:f8:30:b3:7e:
81:ef:61:e5:b3:a6:9e:3c:71:35:32:3c:d8:f2:a3:28:43:c6:
60:0d:31:62:05:d9:a8:78:6d:46:36:0e:c1:06:54:19:43:71:
b6:29:00:82:57:23:49:1f:04:fe:7e:44:ea:67:75:35:99:d9:
48:ff:73:02
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaBdDzhdTeb/ltJxx1kI3hZ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwOTAxMTMwMTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDZkMWI2MjYxM2RlY2U3Yzg1YTE5ZTZmOTg4YzM3ZWFjYjNhNDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzIZQRK0NXqEZuNJBH+XCKkASLBs
IydoT2vxP/2QUgHBCPQLoS5lsYgG+9LI7vwmnBvVrJTCMfk1XeCQeoE24JxK+VLj
OVrTrKRsRT2KTounuvSYEMsdXZ8dDS/LTxzYgieOsNZNXq8f9VbfAOi5EmZkvmY9
GUjSmW7jRJApK+3RwvrlJAuUaed/c5dGaEAlQJSJy8YPuYsIay8FN/WlBzZWYtuy
kXRLEuHUq6FlgR2NK+guKmqvXXvdARt6OvEsOX1hiRI4psfOdCCbHbfJlDHMhzcG
IK1yu+FJ3mrFXx9dSSl3+orrLH580ZK8iqCtlPbG0B/fz9gviVKAK2fjywIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFE1tG2JhPeznyFoZ5vmIw36ss6Q1MB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvVFcwYlltRTk3T2ZJV2hubS1ZakRmcXl6cERVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWX2bAwQA
pxG/MA0GCSqGSIb3DQEBCwUAA4IBAQAD31hOSFSTfWUBhNj1ZnnThjXWhvP4XmF8
0zK7JDzK8MM+J+rNw7k+OgaOtNTtW99Zvr/aoS9ZAvkA8Bwd4etEVHRwpAkus3me
8LsWwJVfdqe4F1Z4Hee+qJVBmHsrhi7K23xszpzFQtc83np6B5p/RBGZRA/jS1MG
kNzJBkvGADD+WVCnQxGmc4bUY4YCKt7/SNgqEfKiUDYMMaMOyo38gwhAspb3UvXr
B177t4nk9+Apw9sOHDuLWcp7XRGCjn+rWvgws36B72Hls6aePHE1MjzY8qMoQ8Zg
DTFiBdmoeG1GNg7BBlQZQ3G2KQCCVyNJHwT+fkTqZ3U1mdlI/3MC
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:44:10 2026 by rpki-client