Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/TKWYs3n3hIoN-hoFqew_mEdXrIo.roa
File: TKWYs3n3hIoN-hoFqew_mEdXrIo.roa (raw, json)
Hash identifier: USDKgLhBpQiNnUXhTAkFdSI2pQG1VTBMCqyXVi79H/o=
Subject key identifier: 4C:A5:98:B3:79:F7:84:8A:0D:FA:1A:05:A9:EC:3F:98:47:57:AC:8A
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 019777F079538DE497EA8B9827C6D589DD1B
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/TKWYs3n3hIoN-hoFqew_mEdXrIo.roa
Signing time: Mon 16 Jun 2025 08:52:17 +0000
ROA not before: Mon 16 Jun 2025 08:52:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6739
IP address blocks: 2.154.0.0/15 maxlen: 16
2.154.0.0/16 maxlen: 16
2.154.192.0/18 maxlen: 18
2.155.0.0/16 maxlen: 16
5.40.0.0/16 maxlen: 16
62.42.0.0/15 maxlen: 16
62.57.0.0/16 maxlen: 16
62.81.0.0/16 maxlen: 24
62.82.0.0/15 maxlen: 16
62.100.96.0/19 maxlen: 19
62.174.0.0/15 maxlen: 19
80.174.0.0/16 maxlen: 17
80.224.0.0/16 maxlen: 16
81.60.0.0/15 maxlen: 18
81.184.0.0/16 maxlen: 16
81.202.0.0/16 maxlen: 16
82.159.0.0/16 maxlen: 16
82.213.128.0/18 maxlen: 18
83.173.128.0/18 maxlen: 18
84.120.0.0/13 maxlen: 19
84.127.229.0/24 maxlen: 24
85.219.0.0/17 maxlen: 17
85.251.0.0/16 maxlen: 17
89.140.0.0/16 maxlen: 17
95.39.0.0/16 maxlen: 19
185.128.128.0/22 maxlen: 24
194.106.0.0/19 maxlen: 19
194.140.128.0/18 maxlen: 18
194.149.192.0/19 maxlen: 19
212.21.224.0/19 maxlen: 19
212.40.224.0/19 maxlen: 19
212.40.224.0/24 maxlen: 24
212.78.128.0/19 maxlen: 19
212.79.128.0/19 maxlen: 19
212.95.192.0/19 maxlen: 19
212.97.160.0/19 maxlen: 19
212.183.192.0/18 maxlen: 18
213.37.0.0/16 maxlen: 16
213.201.0.0/17 maxlen: 17
213.227.0.0/18 maxlen: 18
213.231.64.0/18 maxlen: 18
213.254.64.0/18 maxlen: 18
2a02:a800::/26 maxlen: 26
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:f0:79:53:8d:e4:97:ea:8b:98:27:c6:d5:89:dd:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: Jun 16 08:52:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ca598b379f7848a0dfa1a05a9ec3f984757ac8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:04:7f:03:77:e5:70:4b:85:7f:af:33:02:30:
dc:dc:1f:da:96:64:41:d0:74:8f:63:3a:53:f4:2f:
fc:de:ac:6a:e9:0e:a0:ee:0a:ce:89:d8:64:59:c0:
1d:66:54:d6:6a:62:f5:8f:fa:d0:42:aa:49:c2:41:
43:db:61:ef:94:8b:1a:d2:b6:03:1a:a3:28:87:7f:
e8:3c:47:77:ad:63:0a:82:78:f8:13:70:7a:77:da:
ad:c5:d5:6a:63:0f:2d:c3:d1:a6:09:ab:89:7c:5e:
40:d1:3e:7c:85:58:ae:90:89:af:40:a8:b3:6c:01:
c7:0e:70:25:ac:bb:db:a8:8c:f9:35:5a:23:75:2d:
49:b6:06:35:ca:3e:50:df:e5:5c:24:38:22:b5:03:
3b:87:0a:0f:3e:23:e5:75:ec:d9:b5:a1:20:a4:e3:
63:75:b5:bc:49:b7:25:ba:ea:1c:5b:f5:b2:28:9b:
d7:7b:4a:ec:8b:4a:0c:01:7c:a6:99:d0:23:07:b2:
4b:f4:54:ad:e3:9f:26:e8:2d:82:c3:7b:b0:2d:9c:
51:1a:7f:a7:2b:fb:74:99:b7:15:a6:d2:27:86:7b:
7a:1a:ed:55:26:02:12:37:66:6e:59:2d:8e:90:f9:
95:5b:45:1b:aa:25:79:a9:5e:88:c9:a1:b4:68:43:
07:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A5:98:B3:79:F7:84:8A:0D:FA:1A:05:A9:EC:3F:98:47:57:AC:8A
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/TKWYs3n3hIoN-hoFqew_mEdXrIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.154.0.0/15
5.40.0.0/16
62.42.0.0/15
62.57.0.0/16
62.81.0.0-62.83.255.255
62.100.96.0/19
62.174.0.0/15
80.174.0.0/16
80.224.0.0/16
81.60.0.0/15
81.184.0.0/16
81.202.0.0/16
82.159.0.0/16
82.213.128.0/18
83.173.128.0/18
84.120.0.0/13
85.219.0.0/17
85.251.0.0/16
89.140.0.0/16
95.39.0.0/16
185.128.128.0/22
194.106.0.0/19
194.140.128.0/18
194.149.192.0/19
212.21.224.0/19
212.40.224.0/19
212.78.128.0/19
212.79.128.0/19
212.95.192.0/19
212.97.160.0/19
212.183.192.0/18
213.37.0.0/16
213.201.0.0/17
213.227.0.0/18
213.231.64.0/18
213.254.64.0/18
IPv6:
2a02:a800::/26
Signature Algorithm: sha256WithRSAEncryption
33:86:a9:b8:4a:05:cb:11:f0:72:b0:dc:87:ea:6a:8c:17:4e:
ce:75:35:f2:35:e0:a9:b4:7e:de:51:c1:7f:20:f3:e1:42:70:
62:64:53:77:9a:e7:e1:27:a4:a2:50:30:9b:ed:94:43:44:6a:
d2:fe:bd:b7:04:8a:60:42:5a:c7:55:75:81:b2:4b:81:88:f4:
ff:07:92:c7:c0:74:4c:ed:f3:46:6d:64:b5:3b:c0:cd:8b:6a:
66:c9:75:61:e6:a5:ff:12:3f:92:03:e3:f5:2b:21:a5:e6:5f:
23:ed:0a:ee:be:75:7c:d0:a4:ee:9c:d0:e4:7a:c6:04:89:47:
de:47:78:69:b8:c8:a7:df:33:e9:98:d2:17:14:ad:3e:a8:3b:
17:83:52:ec:58:d1:e3:f6:71:b9:bd:3c:c6:a3:21:7e:93:2f:
6a:b9:c7:c7:96:46:00:3b:5e:79:bb:73:77:0b:26:05:24:5d:
cc:9f:10:48:84:88:57:48:06:4d:ed:9d:b7:15:3e:0b:50:9f:
cd:00:1b:10:3e:e5:3f:c1:8f:4e:97:eb:6e:79:ad:ab:5f:2d:
85:b1:4e:0f:a4:96:73:63:04:d8:f5:03:41:91:25:30:a1:1f:
98:96:61:c4:9f:6a:88:10:98:d2:27:94:c6:a9:2d:11:70:90:
29:8f:1b:05
-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgISAZd38HlTjeSX6ouYJ8bVid0bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MzRmMTY4NjEwMjg3NmM2MjE2YmNlYTI4YTVlNTAyZWMw
ZDdiNmIwHhcNMjUwNjE2MDg1MjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2E1OThiMzc5Zjc4NDhhMGRmYTFhMDVhOWVjM2Y5ODQ3NTdhYzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAR/A3flcEuFf68zAjDc3B/almRB
0HSPYzpT9C/83qxq6Q6g7grOidhkWcAdZlTWamL1j/rQQqpJwkFD22HvlIsa0rYD
GqMoh3/oPEd3rWMKgnj4E3B6d9qtxdVqYw8tw9GmCauJfF5A0T58hViukImvQKiz
bAHHDnAlrLvbqIz5NVojdS1JtgY1yj5Q3+VcJDgitQM7hwoPPiPldezZtaEgpONj
dbW8SbcluuocW/WyKJvXe0rsi0oMAXymmdAjB7JL9FSt458m6C2Cw3uwLZxRGn+n
K/t0mbcVptInhnt6Gu1VJgISN2ZuWS2OkPmVW0UbqiV5qV6IyaG0aEMHbQIDAQAB
o4IC5TCCAuEwHQYDVR0OBBYEFEylmLN594SKDfoaBansP5hHV6yKMB8GA1UdIwQY
MBaAFNQ08WhhAodsYha86iil5QLsDXtrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2Ut
NTcxMmQ5NWFlNjM4LzEvVEtXWXMzbjNoSW9OLWhvRnFld19tRWRYcklvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2UtNTcxMmQ5NWFlNjM4
LzEvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH6BggrBgEFBQcBBwEB/wSB6jCB5zCB1QQCAAEwgc4DAwEC
mgMDAAUoAwMBPioDAwA+OTAKAwMAPlEDAwI+UAMEBT5kYAMDAT6uAwMAUK4DAwBQ
4AMDAVE8AwMAUbgDAwBRygMDAFKfAwQGUtWAAwQGU62AAwMDVHgDBAdV2wADAwBV
+wMDAFmMAwMAXycDBAK5gIADBAXCagADBAbCjIADBAXClcADBAXUFeADBAXUKOAD
BAXUToADBAXUT4ADBAXUX8ADBAXUYaADBAbUt8ADAwDVJQMEB9XJAAMEBtXjAAME
BtXnQAMEBtX+QDANBAIAAjAHAwUGKgKoADANBgkqhkiG9w0BAQsFAAOCAQEAM4ap
uEoFyxHwcrDch+pqjBdOznU18jXgqbR+3lHBfyDz4UJwYmRTd5rn4SekolAwm+2U
Q0Rq0v69twSKYEJax1V1gbJLgYj0/weSx8B0TO3zRm1ktTvAzYtqZsl1Yeal/xI/
kgPj9SshpeZfI+0K7r51fNCk7pzQ5HrGBIlH3kd4abjIp98z6ZjSFxStPqg7F4NS
7FjR4/Zxub08xqMhfpMvarnHx5ZGADteebtzdwsmBSRdzJ8QSISIV0gGTe2dtxU+
C1CfzQAbED7lP8GPTpfrbnmtq18thbFOD6SWc2ME2PUDQZElMKEfmJZhxJ9qiBCY
0ieUxqktEXCQKY8bBQ==
-----END CERTIFICATE-----
Generated at Wed Jul 23 06:15:22 2025 by rpki-client