Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/TWS817fNUd-sZWsxzJC0OctVC90.roa
File: TWS817fNUd-sZWsxzJC0OctVC90.roa (raw, json)
Hash identifier: tYxdgoHOHfBF2PsnmAS8JK31pWAdf570MD6SLAPC1I8=
Subject key identifier: 4D:64:BC:D7:B7:CD:51:DF:AC:65:6B:31:CC:90:B4:39:CB:55:0B:DD
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A07B7EC50867F5D4783A287359ADE38828
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/TWS817fNUd-sZWsxzJC0OctVC90.roa
Signing time: Mon 07 Sep 2026 10:51:40 +0000
ROA not before: Mon 07 Sep 2026 10:51:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6205
IP address blocks: 87.76.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:7e:c5:08:67:f5:d4:78:3a:28:73:59:ad:e3:88:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Sep 7 10:51:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d64bcd7b7cd51dfac656b31cc90b439cb550bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:68:a1:35:10:75:6b:30:a5:d4:0d:33:6a:f2:
c8:e5:19:1c:bf:86:41:35:e9:03:60:2a:cf:69:af:
25:ae:57:9a:f2:ea:72:e4:8c:1d:6a:83:a0:6a:cd:
f8:74:a7:4f:ec:3c:7c:0d:20:47:f8:85:90:d9:e9:
a2:50:e4:3b:ea:9a:1c:ac:f1:cd:c6:f5:dd:55:81:
1c:7d:b3:59:62:1a:d2:6d:e0:04:d3:d8:1a:37:2e:
21:d9:5d:e3:49:bb:28:28:32:79:83:3f:aa:f6:e7:
38:9a:6a:65:8e:ed:3c:1b:cb:09:86:a1:8b:b7:3a:
0a:72:d8:ac:f9:5d:c7:f6:42:00:3d:49:74:2c:e1:
fe:0d:71:87:83:fc:d4:b4:39:02:ff:cc:45:5c:04:
df:1d:d3:04:46:03:6b:55:0e:5e:0b:10:dd:d6:06:
33:fe:5b:8d:92:95:bf:44:18:52:6a:07:7c:8b:07:
82:e6:7d:fd:bc:c9:f1:af:4b:ec:2d:11:38:d1:83:
dd:63:30:b6:52:19:6f:f5:cb:20:06:5f:89:2a:93:
96:07:ff:9b:ed:18:d8:a2:54:96:f6:fa:b3:9f:aa:
34:0e:c0:3c:71:e1:2f:bc:5e:8c:e7:fd:c1:cc:78:
02:a2:41:a4:64:d5:8a:62:73:83:e2:a1:9a:b0:67:
96:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:64:BC:D7:B7:CD:51:DF:AC:65:6B:31:CC:90:B4:39:CB:55:0B:DD
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/TWS817fNUd-sZWsxzJC0OctVC90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.195.0/24
Signature Algorithm: sha256WithRSAEncryption
03:b7:62:ae:f0:52:d5:f3:63:74:f6:16:60:c1:94:d9:e8:a7:
73:62:92:a6:95:5b:fc:36:53:d1:f7:7c:18:e8:eb:fc:cb:33:
df:4f:20:21:3a:2d:77:52:bf:1e:ee:81:3c:85:6b:cc:fe:39:
0d:22:fa:62:5c:22:33:ca:4f:8e:66:73:d4:c7:27:b2:86:ef:
ff:bd:d5:07:b5:0a:e1:7f:87:6e:cc:03:bc:45:8d:2a:19:e0:
cd:e7:f7:ce:24:69:03:c5:c0:91:3f:d1:70:ed:cc:94:31:5d:
5f:7c:aa:8d:01:3c:00:45:43:76:6c:21:24:de:91:7f:b8:61:
cd:ab:bc:c6:f1:5d:13:a9:e1:3d:4c:37:b6:94:c1:d4:78:45:
b2:d5:8d:ba:dc:17:88:0b:24:9f:fb:18:1c:ee:49:1c:19:37:
a8:45:b8:ea:1f:53:4e:dc:25:ba:8d:97:12:26:48:bd:49:a1:
6b:2c:0d:8b:7f:bb:19:b3:2a:e4:d5:1d:0c:ff:8b:66:47:60:
c4:6e:af:0f:91:83:27:34:a4:5c:ba:5b:30:11:7a:f8:3f:d2:
b6:0a:5c:eb:b8:a3:c2:e3:9e:3b:5b:32:13:af:2a:ca:4b:aa:
ba:22:db:ac:95:bd:d9:f1:17:ab:00:bf:40:07:da:44:28:b6:
54:d4:7f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:55:52 2026 by rpki-client