Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/TITnSXpWW3qxfDNPouCwtI3YpEQ.roa
File: TITnSXpWW3qxfDNPouCwtI3YpEQ.roa (raw, json)
Hash identifier: sm1bU0K4LgCRG0wGAryCUHdSLiQ6rkGZDYDjE1Aj7fM=
Subject key identifier: 4C:84:E7:49:7A:56:5B:7A:B1:7C:33:4F:A2:E0:B0:B4:8D:D8:A4:44
Certificate issuer: /CN=c79d13664a379d8b5dadf763dd04f5115e023184
Certificate serial: 01A0F92C85C4073DDCAC055C0DE017248E43
Authority key identifier: C7:9D:13:66:4A:37:9D:8B:5D:AD:F7:63:DD:04:F5:11:5E:02:31:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/TITnSXpWW3qxfDNPouCwtI3YpEQ.roa
Signing time: Thu 01 Oct 2026 20:33:59 +0000
ROA not before: Thu 01 Oct 2026 20:33:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198180
IP address blocks: 193.23.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:2c:85:c4:07:3d:dc:ac:05:5c:0d:e0:17:24:8e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79d13664a379d8b5dadf763dd04f5115e023184
Validity
Not Before: Oct 1 20:33:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c84e7497a565b7ab17c334fa2e0b0b48dd8a444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b5:46:81:bb:35:3b:fc:a2:fc:16:9f:d6:11:
b0:80:7b:db:bb:0f:06:65:85:8b:1a:69:1a:35:92:
c3:3a:8b:6c:49:57:d7:e2:f6:f3:86:07:8c:9b:02:
01:dd:00:ae:6b:03:23:56:29:62:5b:93:02:87:0b:
a3:d8:9c:43:cb:6e:80:de:1d:64:55:68:bf:84:8e:
92:6a:4d:c5:0f:43:5a:98:cb:10:3d:1d:25:c9:59:
a9:40:f4:a8:44:48:fb:ec:f3:67:b5:4d:c0:7a:1b:
1a:c9:a3:97:3e:b5:29:46:6c:63:10:59:d7:c2:25:
b1:f5:e7:1e:35:53:0a:16:32:ec:f0:1e:b0:6f:5b:
67:46:c9:7c:44:58:0d:9c:e6:a9:17:88:cd:9d:09:
fd:e8:0a:3c:b8:12:5a:12:4d:8a:2c:8c:bd:4d:52:
94:98:ed:cd:1d:f6:c3:3c:6d:66:53:a1:bb:aa:25:
5f:d4:48:7b:25:f5:72:f4:1d:67:57:3f:80:9f:6f:
5b:93:8f:a8:a3:45:74:0d:89:e4:d6:e2:5a:b6:55:
61:ef:c6:6b:5b:41:fa:3a:69:3a:dd:4b:ee:bc:f2:
89:e6:f6:e8:d1:df:69:ab:3e:f4:84:e6:7f:42:4d:
0a:3a:40:52:76:fc:d1:c9:1c:f6:9c:9c:8c:9f:8d:
c2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:84:E7:49:7A:56:5B:7A:B1:7C:33:4F:A2:E0:B0:B4:8D:D8:A4:44
X509v3 Authority Key Identifier:
keyid:C7:9D:13:66:4A:37:9D:8B:5D:AD:F7:63:DD:04:F5:11:5E:02:31:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/TITnSXpWW3qxfDNPouCwtI3YpEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.112.0/24
Signature Algorithm: sha256WithRSAEncryption
07:d3:19:a5:ea:1e:97:39:57:39:4f:a5:53:0b:48:7e:1e:9d:
e4:a6:b4:f1:44:de:1f:05:be:7e:eb:e5:d1:00:08:38:2d:6c:
04:f0:4e:ba:ff:e7:53:96:f0:92:7f:47:00:91:4c:0e:2b:cc:
37:6c:90:6b:57:1e:3a:89:5b:44:13:9e:77:47:e9:f1:80:12:
5f:31:7b:37:59:34:0c:91:db:19:cf:a9:ef:88:22:1d:8d:16:
3d:3c:7f:4a:15:f2:7c:8c:20:a1:e4:e3:c0:34:30:0a:5d:38:
b0:27:1f:d3:74:fa:21:43:6f:73:85:83:3c:c9:9d:2b:8a:07:
8a:9c:e1:78:38:c6:bf:06:8a:29:82:79:d1:e0:9a:b2:70:85:
e5:67:a1:d1:48:08:73:cb:6b:08:a5:cd:7f:23:db:3e:23:01:
8c:2d:19:64:72:b1:ba:89:25:90:db:72:e1:22:67:a2:4a:71:
72:bf:21:23:e5:c0:c3:74:32:cc:5f:7b:fb:4f:3d:4b:7e:4c:
8b:05:c9:28:d7:df:51:93:da:c8:22:b5:4a:c1:b4:a7:78:1f:
8b:cb:ee:79:9a:d7:bc:e0:ab:98:64:48:4f:76:a1:66:80:34:
ac:2d:fe:52:2d:83:16:15:8a:e5:a9:ce:15:2e:44:3b:60:09:
15:e5:92:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:50:22 2026 by rpki-client