Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/TjjfWTR1Zt0U-pEZhnkWsSwhts4.roa
File: TjjfWTR1Zt0U-pEZhnkWsSwhts4.roa (raw, json)
Hash identifier: Gw7+X8qfGcCpJkbj3rh5uUG5cVsxHGtWxRFaTejyFa4=
Subject key identifier: 4E:38:DF:59:34:75:66:DD:14:FA:91:19:86:79:16:B1:2C:21:B6:CE
Certificate issuer: /CN=5b7747fb1596ec1d081867e5e3d2a2b873848635
Certificate serial: 019F2368D897C88DE526D5640549A4302468
Authority key identifier: 5B:77:47:FB:15:96:EC:1D:08:18:67:E5:E3:D2:A2:B8:73:84:86:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3dH-xWW7B0IGGfl49KiuHOEhjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/TjjfWTR1Zt0U-pEZhnkWsSwhts4.roa
Signing time: Thu 02 Jul 2026 15:18:21 +0000
ROA not before: Thu 02 Jul 2026 15:18:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203703
IP address blocks: 192.100.96.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/W3dH-xWW7B0IGGfl49KiuHOEhjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/W3dH-xWW7B0IGGfl49KiuHOEhjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/W3dH-xWW7B0IGGfl49KiuHOEhjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d8:97:c8:8d:e5:26:d5:64:05:49:a4:30:24:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7747fb1596ec1d081867e5e3d2a2b873848635
Validity
Not Before: Jul 2 15:18:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e38df59347566dd14fa9119867916b12c21b6ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8f:de:60:e5:64:20:d9:b2:39:d6:10:15:d7:
70:50:bf:fc:f3:7a:14:1d:e3:9b:36:cb:43:f2:17:
9d:cc:20:7e:fa:90:c4:53:0f:3a:4f:e6:c8:40:6c:
a0:18:c0:d9:25:7c:3d:41:ce:75:c0:d6:61:6d:e3:
68:29:83:74:4f:c3:5e:a0:dd:97:f7:d0:90:1a:66:
36:e1:8e:54:19:8d:84:90:3d:65:c0:16:a8:0d:06:
9c:55:c9:44:72:87:80:e4:cb:a6:4c:15:41:ee:dd:
7f:dc:ca:62:68:d7:cc:18:37:b1:92:ee:ed:3a:99:
79:65:30:d4:23:1e:a7:57:20:a6:a9:d2:3e:93:42:
aa:9d:54:bc:99:4f:b7:3d:2c:63:62:91:9a:27:b4:
d3:1a:3d:5c:7c:95:87:ed:33:fb:dd:1b:0b:4a:09:
1b:10:d1:70:21:af:fd:3d:a6:f7:09:83:ad:9b:c9:
a7:36:dc:5d:9c:96:db:9e:1f:4c:76:9e:fc:00:5e:
ba:ed:7b:ba:48:1f:61:53:3b:a5:66:48:62:9e:91:
a1:df:b0:4d:c2:fe:8b:d5:32:ad:44:6e:5e:5e:33:
af:e7:bd:c4:a8:42:77:aa:7b:0e:ae:8b:c4:ab:3f:
4f:6d:3e:64:c4:8c:f2:a9:3e:05:e9:54:82:9d:a3:
66:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:38:DF:59:34:75:66:DD:14:FA:91:19:86:79:16:B1:2C:21:B6:CE
X509v3 Authority Key Identifier:
keyid:5B:77:47:FB:15:96:EC:1D:08:18:67:E5:E3:D2:A2:B8:73:84:86:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3dH-xWW7B0IGGfl49KiuHOEhjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/TjjfWTR1Zt0U-pEZhnkWsSwhts4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/W3dH-xWW7B0IGGfl49KiuHOEhjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.100.96.0/23
Signature Algorithm: sha256WithRSAEncryption
74:00:df:e7:7a:bf:e6:22:5d:24:fa:91:57:ed:9a:cc:80:bb:
49:de:59:00:85:3e:77:b2:13:7b:55:92:33:b0:85:d5:a8:70:
8c:d6:44:1f:7c:74:a0:f9:85:35:dc:65:df:41:95:4e:1e:33:
b1:c5:f7:e0:b3:9d:44:f3:28:7f:50:b6:97:67:bb:86:1a:e9:
6d:e7:b2:c1:3c:b0:30:64:b6:ba:ed:e7:1f:73:d9:94:12:f6:
3b:9f:02:20:1e:5b:e7:97:67:a4:65:5a:48:d1:d4:d7:14:2f:
c7:68:e3:4c:89:c1:89:81:fa:f8:34:fb:b6:f2:a5:c9:6f:87:
53:11:31:8b:1c:b4:a5:d3:88:1e:23:c8:2b:39:b4:f7:28:e6:
f2:2d:82:15:5e:37:7a:5b:f8:4b:d1:4b:1b:d5:6d:90:b0:39:
44:ca:2c:09:f5:de:88:d4:27:da:68:ea:a1:13:b3:91:bb:7b:
d0:af:0e:80:dd:71:b0:f3:6a:b7:aa:ab:c7:3c:c5:81:e3:7c:
c4:98:eb:77:bc:c5:58:59:27:93:d3:83:58:93:a4:96:d5:df:
b2:46:b2:05:93:3e:7c:b1:90:44:fd:cd:52:ad:ad:22:2f:5d:
95:e5:03:dd:6c:c3:84:99:98:d9:40:0a:e4:ad:de:45:a5:80:
dc:ba:e7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:05:51 2026 by rpki-client