Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/TWvWCjfcJCEG41QFPQLAhs2JObQ.roa
File: TWvWCjfcJCEG41QFPQLAhs2JObQ.roa (raw, json)
Hash identifier: DqNFCgXIxkHeccY32PWEnzcNOaZdd4sjlG37z/rzOVQ=
Subject key identifier: 4D:6B:D6:0A:37:DC:24:21:06:E3:54:05:3D:02:C0:86:CD:89:39:B4
Certificate issuer: /CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Certificate serial: 019DDD19CF082E1C7D85183FED7A5CB90FE4
Authority key identifier: 13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/TWvWCjfcJCEG41QFPQLAhs2JObQ.roa
Signing time: Thu 30 Apr 2026 06:35:49 +0000
ROA not before: Thu 30 Apr 2026 06:35:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 45.80.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:19:cf:08:2e:1c:7d:85:18:3f:ed:7a:5c:b9:0f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Validity
Not Before: Apr 30 06:35:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d6bd60a37dc242106e354053d02c086cd8939b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:70:bc:be:c5:5d:3e:6e:58:6a:b8:aa:5f:8d:
94:ae:76:a6:82:1c:a1:90:eb:2d:0f:08:f2:12:7c:
66:95:03:d5:4c:c2:41:8a:bb:ca:a9:a7:a0:8f:bc:
88:16:64:0a:a6:7b:a3:fa:9a:5c:6a:97:90:9b:a5:
99:f4:d3:63:f0:a6:b5:af:3b:80:a5:d8:04:98:8d:
9a:ed:c3:69:11:cf:84:e2:68:76:23:a5:bc:32:a9:
75:91:55:0d:cb:e9:b0:ce:1e:28:1c:8e:eb:ec:ba:
58:c0:81:36:ab:de:ec:f1:1e:6f:89:57:24:51:19:
07:b6:f7:fd:fb:02:87:12:f6:7b:8b:b9:25:92:36:
8b:e3:fc:e3:e2:89:c1:9b:47:de:11:af:a5:23:af:
c3:c2:6d:0c:41:41:93:17:59:16:32:18:8e:cb:c0:
2a:ad:d1:3c:34:34:db:f1:a7:99:04:90:f7:4f:9d:
80:9b:ed:fd:b3:e7:fe:f6:d6:42:de:6f:56:12:bb:
8c:e6:d0:58:3e:68:88:02:43:b3:d2:90:06:6e:80:
2e:75:77:6f:a6:3d:f0:d6:7a:e0:c6:ef:28:e2:34:
7b:a5:7a:a2:11:1b:f4:24:a3:67:67:cb:38:23:02:
1d:d6:42:43:37:ae:89:64:32:08:a2:49:26:c0:d2:
32:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6B:D6:0A:37:DC:24:21:06:E3:54:05:3D:02:C0:86:CD:89:39:B4
X509v3 Authority Key Identifier:
keyid:13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/TWvWCjfcJCEG41QFPQLAhs2JObQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.48.0/24
Signature Algorithm: sha256WithRSAEncryption
23:1e:20:a8:22:25:f8:8a:14:cd:83:87:76:51:eb:b8:1f:56:
9d:47:93:83:db:fc:88:3e:fc:fa:2d:5a:94:c9:da:0c:b4:38:
46:01:d0:e4:fe:2c:82:07:c0:e7:19:d4:79:0a:97:f9:b4:46:
19:f4:8a:5c:2d:52:4c:a9:59:87:26:25:60:a1:ef:83:36:09:
72:e8:98:2e:a4:f0:ef:7a:ce:d8:b7:59:49:2a:e7:7a:94:ee:
bc:fb:60:62:70:49:7c:06:ad:ba:9e:cf:55:17:c6:f9:21:db:
85:6d:40:a9:6f:46:a6:5e:7f:d0:4b:71:4e:ca:48:00:88:a8:
88:c5:53:c0:09:17:68:3a:e1:1f:da:1b:86:cd:71:a9:5a:8a:
fd:c4:b6:cf:1a:31:9e:e7:f3:82:49:ed:9d:0a:5f:70:36:15:
7b:05:c9:ec:a6:0a:e1:e8:74:b8:f0:a9:d3:51:44:04:8e:00:
56:b1:a5:3c:91:a4:b1:a7:12:dd:ca:32:34:1b:f8:70:e7:f6:
e3:3b:2d:e1:a3:7d:17:9a:ed:6f:b4:4d:49:36:58:95:96:6c:
36:15:a1:98:b3:f9:0a:31:6a:87:78:75:b2:b0:07:52:8c:e4:
40:26:0b:6e:4a:56:0d:a0:b4:66:7d:a7:98:64:5e:e7:d8:7d:
26:da:30:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:15:58 2026 by rpki-client