Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/tTsvoY1rw5-valp9iJMdTgSw-Ss.roa
File: tTsvoY1rw5-valp9iJMdTgSw-Ss.roa (raw, json)
Hash identifier: Reu19PFjxak8z9ZrnBaY/7yhM4BdNppIrLBODZoVJD8=
Subject key identifier: B5:3B:2F:A1:8D:6B:C3:9F:AF:6A:5A:7D:88:93:1D:4E:04:B0:F9:2B
Certificate issuer: /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Certificate serial: 01A10B706003B96B6DC7AAA91688FCFF6867
Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/tTsvoY1rw5-valp9iJMdTgSw-Ss.roa
Signing time: Mon 05 Oct 2026 09:41:16 +0000
ROA not before: Mon 05 Oct 2026 09:41:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25369
IP address blocks: 89.33.68.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:70:60:03:b9:6b:6d:c7:aa:a9:16:88:fc:ff:68:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Validity
Not Before: Oct 5 09:41:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b53b2fa18d6bc39faf6a5a7d88931d4e04b0f92b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0a:af:56:e9:10:d3:a1:c4:b1:59:91:30:ab:
d4:be:f2:ba:fb:e9:08:d7:a1:87:1d:1b:9a:98:6f:
49:37:f5:fe:ec:3d:c1:f6:9a:e4:00:44:a1:c8:01:
ca:c7:82:65:3a:13:d4:0a:2f:77:f0:01:6f:72:20:
6d:40:87:31:99:15:f8:fc:7e:59:a6:f9:59:13:5f:
63:b3:f2:79:5d:a7:63:68:0c:7d:8f:7b:97:91:25:
ad:be:7c:fb:e7:63:57:3a:63:fe:0e:44:8e:af:5c:
f1:fe:62:2e:94:b4:80:6e:03:64:84:8e:65:52:31:
56:06:a1:34:7b:80:6f:e6:b2:79:bd:b5:36:7d:34:
d9:c5:ae:78:d9:0b:66:5c:f8:25:7b:96:32:9f:d8:
e8:f0:7a:7b:ad:1d:7f:41:62:16:ac:01:28:3f:b0:
54:ba:2f:89:62:9e:18:ac:d7:64:f5:8d:2c:d4:07:
89:56:b7:db:84:71:40:47:31:7c:63:ea:06:eb:18:
b6:c0:b2:b2:0c:dd:ab:df:2e:4a:76:22:96:33:e8:
90:77:cd:11:c9:83:db:57:16:92:e0:c3:a8:09:ce:
e5:62:a5:6f:56:d1:d2:f1:78:21:df:28:5f:76:e5:
70:8d:fc:90:8d:5e:85:35:ce:d9:11:6c:36:10:41:
cd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3B:2F:A1:8D:6B:C3:9F:AF:6A:5A:7D:88:93:1D:4E:04:B0:F9:2B
X509v3 Authority Key Identifier:
keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/tTsvoY1rw5-valp9iJMdTgSw-Ss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.68.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:2f:fe:a1:a0:91:a6:c6:bf:a4:48:bd:19:aa:20:9c:3b:ad:
cf:43:6a:9c:1c:b7:45:72:e7:8f:c5:49:e0:eb:bd:09:af:2b:
82:24:b0:7a:58:1c:d0:fa:ed:be:46:36:9b:bf:77:6a:87:00:
1d:4e:7a:4b:ca:d2:59:21:ff:8a:ec:3f:18:66:fd:ff:8b:44:
cc:fa:8c:92:d9:86:81:b1:a8:50:1c:23:74:93:39:8d:f8:01:
b0:12:6f:75:f9:07:42:a1:b9:08:1d:79:17:5b:e4:76:9a:65:
71:d8:2b:92:ed:af:06:d9:3a:23:73:24:49:b7:ae:a0:67:e6:
e9:ad:cb:60:df:44:a6:e4:ba:92:47:24:f3:53:84:df:22:94:
eb:78:e5:b6:82:2c:d5:0e:bd:63:27:25:02:7e:4f:db:91:03:
9e:bd:c2:a9:75:bf:86:07:95:34:43:32:d0:47:37:2a:e5:cd:
2e:c0:04:70:69:4b:f5:5b:cb:0d:42:1b:83:92:2c:5e:ea:8c:
56:a9:e2:a0:09:b7:8b:4a:a7:56:27:0a:ec:45:83:eb:2b:b4:
46:5d:35:6b:2d:f2:37:aa:8f:6c:9e:c8:bb:76:f0:4e:7a:ac:
aa:1d:5f:b7:53:6a:b2:89:8c:3b:72:9d:85:8e:5f:4c:6f:46:
60:95:a9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:32:10 2026 by rpki-client