Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/THWvySghUHmtrptMQRBn5rEysj4.roa
File: THWvySghUHmtrptMQRBn5rEysj4.roa (raw, json)
Hash identifier: D9lZw9BCfeYu5a1lRT+qhCzudaLFTH5A4DFPYnADY6o=
Subject key identifier: 4C:75:AF:C9:28:21:50:79:AD:AE:9B:4C:41:10:67:E6:B1:32:B2:3E
Certificate issuer: /CN=8f0a3df8838cf34e5fa639c86dd0fd58da390fca
Certificate serial: 019F2368E7B20848B4BE6EE45506AB3AF70B
Authority key identifier: 8F:0A:3D:F8:83:8C:F3:4E:5F:A6:39:C8:6D:D0:FD:58:DA:39:0F:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwo9-IOM805fpjnIbdD9WNo5D8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/THWvySghUHmtrptMQRBn5rEysj4.roa
Signing time: Thu 02 Jul 2026 15:18:25 +0000
ROA not before: Thu 02 Jul 2026 15:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31027
IP address blocks: 37.25.64.0/21 maxlen: 21
185.19.232.0/22 maxlen: 22
185.29.168.0/22 maxlen: 22
213.146.64.0/19 maxlen: 19
2a00:4960::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/jwo9-IOM805fpjnIbdD9WNo5D8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/jwo9-IOM805fpjnIbdD9WNo5D8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwo9-IOM805fpjnIbdD9WNo5D8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e7:b2:08:48:b4:be:6e:e4:55:06:ab:3a:f7:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0a3df8838cf34e5fa639c86dd0fd58da390fca
Validity
Not Before: Jul 2 15:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c75afc928215079adae9b4c411067e6b132b23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3e:93:a8:77:34:98:40:f4:e0:46:03:03:e4:
5a:1b:20:d2:2a:c8:99:fe:5e:1b:72:0f:13:39:15:
e3:8f:5c:5a:6c:5a:4d:fa:78:50:22:32:ec:26:3a:
f7:11:72:32:72:54:b8:eb:e3:ea:02:70:17:6a:20:
4e:d6:c6:e3:26:a3:f2:78:4f:5a:e0:45:ba:11:c8:
6c:13:c8:4d:41:75:d5:ab:30:27:42:1a:9d:e9:84:
13:d6:c3:c2:df:65:10:a6:b2:3c:96:a2:81:18:43:
47:00:52:a2:fb:5b:dc:bb:29:7b:a9:89:e9:34:4e:
28:72:10:f0:51:de:f9:b8:ae:7e:44:ec:63:d8:66:
45:dc:60:79:6b:49:34:15:0b:79:71:42:81:4a:fe:
43:75:ec:88:08:f6:10:a2:f0:b8:fe:9a:13:0e:d7:
14:4e:d8:45:1f:58:0d:7b:b7:3f:9a:ff:d9:ef:11:
5f:97:29:83:1c:fd:37:df:26:e6:60:af:f4:00:8f:
ca:1b:99:25:98:fd:a3:a2:41:05:df:06:d2:6e:4d:
ae:8a:41:bb:44:a7:d1:f5:06:b9:37:db:ce:7e:00:
50:27:09:a4:42:05:72:d2:21:79:bc:6e:e7:f8:03:
45:45:3a:e4:f8:f5:1a:78:3b:ea:36:95:a2:8e:21:
39:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:75:AF:C9:28:21:50:79:AD:AE:9B:4C:41:10:67:E6:B1:32:B2:3E
X509v3 Authority Key Identifier:
keyid:8F:0A:3D:F8:83:8C:F3:4E:5F:A6:39:C8:6D:D0:FD:58:DA:39:0F:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwo9-IOM805fpjnIbdD9WNo5D8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/THWvySghUHmtrptMQRBn5rEysj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/jwo9-IOM805fpjnIbdD9WNo5D8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.25.64.0/21
185.19.232.0/22
185.29.168.0/22
213.146.64.0/19
IPv6:
2a00:4960::/32
Signature Algorithm: sha256WithRSAEncryption
56:49:ad:98:db:7d:93:58:0a:6c:1c:17:b6:89:64:9e:81:9e:
9a:97:fc:c7:f4:6a:76:a1:dd:3d:25:47:99:1d:20:bf:bf:88:
5a:99:2b:aa:93:1e:ff:fe:03:fe:dc:39:8e:91:83:fb:95:5d:
c8:65:5d:27:65:53:8a:fb:e6:07:89:2f:ee:ae:60:14:d9:f8:
9f:fb:45:05:24:1f:02:95:ed:86:ad:71:08:b8:bb:22:46:8c:
78:23:bd:03:cd:ba:04:62:40:4f:06:35:c9:38:ec:27:fa:4f:
69:e4:55:2e:56:6c:1f:15:1b:64:d9:fa:70:3e:1c:1a:b3:1d:
02:1a:81:09:70:78:c7:52:3e:9c:94:d5:5a:98:99:81:83:76:
32:f6:47:74:e2:f7:49:b4:bb:f1:70:ab:1a:c3:02:30:80:1b:
d3:b6:64:0a:e0:61:ce:86:32:c7:25:a1:6b:6f:4e:97:7d:20:
e9:58:a7:4f:79:42:5c:d7:bb:97:cd:a8:08:92:8d:c7:a8:bb:
00:c4:4b:7f:f2:64:d6:36:45:3a:6a:66:90:78:ee:bb:5c:8d:
c8:e1:69:22:a8:d5:e5:fb:13:ab:68:5a:9f:7b:5c:e4:49:54:
96:d7:f9:da:f8:bd:be:72:9b:da:f8:33:a8:b5:8c:e2:58:de:
be:6e:d0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:44:27 2026 by rpki-client