Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/ttDMX4fafvORC1-lIX4OffPlWsQ.roa
File: ttDMX4fafvORC1-lIX4OffPlWsQ.roa (raw, json)
Hash identifier: tfjapnp3EYhF6v8f6HxzD+g7Tygri7k5icFUzHa8604=
Subject key identifier: B6:D0:CC:5F:87:DA:7E:F3:91:0B:5F:A5:21:7E:0E:7D:F3:E5:5A:C4
Certificate issuer: /CN=02d4f3397e7266fbfa820290b97509d4df907852
Certificate serial: 019F236904A90B5F14082FD7184491FFB181
Authority key identifier: 02:D4:F3:39:7E:72:66:FB:FA:82:02:90:B9:75:09:D4:DF:90:78:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/ttDMX4fafvORC1-lIX4OffPlWsQ.roa
Signing time: Thu 02 Jul 2026 15:18:32 +0000
ROA not before: Thu 02 Jul 2026 15:18:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198717
IP address blocks: 37.233.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:04:a9:0b:5f:14:08:2f:d7:18:44:91:ff:b1:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d4f3397e7266fbfa820290b97509d4df907852
Validity
Not Before: Jul 2 15:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b6d0cc5f87da7ef3910b5fa5217e0e7df3e55ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3c:19:38:37:9d:e1:69:b4:d4:f4:90:13:17:
2a:b7:8e:5d:9c:c7:f4:d7:2e:8d:0a:47:f7:72:44:
76:1a:60:5e:3a:95:34:e9:1e:34:da:89:64:de:a5:
17:79:89:ef:6a:87:97:4f:81:a0:59:db:47:7d:29:
37:d6:37:f0:d1:8d:e9:56:f9:34:38:06:8a:4d:d4:
e2:9f:aa:c7:ef:71:d3:6b:5f:75:1d:ae:11:2c:c1:
99:86:68:83:29:96:94:a8:49:78:c8:7e:c9:55:0a:
5e:6e:f0:5c:80:36:73:05:06:c6:21:42:4c:f9:da:
70:c8:83:49:db:b0:df:44:1b:7a:04:7d:e4:b6:aa:
4b:43:5c:78:85:24:92:95:ac:d5:fc:94:c7:c6:05:
ec:9e:b2:25:71:3c:cb:f1:38:e5:70:4a:45:d0:d1:
04:b1:d9:5b:a8:5d:c5:07:8a:bc:0d:81:fd:f8:2c:
d1:08:1e:f1:ce:32:73:26:36:29:9e:c9:d0:fd:92:
ff:0a:b2:b4:34:ea:42:60:3f:a2:42:a8:a9:13:3b:
94:ce:2e:99:66:1f:02:ae:bc:fd:a1:18:d8:8a:f1:
a5:b2:b5:e3:27:a6:23:62:e9:e7:15:1e:be:1a:86:
de:3d:8e:4a:fb:cf:ff:e4:5d:f7:d8:ba:97:52:88:
4b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D0:CC:5F:87:DA:7E:F3:91:0B:5F:A5:21:7E:0E:7D:F3:E5:5A:C4
X509v3 Authority Key Identifier:
keyid:02:D4:F3:39:7E:72:66:FB:FA:82:02:90:B9:75:09:D4:DF:90:78:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/ttDMX4fafvORC1-lIX4OffPlWsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.233.96.0/20
Signature Algorithm: sha256WithRSAEncryption
76:86:f1:3e:d5:64:b9:17:5e:aa:34:ce:de:2f:5b:f8:2b:0e:
98:4e:b0:2f:f6:45:22:7f:2a:0b:a9:ce:ad:f9:15:67:df:64:
42:bd:0c:b6:37:df:b2:6e:f3:5a:f9:61:3f:4c:f5:d8:89:a7:
0b:79:a7:4f:d8:57:cc:8a:b0:04:be:78:39:28:c1:9f:95:72:
db:ce:dd:d7:33:00:78:21:87:a0:ee:7c:cb:26:50:2d:98:5a:
67:a1:be:67:20:a0:6c:3c:aa:96:8c:a7:44:f1:32:31:55:20:
7c:10:eb:22:54:87:18:14:26:7a:43:7a:fb:97:75:32:ce:a8:
b2:b8:d2:03:6f:4e:9b:a0:c8:cf:4a:be:22:87:63:6c:93:2d:
20:87:95:9c:d8:ca:44:29:8a:78:4c:f8:dc:68:5b:cc:6e:29:
af:f7:5f:4e:ae:b2:5b:53:ce:23:9f:2a:d9:f6:28:c7:94:22:
48:f7:25:b4:94:5e:17:b4:d4:ed:ca:f4:91:a4:75:60:d1:3e:
c4:d3:54:9c:8c:bb:a5:ca:81:db:4f:b4:c6:39:2c:02:8c:b2:
e8:dc:3f:55:c5:46:5b:a1:bd:62:18:5a:bf:e1:44:0d:4c:44:
fb:1a:de:3b:de:a9:ae:de:fd:69:7e:27:18:76:72:ed:07:75:
3e:d3:1f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:28:14 2026 by rpki-client