Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/tAwZU3BOPbTvz3ImjlM559IcNTA.roa
File: tAwZU3BOPbTvz3ImjlM559IcNTA.roa (raw, json)
Hash identifier: y+WYOBqvK0tCP5OHjWQ0ygtKGjnCPslAmq7bpnA8QLw=
Subject key identifier: B4:0C:19:53:70:4E:3D:B4:EF:CF:72:26:8E:53:39:E7:D2:1C:35:30
Certificate issuer: /CN=5e936bea1b0c3a208aba27d8b10b275e474dde2c
Certificate serial: 019F7F0EF5609983EDCBA28646574BE90A27
Authority key identifier: 5E:93:6B:EA:1B:0C:3A:20:8A:BA:27:D8:B1:0B:27:5E:47:4D:DE:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XpNr6hsMOiCKuifYsQsnXkdN3iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/tAwZU3BOPbTvz3ImjlM559IcNTA.roa
Signing time: Mon 20 Jul 2026 10:25:14 +0000
ROA not before: Mon 20 Jul 2026 10:25:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201228
IP address blocks: 159.22.254.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XpNr6hsMOiCKuifYsQsnXkdN3iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7f:0e:f5:60:99:83:ed:cb:a2:86:46:57:4b:e9:0a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e936bea1b0c3a208aba27d8b10b275e474dde2c
Validity
Not Before: Jul 20 10:25:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b40c1953704e3db4efcf72268e5339e7d21c3530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:56:be:0e:52:97:29:e9:0a:02:fd:28:2c:1c:
08:f9:0d:21:ee:88:af:28:36:35:7c:84:a7:47:6c:
5e:36:de:bf:60:a1:7b:e6:3a:4c:ba:b6:9e:b7:df:
83:a6:7d:8b:dc:f6:ba:f5:d6:a4:ce:77:1c:08:1a:
11:d8:87:7f:75:7b:94:af:b1:48:10:1d:c9:83:37:
2c:b9:b5:99:1e:93:1f:ac:4f:01:56:fd:30:87:f9:
c8:87:1c:33:79:16:5a:ab:22:03:43:27:fc:b5:e7:
b1:17:3f:32:6b:7c:bc:7a:14:bd:ae:03:64:a1:99:
d9:1e:a0:72:42:b6:86:d9:11:9b:56:a0:6b:de:18:
29:b2:95:f1:24:a2:9e:9f:93:ef:96:41:37:73:46:
49:13:99:d4:82:30:29:62:1d:80:61:5d:27:78:8d:
f4:ad:1d:91:1c:5a:24:26:cd:8f:20:ed:f8:4a:44:
bb:4c:1c:f6:58:9b:ed:1e:83:ad:78:72:22:fc:3e:
10:af:90:79:6c:cb:0b:99:84:a8:fa:b4:a0:aa:de:
a6:50:44:43:61:b1:2c:57:8d:79:80:0c:8c:ab:e7:
a6:0e:9d:c7:f4:3b:7f:21:1f:ac:70:f5:37:32:c9:
64:32:dc:da:1d:68:04:a8:06:6b:bd:dc:49:e4:56:
8e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0C:19:53:70:4E:3D:B4:EF:CF:72:26:8E:53:39:E7:D2:1C:35:30
X509v3 Authority Key Identifier:
keyid:5E:93:6B:EA:1B:0C:3A:20:8A:BA:27:D8:B1:0B:27:5E:47:4D:DE:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpNr6hsMOiCKuifYsQsnXkdN3iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/tAwZU3BOPbTvz3ImjlM559IcNTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.22.254.0/23
Signature Algorithm: sha256WithRSAEncryption
81:98:23:37:f9:5b:59:a5:e5:b0:04:a6:56:34:78:a3:5e:69:
ec:a8:14:0d:03:40:63:bc:a9:1a:df:87:c8:47:64:57:75:95:
15:1f:0a:eb:bc:b1:bc:7c:1f:5b:90:4c:67:0b:ae:29:ae:fc:
57:3a:f4:ec:e4:a4:0c:f2:2a:85:45:59:03:43:62:dc:3c:7e:
fa:a9:17:a0:df:8e:96:73:13:6a:0d:5e:e6:ef:62:f4:7f:a6:
bd:29:0c:25:59:9f:af:4b:68:20:27:45:30:01:34:27:b6:ab:
cd:78:fb:c5:e5:f7:56:10:7f:d5:09:c6:f7:87:29:79:73:83:
d2:96:14:f1:82:9a:5a:b9:55:10:be:8f:2f:0c:7a:d1:97:28:
3a:74:25:8b:7d:b3:c5:b7:4e:cb:da:5b:51:f9:9a:a9:a6:bf:
fa:2e:9c:6c:27:b5:49:12:c2:47:75:eb:fb:69:d0:b0:35:df:
8a:9d:20:bc:f2:e3:7a:5d:91:4f:7a:54:34:c9:6d:19:7c:0f:
ae:7e:6f:4d:a3:08:66:ab:7c:a8:89:cd:79:cc:dc:e8:2c:df:
4d:40:38:62:79:40:48:e9:8e:1b:ed:cb:ca:ef:4f:67:58:16:
e4:37:79:a6:73:9b:1b:c3:1d:e6:e8:5e:27:ab:f6:8b:b5:11:
1b:83:35:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:58:24 2026 by rpki-client