Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/TwG4NfkhAbPjpFDMcs8AlQz8_so.roa
File: TwG4NfkhAbPjpFDMcs8AlQz8_so.roa (raw, json)
Hash identifier: bDUrSxfQEJ30WVyhher5haRsgvJ/WXiNp5pqGvy2gIc=
Subject key identifier: 4F:01:B8:35:F9:21:01:B3:E3:A4:50:CC:72:CF:00:95:0C:FC:FE:CA
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 019F146784EB314D80AEF154B92F810102CF
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/TwG4NfkhAbPjpFDMcs8AlQz8_so.roa
Signing time: Mon 29 Jun 2026 17:22:36 +0000
ROA not before: Mon 29 Jun 2026 17:22:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219436
IP address blocks: 87.58.192.0/24 maxlen: 24
150.251.33.0/24 maxlen: 24
150.251.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:67:84:eb:31:4d:80:ae:f1:54:b9:2f:81:01:02:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Jun 29 17:22:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f01b835f92101b3e3a450cc72cf00950cfcfeca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:36:88:b9:30:08:36:41:a1:43:34:40:28:28:
29:17:3c:b9:ff:e7:60:26:f9:bd:cb:38:e7:20:90:
06:a3:ac:72:bd:10:c3:0c:60:ac:52:c1:43:cc:28:
0b:f7:46:84:1a:12:51:4f:2d:06:da:d6:2d:80:ce:
31:39:2c:e3:42:eb:99:ab:e0:93:db:74:7a:76:c2:
eb:c1:81:ad:8f:f3:07:ce:97:6e:0a:db:85:42:85:
82:5b:51:9c:30:91:57:df:d5:60:96:49:35:5b:01:
20:d7:d7:1a:3e:bd:06:b2:25:b9:1d:0c:33:0d:90:
be:90:69:00:21:cf:ba:96:bf:14:98:f5:91:48:0b:
58:f5:23:1d:e8:cf:0e:3a:6a:bf:0a:2f:08:23:51:
dc:f2:d5:42:cf:fe:20:0a:e8:ee:af:95:1e:5b:9a:
8b:68:ef:52:15:7c:3f:0f:e3:f6:7d:e2:b2:4a:38:
22:96:88:cf:37:49:bb:9f:dd:fe:6e:0b:db:43:c2:
98:52:3e:e1:08:85:71:17:a4:7f:71:72:84:7d:f0:
29:1c:26:c0:8c:52:7e:5d:34:fe:23:ba:da:c8:9a:
d3:34:e6:1a:9f:0a:6e:e0:0d:ac:c7:b9:76:e0:e7:
a2:c7:3a:5f:f7:8f:e5:ed:e9:94:5e:dd:b0:41:61:
52:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:01:B8:35:F9:21:01:B3:E3:A4:50:CC:72:CF:00:95:0C:FC:FE:CA
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/TwG4NfkhAbPjpFDMcs8AlQz8_so.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.192.0/24
150.251.33.0-150.251.34.255
Signature Algorithm: sha256WithRSAEncryption
2f:1c:66:a0:ce:a5:e4:7b:14:7c:69:db:79:c2:bf:53:d7:b0:
07:9c:8c:4e:46:03:a3:c2:a1:ca:3f:46:f7:ad:f5:61:2d:69:
4e:0d:17:aa:2d:f6:44:a1:ff:85:b1:25:68:f1:37:ac:42:3d:
b0:2e:7c:47:0d:b1:1d:92:37:07:5d:f5:e8:52:d5:b4:46:bf:
c5:ce:21:2b:81:c6:ff:d9:77:14:37:7d:d9:73:39:14:41:4b:
24:52:72:15:80:cf:d0:35:97:e9:1a:5b:c0:22:00:38:6d:f8:
2f:b1:32:30:70:f3:5c:85:58:2f:ac:d3:eb:62:62:3d:21:b3:
9e:bd:e9:7f:a8:a0:24:69:2c:6e:61:40:6e:b2:c6:49:38:75:
c4:5f:ff:0b:57:c5:e6:b1:e7:2d:a2:d4:7a:89:67:cd:03:2a:
ab:c9:80:66:b9:5a:b9:ea:76:29:86:5c:3c:52:e2:ae:28:73:
e6:17:a8:49:6c:5c:ad:1b:b9:a9:2d:92:29:0c:dd:04:c0:a8:
06:a1:6b:0f:22:95:c8:3e:6f:85:be:77:0e:76:45:ad:af:66:
af:55:f7:e9:13:a9:c5:36:c8:01:0e:19:4a:32:8c:c7:7d:2f:
37:4e:54:1b:ea:e9:c4:99:df:d0:4c:5b:39:88:8c:03:66:2a:
9a:9e:02:c9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:37:22 2026 by rpki-client