Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/twp4Qc_IfaZm5YE2R9dG6fqSpJ4.roa
File: twp4Qc_IfaZm5YE2R9dG6fqSpJ4.roa (raw, json)
Hash identifier: KryWaKXhp+XF5Bj82qDMC0PiQYEMyEcKF+PGbAmtZ7Y=
Subject key identifier: B7:0A:78:41:CF:C8:7D:A6:66:E5:81:36:47:D7:46:E9:FA:92:A4:9E
Certificate issuer: /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Certificate serial: 019D0135FFACC2E03DDE7E9703CABD9D97B1
Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/twp4Qc_IfaZm5YE2R9dG6fqSpJ4.roa
Signing time: Wed 18 Mar 2026 13:50:09 +0000
ROA not before: Wed 18 Mar 2026 13:50:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203020
IP address blocks: 185.232.45.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:01:35:ff:ac:c2:e0:3d:de:7e:97:03:ca:bd:9d:97:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Validity
Not Before: Mar 18 13:50:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b70a7841cfc87da666e5813647d746e9fa92a49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:cc:05:91:20:3f:63:73:06:f4:76:2b:cf:14:
e2:96:b4:59:c5:d4:7c:d3:32:70:e3:bd:a2:56:35:
1a:71:9f:3a:2c:3d:45:48:a6:6f:e0:8c:d0:b7:7b:
91:5b:55:c7:d1:f2:b1:66:01:76:21:60:9b:38:60:
ff:12:cf:01:f9:63:df:a2:e7:27:c9:8d:9e:f2:19:
2b:7a:91:85:87:19:a8:56:40:67:5a:95:7a:0f:4b:
da:e8:aa:bf:74:a2:6d:09:e3:97:42:8f:b8:17:16:
3f:98:7e:71:7f:22:15:3b:83:1f:45:50:4b:f3:8d:
3e:41:c4:39:15:73:bd:35:29:f7:a2:5b:56:a9:43:
f9:83:3f:3d:eb:8a:3b:55:cd:78:6e:bb:84:aa:ab:
4a:75:61:b8:09:1b:4e:9f:c3:aa:63:23:60:bc:bf:
78:a9:0c:dd:1e:0d:3d:46:c7:2c:70:18:e7:60:47:
d9:4b:ed:41:09:16:58:4c:af:e3:fc:b7:2d:4c:f1:
c9:02:32:65:7f:aa:10:15:fc:fe:ae:c8:48:af:82:
99:85:4e:f9:09:62:af:db:81:71:2d:17:32:c4:2a:
b9:0f:44:54:bf:c9:ad:ca:2b:cc:f7:47:58:62:f9:
20:c4:cb:74:99:4c:51:8b:c6:b8:2b:26:8f:13:b4:
e3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:0A:78:41:CF:C8:7D:A6:66:E5:81:36:47:D7:46:E9:FA:92:A4:9E
X509v3 Authority Key Identifier:
keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/twp4Qc_IfaZm5YE2R9dG6fqSpJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.45.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:16:5d:bf:0e:1f:71:04:17:c5:1f:5f:5a:5a:cc:33:01:7d:
46:da:a2:c3:23:b3:10:e1:a4:46:12:d1:9f:37:17:ed:be:02:
0c:80:a9:8a:fa:c6:95:08:3e:24:a9:7d:6e:59:fe:47:fa:63:
0b:21:6b:6b:15:03:b1:c6:7c:1d:93:f9:92:61:75:63:5c:bb:
5d:b8:e0:15:7d:c7:37:cb:6c:fd:69:67:1d:16:c3:80:bf:a4:
0a:36:35:79:ba:1e:c8:e7:96:cf:13:7b:6c:c0:1e:c4:fa:b7:
26:1d:70:ac:5a:2c:c2:b9:6b:d4:42:37:2d:42:82:2e:12:4e:
a7:17:7a:df:65:24:1c:72:48:8c:fe:cf:57:a3:89:cb:3f:6e:
b8:11:07:58:73:1f:5b:eb:c6:b7:95:07:45:24:06:63:16:76:
cb:f5:b7:74:9b:bb:a6:8c:4e:d1:06:f2:e9:a5:e9:b2:53:36:
46:ca:e8:3c:af:42:0e:37:d2:9e:e3:5c:4d:f9:62:ad:d4:f6:
4e:6c:b5:09:da:e0:9c:a1:78:1f:60:1a:29:e2:7c:87:6e:ac:
54:52:c4:b7:2b:25:9d:98:80:17:a7:5f:7c:81:66:35:0a:0e:
62:31:f4:78:eb:2b:f2:0c:e0:7f:32:ac:18:35:71:fd:3b:d1:
52:61:11:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:12:29 2026 by rpki-client