Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TwCimoDJtl0WMBPC819WLMfq_qY.roa
File: TwCimoDJtl0WMBPC819WLMfq_qY.roa (raw, json)
Hash identifier: 2e992cY/eNjRRIPQK9HEi+D/kHiK48+sJFiDm7JWIIk=
Subject key identifier: 4F:00:A2:9A:80:C9:B6:5D:16:30:13:C2:F3:5F:56:2C:C7:EA:FE:A6
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A1CF6B79B551BB1A3FA07E9D6566B96972
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TwCimoDJtl0WMBPC819WLMfq_qY.roa
Signing time: Thu 12 Nov 2026 11:01:29 +0000
ROA not before: Thu 12 Nov 2026 11:01:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215607
IP address blocks: 37.202.201.0/24 maxlen: 24
151.243.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 15:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cf:6b:79:b5:51:bb:1a:3f:a0:7e:9d:65:66:b9:69:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Nov 12 11:01:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f00a29a80c9b65d163013c2f35f562cc7eafea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:42:19:7d:bc:10:d9:80:9c:2b:0b:0a:65:ad:
5d:7a:11:02:89:eb:17:f6:3e:6f:54:8c:e5:e8:62:
5f:fb:1a:a2:54:d0:ef:11:ac:58:29:bc:ff:51:39:
cb:f9:b9:f8:1b:6a:32:be:ae:6f:20:2b:0b:d5:a5:
0f:dc:e0:f2:5d:3d:68:3c:1b:97:03:f2:b0:36:9d:
02:c9:ed:1a:a7:6d:f0:9e:1e:5a:f8:a6:93:5d:2b:
ac:ed:e1:ba:b3:07:38:92:9c:4d:99:ef:7e:bb:f6:
14:3b:5b:9d:8e:6a:74:8b:56:38:5c:d0:f4:54:1c:
c8:2c:74:62:99:8d:28:63:ab:62:c6:25:1a:53:34:
5f:bd:5f:6d:b4:03:1c:6c:91:90:bb:ab:ab:a7:cf:
db:05:09:dc:99:5a:cc:fe:21:2e:2e:a2:9e:5b:61:
29:92:bf:14:ac:41:96:98:f1:57:e7:16:36:d3:00:
48:b2:bd:50:bd:47:2e:18:7e:a9:e2:65:2f:d4:ba:
84:56:c3:b6:13:f5:00:5b:ec:66:e6:54:78:0c:c1:
a3:bd:f8:37:26:36:b0:cc:7a:3e:1e:c5:09:aa:ca:
24:4c:7d:57:4b:01:74:f6:fb:21:27:0b:35:39:15:
4c:7f:4b:4a:e7:91:c5:e6:de:e4:e7:7b:09:28:56:
2a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:00:A2:9A:80:C9:B6:5D:16:30:13:C2:F3:5F:56:2C:C7:EA:FE:A6
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TwCimoDJtl0WMBPC819WLMfq_qY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.201.0/24
151.243.32.0/24
Signature Algorithm: sha256WithRSAEncryption
06:9d:ac:63:1c:b8:8c:39:2e:fe:c3:3c:71:20:d4:2f:5f:df:
f2:cb:3f:4d:59:80:70:42:08:2c:0d:30:e0:b4:ad:02:9a:9b:
c0:ad:45:5c:92:bc:8d:d9:19:0b:5f:69:91:23:61:d1:6b:1e:
db:30:9e:e5:1d:0f:55:f1:51:10:0e:f3:b0:41:2f:6e:bf:11:
1b:82:a0:9a:d5:de:ab:ca:8a:67:a8:b5:57:9a:ee:d9:2e:da:
49:1d:81:b7:93:48:6e:74:5c:1a:9c:7d:2b:8a:9a:3a:92:2c:
ce:7f:61:c1:95:50:a2:2a:04:fc:75:33:12:05:3b:8c:d6:23:
a6:2c:03:e6:55:34:9b:16:30:66:e2:0d:a7:65:07:12:0c:65:
de:60:fa:77:a8:9b:00:e9:83:df:d1:7e:36:35:5d:e6:6a:e6:
a8:1c:43:22:7c:73:ac:bc:62:28:61:0d:3b:90:9b:67:3d:ca:
1d:a6:36:13:fc:13:c0:4b:dd:87:8c:19:aa:9c:01:14:97:b2:
b2:7e:c4:ff:d4:ae:69:13:b8:5f:25:1c:ac:17:ee:e6:6c:b6:
04:99:0b:c4:2d:b9:4f:a5:9a:e1:b7:9d:e8:45:e8:db:4d:bd:
6d:54:56:4b:6a:32:6e:c4:8a:05:18:a8:08:bb:19:a7:fc:1d:
2f:2a:a1:da
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaHPa3m1UbsaP6B+nWVmuWlyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYxMTEyMTEwMTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjAwYTI5YTgwYzliNjVkMTYzMDEzYzJmMzVmNTYyY2M3ZWFmZWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkIZfbwQ2YCcKwsKZa1dehECiesX
9j5vVIzl6GJf+xqiVNDvEaxYKbz/UTnL+bn4G2oyvq5vICsL1aUP3ODyXT1oPBuX
A/KwNp0Cye0ap23wnh5a+KaTXSus7eG6swc4kpxNme9+u/YUO1udjmp0i1Y4XND0
VBzILHRimY0oY6tixiUaUzRfvV9ttAMcbJGQu6urp8/bBQncmVrM/iEuLqKeW2Ep
kr8UrEGWmPFX5xY20wBIsr1QvUcuGH6p4mUv1LqEVsO2E/UAW+xm5lR4DMGjvfg3
JjawzHo+HsUJqsokTH1XSwF09vshJws1ORVMf0tK55HF5t7k53sJKFYqHwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFE8AopqAybZdFjATwvNfVizH6v6mMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvVHdDaW1vREp0bDBXTUJQQzgxOVdMTWZxX3FZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJcrJAwQA
l/MgMA0GCSqGSIb3DQEBCwUAA4IBAQAGnaxjHLiMOS7+wzxxINQvX9/yyz9NWYBw
QggsDTDgtK0CmpvArUVckryN2RkLX2mRI2HRax7bMJ7lHQ9V8VEQDvOwQS9uvxEb
gqCa1d6ryopnqLVXmu7ZLtpJHYG3k0hudFwanH0ripo6kizOf2HBlVCiKgT8dTMS
BTuM1iOmLAPmVTSbFjBm4g2nZQcSDGXeYPp3qJsA6YPf0X42NV3mauaoHEMifHOs
vGIoYQ07kJtnPcodpjYT/BPAS92HjBmqnAEUl7KyfsT/1K5pE7hfJRysF+7mbLYE
mQvELblPpZrht53oRejbTb1tVFZLajJuxIoFGKgIuxmn/B0vKqHa
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:34:44 2026 by rpki-client