Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/TewdM4m5cXGIpd03jo8TdWvui00.roa
File: TewdM4m5cXGIpd03jo8TdWvui00.roa (raw, json)
Hash identifier: mA41ek84pMrwBizMmzDXj7T4VFHTWjyfvJ/PBQhzya4=
Subject key identifier: 4D:EC:1D:33:89:B9:71:71:88:A5:DD:37:8E:8F:13:75:6B:EE:8B:4D
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FD1E160985B437A2470129CB9A81993A0
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/TewdM4m5cXGIpd03jo8TdWvui00.roa
Signing time: Wed 05 Aug 2026 12:23:56 +0000
ROA not before: Wed 05 Aug 2026 12:23:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215059
IP address blocks: 85.189.21.0/24 maxlen: 24
85.189.22.0/24 maxlen: 24
87.85.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:e1:60:98:5b:43:7a:24:70:12:9c:b9:a8:19:93:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 5 12:23:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4dec1d3389b9717188a5dd378e8f13756bee8b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:99:39:8e:af:cf:a3:fe:9e:63:0e:12:23:db:
2d:34:e3:55:95:fb:a9:bc:d6:5a:a6:95:2b:c3:6b:
5c:4e:28:44:20:cf:e7:43:b8:4f:ca:d6:43:19:b0:
ca:e3:fd:ed:34:64:8a:7a:b9:9c:a3:fa:37:25:99:
98:e4:87:b1:30:d2:90:cf:5a:a2:d8:22:56:9b:e9:
f4:64:98:bc:ef:cd:c1:29:8d:2b:24:79:0f:d0:98:
11:d1:7f:05:e9:77:8d:a4:90:a5:5f:6a:75:7e:12:
88:14:25:72:cd:b9:7f:bf:7a:0e:80:7b:08:fa:3c:
84:77:90:16:71:90:55:3a:b9:0c:17:c2:ea:8c:c4:
e1:6e:4c:cf:40:80:c6:f9:48:05:8f:b0:03:d4:86:
06:2a:6a:cd:bb:62:61:1e:b6:a7:07:54:e3:fd:78:
83:7a:1c:eb:1f:6d:3a:a6:a1:9f:67:61:1b:fa:43:
11:ec:9f:99:4b:10:d6:5e:27:5c:20:02:ed:dd:ea:
32:61:08:89:d5:1b:56:25:71:1f:41:2d:98:2e:88:
13:08:fc:5d:ce:7d:c7:76:8c:86:6f:f4:c0:04:09:
e3:80:5c:1c:68:52:0b:f2:92:a0:de:72:6b:f5:66:
d8:03:a1:37:cd:09:40:ec:ee:3c:98:d0:7e:79:91:
3f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EC:1D:33:89:B9:71:71:88:A5:DD:37:8E:8F:13:75:6B:EE:8B:4D
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/TewdM4m5cXGIpd03jo8TdWvui00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.189.21.0-85.189.22.255
87.85.231.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:e2:a9:61:84:cc:4d:3a:f4:0e:16:a5:d0:42:83:ec:80:45:
30:73:94:d4:44:a8:48:d1:32:a7:96:de:ad:3c:c7:e3:fc:a8:
a7:23:ef:b2:b1:a3:52:a0:c3:95:57:0a:0a:48:49:d6:fb:3f:
4c:f7:8e:93:d4:c9:92:8b:d0:8f:93:07:d9:e2:2d:e4:cf:6f:
00:aa:33:ae:65:b1:e2:77:0d:81:be:44:29:57:72:3d:5e:ee:
0c:0d:ec:46:80:c4:82:70:7d:f3:96:2f:27:17:cd:40:81:f6:
df:11:a6:33:ec:96:13:b1:63:e3:ee:2c:72:07:b6:45:84:9e:
12:65:32:a7:08:44:94:61:4e:e0:b2:dd:27:f0:44:d7:75:66:
98:01:d6:0e:5b:92:b6:73:d6:2a:cc:35:e2:c9:17:ab:01:6c:
79:b4:7b:08:23:35:97:95:9d:cb:35:5f:f9:94:0a:cb:dd:e3:
81:b2:e8:c4:86:67:11:f8:f2:b7:1a:9b:a9:0e:32:b9:08:ab:
3d:bc:a8:23:36:b9:14:13:87:4f:e6:4d:96:1a:3c:79:81:c0:
32:2f:7b:d0:80:21:8e:6e:47:02:bb:ef:05:23:5e:17:45:08:
9d:31:00:13:81:da:f8:d5:35:88:23:b7:83:bd:83:ad:81:31:
ed:05:da:2c
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZ/R4WCYW0N6JHASnLmoGZOgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwODA1MTIyMzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGVjMWQzMzg5Yjk3MTcxODhhNWRkMzc4ZThmMTM3NTZiZWU4YjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZk5jq/Po/6eYw4SI9stNONVlfup
vNZappUrw2tcTihEIM/nQ7hPytZDGbDK4/3tNGSKermco/o3JZmY5IexMNKQz1qi
2CJWm+n0ZJi8783BKY0rJHkP0JgR0X8F6XeNpJClX2p1fhKIFCVyzbl/v3oOgHsI
+jyEd5AWcZBVOrkMF8LqjMThbkzPQIDG+UgFj7AD1IYGKmrNu2JhHranB1Tj/XiD
ehzrH206pqGfZ2Eb+kMR7J+ZSxDWXidcIALt3eoyYQiJ1RtWJXEfQS2YLogTCPxd
zn3HdoyGb/TABAnjgFwcaFIL8pKg3nJr9WbYA6E3zQlA7O48mNB+eZE/NQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFE3sHTOJuXFxiKXdN46PE3Vr7otNMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvVGV3ZE00bTVjWEdJcGQwM2pvOFRkV3Z1aTAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABVvRUD
BABVvRYDBABXVecwDQYJKoZIhvcNAQELBQADggEBALviqWGEzE069A4WpdBCg+yA
RTBzlNREqEjRMqeW3q08x+P8qKcj77Kxo1Kgw5VXCgpISdb7P0z3jpPUyZKL0I+T
B9niLeTPbwCqM65lseJ3DYG+RClXcj1e7gwN7EaAxIJwffOWLycXzUCB9t8RpjPs
lhOxY+PuLHIHtkWEnhJlMqcIRJRhTuCy3SfwRNd1ZpgB1g5bkrZz1irMNeLJF6sB
bHm0ewgjNZeVncs1X/mUCsvd44Gy6MSGZxH48rcam6kOMrkIqz28qCM2uRQTh0/m
TZYaPHmBwDIve9CAIY5uRwK77wUjXhdFCJ0xABOB2vjVNYgjt4O9g62BMe0F2iw=
-----END CERTIFICATE-----
Generated at Thu Sep 3 18:57:17 2026 by rpki-client