Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/TTj59N_k0baRYBbpMvwMER52UMA.roa
File: TTj59N_k0baRYBbpMvwMER52UMA.roa (raw, json)
Hash identifier: Qb/eGpeDdebAZbVO1qCzlupreg9p5z6Eu1FINEUZOCw=
Subject key identifier: 4D:38:F9:F4:DF:E4:D1:B6:91:60:16:E9:32:FC:0C:11:1E:76:50:C0
Certificate issuer: /CN=89da351e1e32092eb761f2c8ea2c75a197002d4b
Certificate serial: 019F23686FFCE05B27F9159085F842A63E81
Authority key identifier: 89:DA:35:1E:1E:32:09:2E:B7:61:F2:C8:EA:2C:75:A1:97:00:2D:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ido1Hh4yCS63YfLI6ix1oZcALUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/TTj59N_k0baRYBbpMvwMER52UMA.roa
Signing time: Thu 02 Jul 2026 15:17:54 +0000
ROA not before: Thu 02 Jul 2026 15:17:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8614
IP address blocks: 193.239.64.0/24 maxlen: 24
193.239.65.0/24 maxlen: 24
193.239.66.0/24 maxlen: 24
193.239.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/ido1Hh4yCS63YfLI6ix1oZcALUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/ido1Hh4yCS63YfLI6ix1oZcALUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ido1Hh4yCS63YfLI6ix1oZcALUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:6f:fc:e0:5b:27:f9:15:90:85:f8:42:a6:3e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89da351e1e32092eb761f2c8ea2c75a197002d4b
Validity
Not Before: Jul 2 15:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d38f9f4dfe4d1b6916016e932fc0c111e7650c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:66:41:e2:ee:a6:71:27:69:00:ce:ca:a2:fa:
2f:92:00:84:30:d9:a8:85:95:e0:33:bc:fc:39:64:
b8:1d:84:76:5c:6c:30:c8:51:17:22:f1:86:5d:2a:
f1:49:a2:c2:ee:43:3a:6c:e1:f0:ab:19:6f:3e:fe:
69:2c:f6:ae:ae:9e:db:51:08:38:1c:f0:a5:6d:4a:
81:b8:54:8d:f4:84:9a:a4:13:e2:13:32:05:37:d3:
a0:00:1e:6f:8b:89:6d:26:0a:03:ad:80:a3:f8:fd:
89:55:08:d4:4e:74:e7:a0:90:61:15:1e:52:6d:dc:
06:29:e1:b9:6c:c4:5a:1d:fa:95:a0:e7:3b:7b:69:
c6:cd:57:ce:a1:22:26:22:ed:b8:5d:05:c6:b9:25:
58:17:31:51:67:50:5a:78:5b:91:18:2c:3e:5d:ba:
9f:f3:10:17:f4:ac:48:fa:67:aa:69:89:5f:eb:2e:
60:91:7d:04:07:03:79:98:75:31:53:8b:fd:d3:98:
7b:d5:3b:d0:d4:1d:e1:3d:41:38:c7:0f:c5:2f:a7:
70:de:17:b8:9d:c5:cd:90:e0:ed:34:5e:c9:d6:ae:
ef:e7:d0:8d:5f:41:15:55:6d:c1:34:71:bd:3f:95:
71:54:88:3e:39:7a:6a:33:d1:fe:c3:d5:90:00:f6:
e3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:38:F9:F4:DF:E4:D1:B6:91:60:16:E9:32:FC:0C:11:1E:76:50:C0
X509v3 Authority Key Identifier:
keyid:89:DA:35:1E:1E:32:09:2E:B7:61:F2:C8:EA:2C:75:A1:97:00:2D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ido1Hh4yCS63YfLI6ix1oZcALUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/TTj59N_k0baRYBbpMvwMER52UMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/ido1Hh4yCS63YfLI6ix1oZcALUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.64.0/22
Signature Algorithm: sha256WithRSAEncryption
71:04:05:17:5f:6f:d7:eb:59:61:df:88:49:a5:aa:e0:f5:4a:
10:05:2b:17:57:0e:48:2c:84:42:5d:1a:f3:99:4f:86:7a:81:
1b:9c:26:ee:03:49:ac:ce:15:cc:eb:20:de:cc:66:17:7d:a6:
96:2f:83:e9:67:4e:f3:d4:5e:72:6a:66:10:24:01:6a:2f:28:
2c:75:7b:e8:b3:fa:fc:bc:bb:c3:e7:3e:0f:7f:22:38:f6:33:
c7:da:98:2b:c1:ce:24:6d:de:5a:bd:e9:bc:0d:40:fe:16:f8:
bd:61:3d:70:75:d1:ef:3d:b1:f9:c2:45:8c:fe:94:6b:d8:45:
0f:bd:b7:1b:e6:f8:1f:e6:d9:8b:0e:ed:4f:a6:b1:28:1d:22:
49:eb:83:39:09:14:62:07:37:4c:f1:86:56:d1:93:6f:47:10:
e9:ef:72:71:e5:e8:3c:0a:e0:17:40:55:6b:7b:3f:83:90:76:
aa:fa:aa:bf:5d:47:66:ef:b2:41:98:76:c2:48:77:99:84:98:
ca:53:64:76:ea:84:63:a6:63:3f:4b:4e:df:17:0e:95:17:47:
2f:7f:0f:81:4e:3c:6d:92:09:79:b7:1b:69:8b:70:ff:a1:9a:
4f:58:70:fb:1f:ae:e6:53:68:bb:be:42:2e:d9:b9:4f:a8:23:
07:59:77:5a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaG/84Fsn+RWQhfhCpj6BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZGEzNTFlMWUzMjA5MmViNzYxZjJjOGVhMmM3NWExOTcw
MDJkNGIwHhcNMjYwNzAyMTUxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDM4ZjlmNGRmZTRkMWI2OTE2MDE2ZTkzMmZjMGMxMTFlNzY1MGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2ZB4u6mcSdpAM7KovovkgCEMNmo
hZXgM7z8OWS4HYR2XGwwyFEXIvGGXSrxSaLC7kM6bOHwqxlvPv5pLPaurp7bUQg4
HPClbUqBuFSN9ISapBPiEzIFN9OgAB5vi4ltJgoDrYCj+P2JVQjUTnTnoJBhFR5S
bdwGKeG5bMRaHfqVoOc7e2nGzVfOoSImIu24XQXGuSVYFzFRZ1BaeFuRGCw+Xbqf
8xAX9KxI+meqaYlf6y5gkX0EBwN5mHUxU4v905h71TvQ1B3hPUE4xw/FL6dw3he4
ncXNkODtNF7J1q7v59CNX0EVVW3BNHG9P5VxVIg+OXpqM9H+w9WQAPbjPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE04+fTf5NG2kWAW6TL8DBEedlDAMB8GA1UdIwQY
MBaAFInaNR4eMgkut2HyyOosdaGXAC1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWRvMUhoNHlDUzYzWWZMSTZpeDFvWmNBTFVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8xYmFkN2UtY2Y1Yy00ZDFjLTg2NGEt
NDkzNzYwMWM4ZmVhLzEvVFRqNTlOX2swYmFSWUJicE12d01FUjUyVU1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8xYmFkN2UtY2Y1Yy00ZDFjLTg2NGEtNDkzNzYwMWM4ZmVh
LzEvaWRvMUhoNHlDUzYzWWZMSTZpeDFvWmNBTFVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwe9AMA0G
CSqGSIb3DQEBCwUAA4IBAQBxBAUXX2/X61lh34hJparg9UoQBSsXVw5ILIRCXRrz
mU+GeoEbnCbuA0mszhXM6yDezGYXfaaWL4PpZ07z1F5yamYQJAFqLygsdXvos/r8
vLvD5z4PfyI49jPH2pgrwc4kbd5avem8DUD+Fvi9YT1wddHvPbH5wkWM/pRr2EUP
vbcb5vgf5tmLDu1PprEoHSJJ64M5CRRiBzdM8YZW0ZNvRxDp73Jx5eg8CuAXQFVr
ez+DkHaq+qq/XUdm77JBmHbCSHeZhJjKU2R26oRjpmM/S07fFw6VF0cvfw+BTjxt
kgl5txtpi3D/oZpPWHD7H67mU2i7vkIu2blPqCMHWXda
-----END CERTIFICATE-----
Generated at Wed Jul 22 00:33:45 2026 by rpki-client