Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/ttIN0dK-vkiZEEVxS7zN-l-YIWU.roa
File: ttIN0dK-vkiZEEVxS7zN-l-YIWU.roa (raw, json)
Hash identifier: pmsUMrDunD1RvHFcRwlzCPpXmeKSZLU5QXkWjwxD7RM=
Subject key identifier: B6:D2:0D:D1:D2:BE:BE:48:99:10:45:71:4B:BC:CD:FA:5F:98:21:65
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 019EF49AA3B7D5A1003C65824A7EF77DD8AC
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/ttIN0dK-vkiZEEVxS7zN-l-YIWU.roa
Signing time: Tue 23 Jun 2026 13:10:35 +0000
ROA not before: Tue 23 Jun 2026 13:10:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42385
IP address blocks: 193.232.84.0/24 maxlen: 24
194.85.109.0/24 maxlen: 24
194.190.122.0/23 maxlen: 23
194.190.122.0/24 maxlen: 24
2001:67c:1008::/48 maxlen: 48
2001:67c:1447::/48 maxlen: 48
2a09:bd00:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f4:9a:a3:b7:d5:a1:00:3c:65:82:4a:7e:f7:7d:d8:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Jun 23 13:10:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b6d20dd1d2bebe48991045714bbccdfa5f982165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:18:68:a1:5b:6c:e8:bb:a8:3a:6b:70:a2:c7:
97:24:01:07:a2:82:be:4d:a9:08:ed:98:66:75:ee:
9d:70:e5:60:64:2a:15:fa:5c:34:2a:35:88:40:24:
36:68:48:03:64:37:63:a6:15:e8:1a:6c:ae:4b:df:
bd:ae:26:e8:cd:5d:63:ad:7a:12:c6:1c:8f:ac:47:
f1:d0:83:93:ba:7d:a3:6d:a8:3d:75:7f:63:9f:c2:
6b:6d:94:fa:f2:0b:9a:e0:08:06:e1:36:30:49:d5:
c4:98:17:72:8b:e5:75:58:3a:9e:3d:c4:1e:28:93:
50:62:49:35:df:91:3f:5b:47:40:8a:1c:37:cd:06:
16:24:53:9f:71:05:6a:fe:e2:c9:79:54:58:0b:83:
c0:87:ff:8a:53:de:5d:6b:fc:2b:60:2b:cb:15:1a:
d9:7b:39:33:6c:3c:1f:b5:f2:e6:17:7d:0d:95:00:
44:78:b5:16:f9:8c:c0:8a:f8:c8:5e:80:38:be:98:
4e:25:bf:6c:00:13:cc:ed:3c:01:3d:a4:a2:a7:5d:
c1:f8:8b:30:48:ae:33:7c:26:0f:18:ee:90:28:5e:
da:8b:93:fb:e4:50:24:15:11:7c:5d:c6:8f:33:f3:
d8:15:12:20:c2:fd:af:68:b1:cd:34:48:6b:48:21:
e5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D2:0D:D1:D2:BE:BE:48:99:10:45:71:4B:BC:CD:FA:5F:98:21:65
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/ttIN0dK-vkiZEEVxS7zN-l-YIWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.84.0/24
194.85.109.0/24
194.190.122.0/23
IPv6:
2001:67c:1008::/48
2001:67c:1447::/48
2a09:bd00:1::/48
Signature Algorithm: sha256WithRSAEncryption
b6:b0:56:b9:7b:fc:1f:33:ac:dc:55:eb:a6:04:2d:e7:a1:4e:
ec:bf:68:80:05:ba:25:e6:61:00:a7:8f:d5:01:8c:24:5d:46:
5f:2a:6e:6a:d7:7a:d6:b5:d8:89:c6:82:77:2b:29:07:a1:d1:
cf:74:1f:b5:4f:c2:5a:eb:52:b7:2e:13:db:7c:36:a5:46:01:
d8:0b:21:a9:4e:d9:97:32:b7:92:97:af:c0:d0:1b:43:b0:9a:
64:99:7e:85:0b:bb:86:3f:3e:a1:30:f0:65:e8:46:05:09:cc:
43:ab:d4:c7:e6:78:56:5d:72:23:eb:1b:f7:13:f9:7a:98:6a:
c7:28:06:c0:1d:6c:36:52:77:ec:ae:26:b8:08:e1:db:b1:8b:
f6:2b:ac:72:5c:5d:0d:80:12:7e:08:62:63:b6:0a:8c:91:ba:
2e:9b:94:87:ae:8f:61:d4:67:dd:87:a8:7d:2f:08:f6:53:1f:
6e:7a:b1:88:4c:07:d4:7d:c5:ce:73:86:7d:d0:21:d5:a1:a0:
95:cd:56:af:d2:7c:d0:85:e4:7f:90:a7:76:46:4d:9f:16:11:
47:c0:0b:54:16:92:1b:fb:64:7c:bd:b8:e7:f5:a5:2f:f0:b8:
db:a8:3e:96:83:14:b5:43:98:9a:45:6d:f0:c7:57:95:fd:b5:
75:42:6d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:21:50 2026 by rpki-client