Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/73483e-86a9-41a9-9056-102f7b0f7537/1/59tvo_T-r2Sb15FVfFFSLLp4Qhs.roa
File: 59tvo_T-r2Sb15FVfFFSLLp4Qhs.roa (raw, json)
Hash identifier: K5LCAUGtvrzNtXGoO1N4kM7Z8YmUeNavlssGSeQAaoU=
Subject key identifier: E7:DB:6F:A3:F4:FE:AF:64:9B:D7:91:55:7C:51:52:2C:BA:78:42:1B
Certificate issuer: /CN=eee5ba77a6d04f09bccfa75d33d905da7a896d0f
Certificate serial: 019FC874F4717602AEE0F1108B576D503E9B
Authority key identifier: EE:E5:BA:77:A6:D0:4F:09:BC:CF:A7:5D:33:D9:05:DA:7A:89:6D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7uW6d6bQTwm8z6ddM9kF2nqJbQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/73483e-86a9-41a9-9056-102f7b0f7537/1/59tvo_T-r2Sb15FVfFFSLLp4Qhs.roa
Signing time: Mon 03 Aug 2026 16:28:55 +0000
ROA not before: Mon 03 Aug 2026 16:28:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210684
IP address blocks: 193.3.21.0/24 maxlen: 24
2a11:6840::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/73483e-86a9-41a9-9056-102f7b0f7537/1/7uW6d6bQTwm8z6ddM9kF2nqJbQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/73483e-86a9-41a9-9056-102f7b0f7537/1/7uW6d6bQTwm8z6ddM9kF2nqJbQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7uW6d6bQTwm8z6ddM9kF2nqJbQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c8:74:f4:71:76:02:ae:e0:f1:10:8b:57:6d:50:3e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eee5ba77a6d04f09bccfa75d33d905da7a896d0f
Validity
Not Before: Aug 3 16:28:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7db6fa3f4feaf649bd791557c51522cba78421b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:15:76:c1:aa:e5:ff:20:30:40:48:8e:68:41:
70:1f:3b:e4:6c:6e:a9:aa:93:a1:57:f8:0b:79:b7:
2a:22:e5:0b:b4:99:7e:a0:b9:00:18:3f:5f:96:8c:
c8:1f:7c:8c:c7:82:18:d4:86:ec:7f:1a:99:53:f4:
b8:b7:51:a4:ef:e7:ff:c3:4d:0c:8c:e5:09:b3:72:
d8:1a:54:e3:05:5b:da:eb:7b:c8:dc:47:ba:d9:ea:
ae:20:f2:21:de:45:09:1f:d3:bf:a3:59:a3:c9:31:
3f:83:50:59:8d:93:20:fa:2a:66:09:35:9b:ea:73:
80:91:b8:07:99:73:d7:c6:60:2f:cc:de:d4:b6:17:
d2:e3:8f:6a:df:83:8b:51:1c:15:88:90:c7:95:71:
50:72:ae:71:34:1d:01:e0:e5:5c:5e:62:af:c9:2a:
68:2e:83:a1:c9:28:5b:30:f1:39:c2:72:86:8e:49:
51:33:06:d0:3e:bf:53:1e:ac:7f:4b:07:a7:c0:c4:
f2:19:47:f8:0b:1c:00:6e:14:f4:a3:9a:ad:e7:e7:
19:55:d5:1f:24:24:3c:c2:9f:36:7d:96:31:30:b5:
81:6c:4d:6c:09:98:fe:38:a0:3e:34:c5:8c:80:90:
c3:7f:3d:b5:f3:60:b1:54:be:6d:d7:82:e5:b5:b5:
d7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DB:6F:A3:F4:FE:AF:64:9B:D7:91:55:7C:51:52:2C:BA:78:42:1B
X509v3 Authority Key Identifier:
keyid:EE:E5:BA:77:A6:D0:4F:09:BC:CF:A7:5D:33:D9:05:DA:7A:89:6D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uW6d6bQTwm8z6ddM9kF2nqJbQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/73483e-86a9-41a9-9056-102f7b0f7537/1/59tvo_T-r2Sb15FVfFFSLLp4Qhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/73483e-86a9-41a9-9056-102f7b0f7537/1/7uW6d6bQTwm8z6ddM9kF2nqJbQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.21.0/24
IPv6:
2a11:6840::/29
Signature Algorithm: sha256WithRSAEncryption
06:32:c6:82:bd:aa:60:13:25:60:18:3b:f0:eb:b3:2f:db:e0:
ce:78:5f:5e:5d:09:e9:09:d8:03:94:f8:95:3b:6e:d2:0a:a5:
11:ed:fb:f1:99:78:9c:34:fd:01:6b:1c:be:a0:eb:23:49:b7:
f0:ac:56:b9:8b:cb:63:00:2c:cf:dc:7b:14:02:f5:09:75:3f:
ca:ea:cc:31:b4:e8:f1:67:1e:3d:0d:3c:09:0b:a1:3b:47:28:
c9:3b:9d:01:d4:32:08:33:6a:ec:d5:97:32:ad:82:e1:7b:ab:
c6:7a:c5:2e:39:ee:dc:c8:53:e6:8f:a3:26:74:ac:de:be:52:
17:95:44:2f:cc:c6:09:8e:07:ae:e4:64:64:c8:d6:1d:58:24:
96:c8:c1:eb:34:fa:aa:22:b7:75:a2:b5:6b:53:3a:1f:5d:b8:
51:ad:98:03:31:91:d2:c8:76:50:f0:e2:a5:21:11:bb:e5:ee:
5e:93:c5:45:e1:7b:ef:5f:e0:eb:87:f9:bd:02:3a:a2:8f:a1:
45:df:da:73:0a:44:45:cc:27:98:9e:3d:a7:2f:d8:df:b3:7a:
1c:dd:e4:c0:53:dd:d8:13:5a:de:f2:88:ce:88:81:a3:29:71:
99:23:2e:f7:51:36:b3:20:78:fb:17:6e:e6:4f:9a:16:49:c7:
90:70:4d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:57:39 2026 by rpki-client