Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/TW0DF-wnlu-de1Krpnv-u40riYU.roa
File: TW0DF-wnlu-de1Krpnv-u40riYU.roa (raw, json)
Hash identifier: uV6mS+EJ01ibp4haYCGobdjUifC1Js1PwUzDtY3ujqY=
Subject key identifier: 4D:6D:03:17:EC:27:96:EF:9D:7B:52:AB:A6:7B:FE:BB:8D:2B:89:85
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019F4DBF3329AFC83216744F3CFA24E5CC43
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/TW0DF-wnlu-de1Krpnv-u40riYU.roa
Signing time: Fri 10 Jul 2026 20:36:43 +0000
ROA not before: Fri 10 Jul 2026 20:36:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5650
IP address blocks: 88.209.221.0/24 maxlen: 24
88.209.240.0/22 maxlen: 22
194.41.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4d:bf:33:29:af:c8:32:16:74:4f:3c:fa:24:e5:cc:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 10 20:36:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d6d0317ec2796ef9d7b52aba67bfebb8d2b8985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a5:91:4a:a3:29:48:3d:9f:da:67:f0:8b:75:
87:a3:b7:7a:2b:08:0e:3d:fd:0a:d4:c2:76:65:7f:
c4:09:08:54:c3:8b:a0:6f:4f:7a:be:c3:f9:f9:5c:
7f:1c:17:20:0b:4a:b2:26:f7:45:cd:06:bd:aa:f9:
5d:29:fe:b3:44:74:e1:13:da:ef:c1:33:e6:13:d7:
b4:e4:ec:b9:31:ae:3a:cd:af:b3:77:53:73:85:f2:
f5:c9:66:26:11:0e:ce:ed:96:6a:04:b6:a9:8c:42:
69:ac:1c:4e:e1:79:f8:0c:06:2a:ef:20:49:49:9c:
10:c2:59:b4:95:82:82:71:f5:77:b7:18:5e:fc:95:
92:7d:19:41:3c:e7:d4:69:82:6b:04:8b:bb:ff:22:
9e:e0:1a:c7:3b:ed:b6:19:38:9d:32:04:98:84:fc:
39:f5:68:59:3f:98:cb:44:03:07:6b:0e:35:b0:a6:
24:79:40:d8:8d:fb:be:3f:cf:cd:3c:c4:00:90:59:
3b:e1:e4:97:0b:b6:83:c1:02:3c:b4:22:ff:74:7f:
32:0c:79:b7:58:14:d2:3d:ce:c6:5b:ce:63:41:6b:
8f:56:b2:f1:da:b2:e5:e4:1e:2e:7c:27:0d:2e:56:
62:a0:e3:ea:0a:70:00:f1:a7:da:44:b9:e6:94:df:
b9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6D:03:17:EC:27:96:EF:9D:7B:52:AB:A6:7B:FE:BB:8D:2B:89:85
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/TW0DF-wnlu-de1Krpnv-u40riYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.221.0/24
88.209.240.0/22
194.41.47.0/24
Signature Algorithm: sha256WithRSAEncryption
04:c2:3e:11:cb:4b:7f:ac:eb:a5:fe:0c:fa:03:48:ed:a0:d7:
74:58:e9:11:d9:a6:80:42:5b:a9:4e:64:c3:d2:9a:25:48:ae:
a4:8f:48:51:76:c3:70:9a:51:d7:a4:1c:64:a0:4a:3e:ca:6e:
d1:a5:0a:a8:83:47:7f:75:ee:fa:f9:d4:a5:9c:ca:82:92:15:
17:99:a9:17:15:48:7b:c3:19:7f:a1:64:57:e6:71:c6:76:60:
f6:36:4d:ad:27:4c:69:3f:1a:38:42:15:a7:8f:cf:66:99:50:
21:5a:99:47:c6:9b:9d:dc:c5:ff:4e:04:f7:a9:5e:33:60:5d:
b7:34:64:45:4b:5f:10:ae:47:78:c4:0e:b9:f7:81:97:b5:07:
d6:bc:31:00:94:35:29:d1:32:7e:69:9e:10:e1:07:6d:c4:2a:
e9:97:f0:eb:c5:95:37:0a:f2:83:61:51:be:eb:7b:c6:9c:df:
d4:25:3a:98:95:57:0c:f9:a7:6b:8f:26:92:e5:fb:d1:c4:a8:
98:07:9b:1a:d0:25:00:f8:b2:75:18:ea:a6:85:81:56:e0:19:
db:87:a5:e1:6f:b9:20:ee:5a:ce:44:72:f1:02:0d:4b:a4:23:
61:e8:a9:74:f4:bd:bb:7c:5e:23:48:0a:39:43:47:42:35:a7:
e0:5e:dc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 13:46:48 2026 by rpki-client