Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TwJ72ZaqulWLj8GvFvUmbEkUtXg.roa
File: TwJ72ZaqulWLj8GvFvUmbEkUtXg.roa (raw, json)
Hash identifier: Raw0cF2zUk9E6qFAoegzW2OoyXFGQOn1ZtCTV4GBixk=
Subject key identifier: 4F:02:7B:D9:96:AA:BA:55:8B:8F:C1:AF:16:F5:26:6C:49:14:B5:78
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A0C87BBEBA19F949395C5D85F5C7A70183
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TwJ72ZaqulWLj8GvFvUmbEkUtXg.roa
Signing time: Tue 22 Sep 2026 09:39:07 +0000
ROA not before: Tue 22 Sep 2026 09:39:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197354
IP address blocks: 45.95.96.0/24 maxlen: 24
45.95.98.0/24 maxlen: 24
194.62.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:7b:be:ba:19:f9:49:39:5c:5d:85:f5:c7:a7:01:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 22 09:39:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f027bd996aaba558b8fc1af16f5266c4914b578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:01:33:b3:bc:7f:c5:21:56:ed:3b:1a:ba:77:
4b:e1:02:17:6b:a3:fd:c3:b7:19:f2:d0:cc:48:a7:
51:35:e0:18:2c:1d:a3:8e:28:45:13:79:e8:06:09:
b2:36:5e:15:39:5f:ae:d9:8e:39:02:27:0c:7b:c5:
71:bd:da:23:1f:b5:c6:8e:74:32:b8:e6:8a:76:22:
19:23:1d:8d:9e:d6:f6:2d:7a:cb:14:6e:b3:65:10:
f8:89:5a:42:44:11:d9:ab:28:d6:c3:19:c1:1c:d6:
97:c5:ff:e6:71:0a:de:93:ba:b7:33:2a:bd:8e:97:
e9:19:63:42:52:a2:63:51:13:a7:d8:cf:64:f9:a2:
5b:9f:04:1f:9e:37:a6:4c:97:f0:57:99:37:97:ff:
cb:60:3a:fb:0c:b9:eb:77:19:39:e8:31:98:01:ac:
cb:88:1b:74:9d:7d:99:77:b7:af:4d:cd:8b:cf:c6:
31:db:69:35:68:4c:6a:ba:d3:93:79:b3:60:a2:9f:
6b:4a:e6:23:f4:69:3e:58:01:e9:a1:8d:70:e3:c5:
2f:59:ce:6a:19:59:8c:a3:71:d2:5e:aa:f6:71:b9:
e6:83:fa:7b:28:12:97:f7:ca:3d:48:6a:e0:35:b4:
41:c6:e1:f8:6a:aa:a7:2b:e0:c7:31:ff:92:ec:fd:
86:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:02:7B:D9:96:AA:BA:55:8B:8F:C1:AF:16:F5:26:6C:49:14:B5:78
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TwJ72ZaqulWLj8GvFvUmbEkUtXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.96.0/24
45.95.98.0/24
194.62.30.0/24
Signature Algorithm: sha256WithRSAEncryption
81:8e:d9:54:16:94:27:11:8e:ec:4e:8f:0e:15:2d:31:4e:81:
8d:58:ad:7f:de:c4:20:87:d0:ca:3f:26:d7:94:6d:39:b6:e6:
f9:be:90:07:84:7e:e7:7d:4e:5c:62:96:c4:2d:d7:41:62:23:
f8:4b:37:0f:fb:04:59:4a:30:e2:3a:84:ef:18:04:18:ff:b1:
d3:0e:80:92:21:cf:8a:3c:e9:cf:f5:0f:a1:17:0f:4a:03:70:
a8:c9:88:6c:a2:4a:a0:33:05:32:e3:7a:f7:65:14:7e:7b:36:
f7:e4:7d:5c:18:4f:19:8c:b5:9e:90:13:26:c4:38:a9:c5:4e:
8b:84:e0:1e:1c:14:b3:24:cc:e4:58:85:f7:41:62:3b:64:90:
31:74:d7:30:3f:32:56:cb:3b:70:55:fb:64:3e:53:92:5a:78:
ac:48:09:85:c9:f5:64:d4:12:5a:b8:66:5e:69:0e:0d:59:7e:
ce:8e:d2:3c:87:86:c8:5d:a8:44:59:ec:32:e2:45:9a:95:c4:
49:ee:d6:40:3e:5a:38:7f:df:78:18:0e:47:84:15:01:f6:e5:
64:6b:75:5d:4c:58:3f:5c:05:66:36:1c:0a:b4:34:4f:35:37:
f5:72:30:2c:5d:92:7a:d6:1c:55:aa:3e:10:71:ed:4e:99:6f:
64:42:e3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:33:30 2026 by rpki-client