Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/u1twKMliTmOOofk7S5b_JmE32QM.roa
File: u1twKMliTmOOofk7S5b_JmE32QM.roa (raw, json)
Hash identifier: YWILxFaDWAVRhnQigHWpWfe9/0YdhpATbHUYSduVmYc=
Subject key identifier: BB:5B:70:28:C9:62:4E:63:8E:A1:F9:3B:4B:96:FF:26:61:37:D9:03
Certificate issuer: /CN=045b8df44e9e90b2dc803cd43415242a4db38e7f
Certificate serial: 019F2368D3E6C5D5A349AC5A074E145468CF
Authority key identifier: 04:5B:8D:F4:4E:9E:90:B2:DC:80:3C:D4:34:15:24:2A:4D:B3:8E:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFuN9E6ekLLcgDzUNBUkKk2zjn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/u1twKMliTmOOofk7S5b_JmE32QM.roa
Signing time: Thu 02 Jul 2026 15:18:20 +0000
ROA not before: Thu 02 Jul 2026 15:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212778
IP address blocks: 145.87.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/BFuN9E6ekLLcgDzUNBUkKk2zjn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/BFuN9E6ekLLcgDzUNBUkKk2zjn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFuN9E6ekLLcgDzUNBUkKk2zjn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d3:e6:c5:d5:a3:49:ac:5a:07:4e:14:54:68:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045b8df44e9e90b2dc803cd43415242a4db38e7f
Validity
Not Before: Jul 2 15:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb5b7028c9624e638ea1f93b4b96ff266137d903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:05:bf:74:3c:e6:a6:ab:e6:42:2b:c3:33:26:
85:58:63:ab:fe:4b:fc:0a:b7:e8:18:29:87:90:5c:
1c:23:e1:59:14:60:da:05:3a:ef:dd:4c:46:43:8f:
e1:a4:5c:ee:c8:60:bd:fe:8c:b4:0c:5b:cc:9b:b9:
1e:62:03:7a:ea:ff:d9:5f:8a:ab:32:28:7c:66:e9:
e8:85:9c:03:cd:30:19:4c:d8:78:c3:48:9d:a8:75:
2d:91:a0:7f:ef:a7:f6:b5:27:e0:b0:51:43:1d:07:
77:7f:2d:5e:c6:db:c7:62:e6:90:4b:13:4c:9b:1f:
79:0e:26:c5:4d:d2:b3:b1:ac:a9:0f:0f:10:0c:71:
61:cb:56:c0:75:5d:f4:88:d0:a5:0b:11:5c:7b:e8:
ce:f3:20:4d:33:f4:5d:a8:33:9f:66:c6:75:41:9a:
e6:51:f9:5d:88:44:03:45:c4:80:2b:5b:9d:90:41:
e9:71:25:25:e8:d9:7d:0a:75:a1:96:1f:4b:98:00:
b4:0a:30:cd:5e:a3:ed:55:9d:a7:a7:b4:98:10:00:
f4:d6:63:b9:b7:2d:b6:19:4d:45:fe:da:67:2d:ef:
a6:c1:76:53:d4:a4:e1:eb:41:2a:f7:8a:bd:a0:b7:
37:66:79:4e:18:69:97:89:f2:ef:84:1f:a3:63:1d:
36:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5B:70:28:C9:62:4E:63:8E:A1:F9:3B:4B:96:FF:26:61:37:D9:03
X509v3 Authority Key Identifier:
keyid:04:5B:8D:F4:4E:9E:90:B2:DC:80:3C:D4:34:15:24:2A:4D:B3:8E:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFuN9E6ekLLcgDzUNBUkKk2zjn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/u1twKMliTmOOofk7S5b_JmE32QM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/BFuN9E6ekLLcgDzUNBUkKk2zjn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.87.0.0/22
Signature Algorithm: sha256WithRSAEncryption
28:44:da:62:64:f1:21:85:4d:1b:36:19:cf:2a:22:14:63:57:
bd:bc:f3:fe:3f:f0:1a:28:76:3b:ac:1b:42:d5:14:87:52:d6:
b1:be:c9:dd:01:46:33:ad:e5:13:24:ea:b5:7b:f1:3b:be:9a:
ba:f2:f3:ec:10:7b:f3:d6:14:4b:7b:18:85:ec:9b:11:f9:b3:
27:b7:9f:e7:15:c5:ed:04:94:0f:b2:0b:d9:9b:7b:8c:1c:9a:
08:9b:75:47:12:7e:4b:21:cc:61:d5:75:21:ad:2b:f9:eb:72:
e5:56:89:8a:d8:94:04:c8:9f:7b:c2:dd:2f:a3:a4:6d:53:15:
6b:8d:9c:45:02:f3:62:58:c5:38:f4:83:ee:a7:aa:38:bd:b5:
5e:fe:d2:55:d3:48:e9:b8:6d:12:6f:ee:04:a6:6c:5c:63:4e:
67:f0:36:31:7d:24:71:70:d4:10:e1:e4:79:64:25:12:7e:7f:
92:c3:c1:d5:cc:13:0c:b8:d0:00:39:d9:7a:a4:27:db:94:bd:
e7:db:79:e1:2c:0a:9f:9b:d5:aa:77:0a:b5:84:0d:80:dc:8c:
19:31:8e:4a:e5:b9:31:f3:b8:6d:c4:b4:ef:dd:cf:51:e4:9d:
3b:28:15:a6:9f:29:71:0b:4e:e5:8e:f1:99:9b:6b:c7:1c:29:
e5:6a:76:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:30:24 2026 by rpki-client