Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tnwCSbbtSUlkIcy0Vxop1cBE-0Q.roa
File: tnwCSbbtSUlkIcy0Vxop1cBE-0Q.roa (raw, json)
Hash identifier: axv5bTFXHsfz8WomEyyyLVne4nNHR4kv23f9mfJg1Z4=
Subject key identifier: B6:7C:02:49:B6:ED:49:49:64:21:CC:B4:57:1A:29:D5:C0:44:FB:44
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E585C508F3EFB548DAD00B14C44E22916
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tnwCSbbtSUlkIcy0Vxop1cBE-0Q.roa
Signing time: Sun 24 May 2026 05:01:45 +0000
ROA not before: Sun 24 May 2026 05:01:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31924
IP address blocks: 151.244.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:58:5c:50:8f:3e:fb:54:8d:ad:00:b1:4c:44:e2:29:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 24 05:01:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b67c0249b6ed49496421ccb4571a29d5c044fb44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a4:c8:47:a2:c8:62:cc:da:0b:35:b6:5c:b1:
53:b2:9e:7e:28:92:dd:61:7e:d8:ab:d1:52:2f:db:
5d:81:16:a6:df:06:89:23:09:66:95:35:da:49:08:
9a:f6:f8:05:43:b9:b9:7c:af:4d:19:df:b9:61:aa:
69:36:5a:f1:dd:cb:e6:ac:30:ec:4a:44:16:a6:f8:
e2:d6:ce:78:81:89:b6:11:b0:3e:f9:09:2c:8b:17:
55:9a:6f:cf:d7:02:b1:20:1b:4f:c6:0c:7a:04:15:
fe:c0:8e:dc:25:25:a2:d7:f1:a8:bc:a6:ed:1f:2f:
e4:b9:99:5a:e7:0a:40:ef:74:bb:6b:92:a7:ef:cf:
5c:9a:21:ff:84:64:64:5f:4a:b8:34:30:3c:a6:2b:
c9:d1:ec:c8:5b:df:c0:dd:8f:36:ef:dc:c1:ed:9e:
22:ae:8e:d3:88:a1:dc:87:6d:61:d7:38:f0:4c:a9:
b1:13:e1:fa:e9:7a:91:97:d4:42:87:0d:f2:ee:18:
43:9c:03:69:f3:a7:ac:e6:a9:aa:ab:1e:6f:99:1e:
17:ef:d0:20:5b:98:cb:78:52:b6:4e:cb:6c:c9:ea:
07:1d:ee:36:6d:0d:f1:a4:74:4f:72:a4:f9:8b:94:
de:cc:2e:f8:4c:4a:a6:b8:aa:df:a9:23:a8:5f:6f:
9b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7C:02:49:B6:ED:49:49:64:21:CC:B4:57:1A:29:D5:C0:44:FB:44
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tnwCSbbtSUlkIcy0Vxop1cBE-0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.123.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:f6:75:40:10:16:6d:16:02:1d:b0:1a:97:56:9a:dd:f3:d4:
13:b2:b1:db:ae:45:f0:3b:52:e7:7b:db:4b:6f:25:74:93:8e:
7e:83:3c:de:61:97:bf:9e:af:9a:51:44:aa:d6:2c:4a:73:44:
06:39:40:59:77:18:05:26:da:54:e7:da:5a:0a:3b:55:d8:7f:
69:82:97:7f:5f:47:0c:a1:a7:8e:92:c0:a9:42:21:7e:82:c8:
e0:6a:f6:e1:19:9b:3d:c2:7d:b0:b6:70:01:44:88:de:86:60:
b2:7c:67:65:ad:11:37:19:c8:da:d2:04:3b:e2:a5:46:53:58:
96:df:e3:aa:f6:df:0d:a4:ec:aa:30:8b:26:c0:97:ab:df:f1:
7d:47:43:3d:91:b9:66:fd:a7:c4:d5:0c:d1:07:0f:a5:f0:5e:
80:12:e5:4a:0b:4e:15:83:82:a3:af:d9:15:42:29:48:bc:c6:
6a:54:5b:65:80:2f:bf:39:14:41:1f:48:a1:29:0e:34:03:04:
d7:6e:1c:b0:36:0f:b4:d3:cf:9f:c1:e4:c5:4f:aa:d7:c4:47:
d4:20:93:a6:ac:b6:00:2f:5a:57:be:c1:ef:ff:3d:99:cb:d6:
d1:7c:b3:52:e7:35:7e:64:62:7d:25:a0:52:cb:b4:af:a8:7c:
db:7f:20:f1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ5YXFCPPvtUja0AsUxE4ikWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNTI0MDUwMTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjdjMDI0OWI2ZWQ0OTQ5NjQyMWNjYjQ1NzFhMjlkNWMwNDRmYjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaTIR6LIYszaCzW2XLFTsp5+KJLd
YX7Yq9FSL9tdgRam3waJIwlmlTXaSQia9vgFQ7m5fK9NGd+5YappNlrx3cvmrDDs
SkQWpvji1s54gYm2EbA++QksixdVmm/P1wKxIBtPxgx6BBX+wI7cJSWi1/GovKbt
Hy/kuZla5wpA73S7a5Kn789cmiH/hGRkX0q4NDA8pivJ0ezIW9/A3Y8279zB7Z4i
ro7TiKHch21h1zjwTKmxE+H66XqRl9RChw3y7hhDnANp86es5qmqqx5vmR4X79Ag
W5jLeFK2TstsyeoHHe42bQ3xpHRPcqT5i5TezC74TEqmuKrfqSOoX2+bJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLZ8Akm27UlJZCHMtFcaKdXARPtEMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvdG53Q1NiYnRTVWxrSWN5MFZ4b3AxY0JFLTBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/R7MA0G
CSqGSIb3DQEBCwUAA4IBAQCx9nVAEBZtFgIdsBqXVprd89QTsrHbrkXwO1Lne9tL
byV0k45+gzzeYZe/nq+aUUSq1ixKc0QGOUBZdxgFJtpU59paCjtV2H9pgpd/X0cM
oaeOksCpQiF+gsjgavbhGZs9wn2wtnABRIjehmCyfGdlrRE3Gcja0gQ74qVGU1iW
3+Oq9t8NpOyqMIsmwJer3/F9R0M9kblm/afE1QzRBw+l8F6AEuVKC04Vg4Kjr9kV
QilIvMZqVFtlgC+/ORRBH0ihKQ40AwTXbhywNg+008+fweTFT6rXxEfUIJOmrLYA
L1pXvsHv/z2Zy9bRfLNS5zV+ZGJ9JaBSy7SvqHzbfyDx
-----END CERTIFICATE-----
Generated at Wed Jun 3 08:50:09 2026 by rpki-client