Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/tTPh5VbObpIPu9hwoJCECaKwwiw.roa
File: tTPh5VbObpIPu9hwoJCECaKwwiw.roa (raw, json)
Hash identifier: dYyxfNZkEsF1kr9tnTIeBCzzORoYq/sB7YlYU1pD7cI=
Subject key identifier: B5:33:E1:E5:56:CE:6E:92:0F:BB:D8:70:A0:90:84:09:A2:B0:C2:2C
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F91F0F30AC6143C862E0DACCE0FB1ACA4
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/tTPh5VbObpIPu9hwoJCECaKwwiw.roa
Signing time: Fri 24 Jul 2026 02:25:14 +0000
ROA not before: Fri 24 Jul 2026 02:25:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147208
IP address blocks: 82.109.102.0/24 maxlen: 24
82.109.172.0/24 maxlen: 24
87.86.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:f0:f3:0a:c6:14:3c:86:2e:0d:ac:ce:0f:b1:ac:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 24 02:25:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b533e1e556ce6e920fbbd870a0908409a2b0c22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d6:4d:96:df:ff:98:e5:08:0c:c4:89:e1:94:
63:c9:5a:c9:18:77:ce:6e:e2:0e:32:69:a8:82:74:
37:1c:9a:f5:8d:be:cc:11:ec:01:8a:8a:68:a7:3c:
31:81:c0:66:43:48:73:01:5b:c7:cc:31:ee:fa:fe:
49:4d:c3:e1:99:42:8b:90:9e:4b:c6:e3:dd:3c:5c:
72:2e:f9:33:a9:42:92:9f:f8:58:62:ae:95:b6:88:
93:40:05:ba:4c:09:e5:43:68:62:0b:6d:d4:73:8c:
5f:21:eb:7b:43:e1:28:b0:34:d3:e5:9a:a3:39:b4:
9e:19:79:8a:18:00:86:2a:53:52:81:0a:f1:8f:45:
49:9a:e3:23:3b:ea:a3:7d:92:ef:41:32:37:3e:e3:
f3:21:10:2e:cf:86:32:54:30:81:f8:df:cf:3d:7e:
7c:f4:86:3d:df:25:cb:b3:ed:7b:e2:7d:79:63:4a:
d4:5a:28:cd:f5:49:66:e0:72:67:a4:62:4c:4b:69:
71:e7:9e:79:57:0e:a8:84:27:a9:7f:3d:de:d9:19:
7f:b7:70:a2:66:47:03:5e:a4:85:b8:57:5e:bb:0b:
5a:54:b9:15:e8:b3:14:d0:bc:e4:c3:34:83:55:0b:
d2:09:cd:37:5e:3e:54:81:b2:a0:1f:0e:f6:45:67:
52:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:33:E1:E5:56:CE:6E:92:0F:BB:D8:70:A0:90:84:09:A2:B0:C2:2C
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/tTPh5VbObpIPu9hwoJCECaKwwiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.102.0/24
82.109.172.0/24
87.86.91.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:2f:fb:e8:6d:27:03:36:3a:24:eb:47:45:0d:bf:2e:0c:1c:
8b:49:49:fb:d3:5a:8a:f9:4f:fb:cb:e8:1d:81:c7:73:b5:40:
60:8d:cc:41:32:7e:4d:79:79:89:c5:34:a5:23:27:cb:2b:ec:
17:4d:10:81:6c:88:6e:22:19:65:ad:ad:f0:18:5b:e9:9f:db:
3e:51:60:34:e3:c1:2f:31:90:93:ba:00:73:e0:bd:9d:24:41:
a8:c5:c9:e4:3c:a6:c6:46:03:8c:3c:55:d1:ae:d6:64:21:78:
59:61:19:5c:76:20:f4:2d:de:d1:68:ba:cf:9d:29:60:ca:a2:
27:16:87:2c:bc:9b:83:3f:dc:c6:30:88:ae:ac:7e:1c:69:7a:
ad:bc:e6:12:a6:6d:ec:cb:8f:26:bc:4b:86:7a:98:3e:06:4b:
66:50:9b:e5:8f:85:ea:f9:3c:3f:21:e1:be:f4:92:37:dd:13:
d6:d6:59:8d:cf:78:f1:7a:e2:08:c6:d0:41:bf:37:0b:57:ba:
61:ae:31:bd:8f:4e:53:40:16:bf:8b:82:4b:57:96:ad:f9:d2:
70:a3:54:23:2e:89:98:63:40:60:c9:56:ad:8b:65:41:cd:a6:
91:ae:70:f6:30:e3:e2:27:ca:f2:25:30:e6:85:07:7f:a4:26:
10:40:4a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:16:59 2026 by rpki-client