Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/twjMDdreLJ9Etk-cHlPsGQf6_Oo.roa
File: twjMDdreLJ9Etk-cHlPsGQf6_Oo.roa (raw, json)
Hash identifier: zG6nFZQFynATVPR9iSVk1uUDDM+oJOWOhVWDUFmxab8=
Subject key identifier: B7:08:CC:0D:DA:DE:2C:9F:44:B6:4F:9C:1E:53:EC:19:07:FA:FC:EA
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 019F47F5E0AF336A523350E17401038D275C
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/twjMDdreLJ9Etk-cHlPsGQf6_Oo.roa
Signing time: Thu 09 Jul 2026 17:38:43 +0000
ROA not before: Thu 09 Jul 2026 17:38:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48274
IP address blocks: 2a11:5340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:f5:e0:af:33:6a:52:33:50:e1:74:01:03:8d:27:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Jul 9 17:38:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b708cc0ddade2c9f44b64f9c1e53ec1907fafcea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:73:68:04:22:d4:bd:8a:87:46:7c:88:9e:38:
37:c3:5f:8e:3c:6e:c9:f4:e5:d4:e8:2c:95:3e:b6:
7b:8a:cc:ec:ae:54:00:ec:31:4c:99:75:72:4c:17:
07:5e:d5:6a:cf:62:e9:ea:fa:3a:a5:0d:13:ee:24:
96:a1:af:c5:8c:5a:12:04:3c:e2:8a:a7:e9:6c:6a:
70:9b:fa:6c:3a:d5:58:d4:f4:b3:0d:d2:c1:17:23:
9e:fb:c0:b1:c7:d4:74:71:34:f7:e6:89:89:2d:9a:
df:7d:c5:bd:0f:79:2c:9b:6b:30:ae:d6:78:07:45:
be:6d:e6:52:6d:25:4c:61:7a:5f:a9:73:aa:a6:f5:
b5:63:5e:b8:36:05:fd:09:5d:f0:21:56:ff:a5:c6:
f2:0d:5a:0d:c9:b4:48:3c:f8:fe:b4:75:5a:a9:51:
2f:29:60:1d:04:c6:3e:4d:ae:b0:a4:8a:c7:7b:3e:
24:91:70:ae:2b:6b:18:d9:1a:40:89:be:76:ac:93:
43:8f:a2:31:d8:88:8d:18:15:b3:d0:8e:5c:2b:b6:
48:06:e9:75:e3:08:68:49:3f:ab:9f:ca:c7:10:14:
1f:30:a7:f2:bd:75:d2:24:ac:d1:13:19:e0:87:37:
bd:95:a3:d6:f0:9e:cb:27:4c:77:c3:63:e8:46:bf:
22:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:08:CC:0D:DA:DE:2C:9F:44:B6:4F:9C:1E:53:EC:19:07:FA:FC:EA
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/twjMDdreLJ9Etk-cHlPsGQf6_Oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5340::/29
Signature Algorithm: sha256WithRSAEncryption
23:c1:07:ab:83:55:f2:06:b2:c3:e5:f9:ad:3b:49:c1:45:1e:
21:22:11:a1:65:22:7d:2b:7e:db:33:ed:64:7b:4c:d3:c2:f4:
4c:9d:86:07:1b:a7:19:5c:5c:dc:47:a9:0c:2c:7c:82:1c:a8:
3e:23:c3:98:ac:fe:98:41:2d:8f:9c:84:e8:b9:8d:7c:d8:bb:
9a:9a:df:2d:2b:35:3a:ab:1b:9b:2e:30:93:02:59:94:0d:68:
cc:0d:05:37:e2:d1:32:bd:dc:22:82:a2:41:3e:0d:32:5a:60:
d1:2c:6f:75:a8:27:b9:ba:b0:36:4d:f9:bb:26:a2:83:0a:2e:
ba:c3:7a:ef:2c:0e:b1:59:54:48:dc:c0:1d:d9:a9:17:0f:29:
6c:54:7c:cb:72:7b:dc:62:a6:f2:d8:30:be:db:fd:d5:0b:f2:
60:1c:38:97:25:ac:52:4f:61:f3:f9:8e:61:1a:3e:0b:81:f9:
68:c9:dc:ac:15:ae:9a:30:41:bf:bf:17:93:67:5c:95:6e:92:
2e:0d:c4:93:f3:6b:42:72:50:03:d8:06:5d:c3:db:ea:ae:39:
5f:21:d6:c3:29:e7:a9:3a:50:d8:af:0b:a0:cd:0d:e8:35:c4:
81:af:8c:24:a2:26:c4:f8:d5:93:11:45:84:5a:f5:8c:bd:45:
2b:c7:8c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:06:30 2026 by rpki-client