Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/tGWG_qgfSiL49D5l9SowKgnIWKQ.roa
File: tGWG_qgfSiL49D5l9SowKgnIWKQ.roa (raw, json)
Hash identifier: mKrVkBXjSw+SHCw28P6sj6VJGBsiYIOzWegDSxHSOOQ=
Subject key identifier: B4:65:86:FE:A8:1F:4A:22:F8:F4:3E:65:F5:2A:30:2A:09:C8:58:A4
Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial: 019FBC1AB7B42C89DDEE96D9A4990DD45AEE
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/tGWG_qgfSiL49D5l9SowKgnIWKQ.roa
Signing time: Sat 01 Aug 2026 06:54:55 +0000
ROA not before: Sat 01 Aug 2026 06:54:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 14.102.10.0/24 maxlen: 24
114.69.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 06:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:bc:1a:b7:b4:2c:89:dd:ee:96:d9:a4:99:0d:d4:5a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Validity
Not Before: Aug 1 06:54:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b46586fea81f4a22f8f43e65f52a302a09c858a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e2:56:ca:66:09:14:1d:5c:6f:9f:25:72:76:
10:60:3a:30:a7:1f:18:6c:99:a9:e1:10:84:3b:f5:
ce:ed:9a:e9:30:a4:4b:05:f6:42:95:09:06:78:80:
a4:31:ec:b8:56:8c:70:b1:0e:77:a5:5d:8e:b2:9e:
05:e7:61:bd:9e:45:14:cd:4d:a6:19:e2:a8:40:02:
fb:bc:ff:5b:2e:0f:17:fb:3a:e8:8a:ce:18:f6:b1:
b7:bb:98:c5:92:80:40:db:c4:44:64:72:3f:63:aa:
3f:78:39:18:eb:90:21:06:b9:ca:8c:f7:7d:c0:3e:
9e:08:8c:f6:9b:c4:39:54:0a:27:19:3a:54:1b:35:
27:8c:df:78:de:58:0c:69:6c:94:49:fb:ee:8a:a4:
a7:84:f6:cd:98:26:c5:44:55:05:d7:b1:9a:76:63:
0b:de:c7:54:8e:91:b8:0c:87:08:97:50:f5:8e:67:
99:bf:11:68:ec:c2:21:db:cc:f1:d6:98:57:68:a9:
58:cb:00:01:a3:b9:30:00:6f:37:6b:06:b8:19:5d:
f1:8c:98:4b:d7:a5:0f:44:0c:21:ae:c1:0f:74:8e:
72:20:14:0b:d2:d1:2a:2a:2c:e4:5d:1f:f6:6d:94:
99:89:f7:09:d8:c6:91:2b:97:7b:cb:f3:aa:f1:f3:
6c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:65:86:FE:A8:1F:4A:22:F8:F4:3E:65:F5:2A:30:2A:09:C8:58:A4
X509v3 Authority Key Identifier:
keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/tGWG_qgfSiL49D5l9SowKgnIWKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.10.0/24
114.69.245.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:69:b9:ec:c6:43:eb:5c:7d:1b:ba:39:ad:c2:14:5f:97:f1:
fc:32:de:fc:80:f8:b8:57:cf:20:20:30:86:4b:2c:36:37:a1:
fa:53:82:6c:35:b3:3b:45:26:92:f9:89:33:e5:f8:a2:91:a1:
a5:d5:64:c1:c6:fc:3b:aa:12:cf:b2:cd:d6:df:17:00:34:ff:
b3:32:43:a9:d0:d3:a4:d4:79:4f:84:ee:80:06:44:16:2e:56:
af:f1:18:b4:f6:b6:b2:4c:ba:cd:22:62:87:f8:32:cc:c7:5b:
49:15:c4:1d:3b:ca:49:6c:4b:a2:0f:69:f9:4e:81:2e:23:0f:
62:fb:70:fb:11:8e:61:a5:99:5c:66:9c:24:6a:7a:41:af:7b:
11:77:d6:11:78:86:b1:4a:13:5c:52:07:a4:ef:01:f9:6f:6f:
e6:b4:70:fb:a8:f8:6d:88:a2:2c:70:c4:cf:87:3e:55:1f:f5:
c0:3e:37:f3:df:ec:1f:db:0a:96:6a:37:c6:a5:9b:af:b5:f0:
62:4c:de:8b:e1:99:8d:d6:6d:a6:a1:dd:35:cf:96:ed:9e:fc:
b9:23:89:bf:c4:49:d1:75:6a:29:ca:f6:65:44:9a:91:8b:ea:
b0:af:99:26:cb:ac:22:f2:1b:43:82:27:a2:3b:49:d8:64:1c:
b5:61:86:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:04 2026 by rpki-client