Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TqTJLABZuZ3Z_riaclxcwlInsZM.roa
File: TqTJLABZuZ3Z_riaclxcwlInsZM.roa (raw, json)
Hash identifier: WY1srKNh+083wr0++hFqzfE4aegi1vmDWgO8q8pbsYA=
Subject key identifier: 4E:A4:C9:2C:00:59:B9:9D:D9:FE:B8:9A:72:5C:5C:C2:52:27:B1:93
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A10A449B25F2BBA4330096F8ECD7F6673F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TqTJLABZuZ3Z_riaclxcwlInsZM.roa
Signing time: Mon 05 Oct 2026 04:13:50 +0000
ROA not before: Mon 05 Oct 2026 04:13:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 62.76.230.0/24 maxlen: 24
185.72.10.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
193.124.5.0/24 maxlen: 24
193.124.7.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
193.124.206.0/24 maxlen: 24
194.58.67.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.53.0/24 maxlen: 24
194.87.59.0/24 maxlen: 24
194.87.67.0/24 maxlen: 24
194.87.81.0/24 maxlen: 24
194.87.119.0/24 maxlen: 24
194.87.120.0/24 maxlen: 24
194.87.122.0/24 maxlen: 24
194.87.136.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.183.0/24 maxlen: 24
194.87.185.0/24 maxlen: 24
194.87.211.0/24 maxlen: 24
194.87.212.0/24 maxlen: 24
194.87.231.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
195.58.55.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
195.133.7.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.29.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
195.133.42.0/24 maxlen: 24
195.133.50.0/23 maxlen: 23
195.133.58.0/24 maxlen: 24
195.133.72.0/24 maxlen: 24
195.133.92.0/23 maxlen: 23
212.192.241.0/24 maxlen: 24
212.192.242.0/24 maxlen: 24
212.192.251.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
212.193.26.0/23 maxlen: 23
212.193.28.0/24 maxlen: 24
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:44:9b:25:f2:bb:a4:33:00:96:f8:ec:d7:f6:67:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 5 04:13:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ea4c92c0059b99dd9feb89a725c5cc25227b193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:76:26:cf:fd:c4:bc:69:3e:cb:69:cd:fa:3c:
23:6b:2d:d8:d9:8d:76:71:ad:22:53:a7:74:65:57:
bc:38:0b:dd:bd:fb:b3:68:45:ad:48:45:23:41:19:
79:e2:16:fe:cb:80:95:b4:a0:dd:68:db:8d:6e:f1:
00:57:98:42:cc:0e:2f:b1:15:bb:57:9d:d8:6a:4e:
4d:18:a0:8a:d1:23:02:79:3c:11:7e:b7:7e:54:e3:
a5:a3:51:8c:0e:7d:af:8e:61:6d:57:8b:68:ed:98:
f3:33:ee:0b:6d:82:18:06:3b:f6:d5:2e:9d:d0:e1:
de:4d:b5:ff:04:5e:b2:39:a7:d6:04:6a:ac:fa:90:
36:fe:c1:f5:a6:4c:cf:1d:79:54:5e:2a:b7:e0:11:
42:b1:dd:28:f6:23:dd:16:e1:f4:59:e0:31:b3:96:
1d:f6:da:dc:c3:2a:93:29:cb:fa:7e:e9:29:3c:a2:
0f:f8:01:77:dd:a1:40:08:e0:ef:6f:28:04:2a:fd:
c2:98:44:67:09:24:5f:a5:19:10:52:27:af:94:7e:
ee:34:a4:c2:f3:62:0d:8a:0e:48:27:6c:18:af:7e:
7f:1e:55:11:e7:ba:b1:64:ca:1c:4d:53:64:59:a1:
99:87:5e:4a:2b:eb:fd:0a:d4:3a:cb:9c:2d:be:9b:
81:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A4:C9:2C:00:59:B9:9D:D9:FE:B8:9A:72:5C:5C:C2:52:27:B1:93
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TqTJLABZuZ3Z_riaclxcwlInsZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.230.0/24
185.72.10.0/24
192.124.190.0/24
193.124.5.0/24
193.124.7.0/24
193.124.202.0/24
193.124.206.0/24
194.58.67.0/24
194.58.155.0/24
194.87.3.0/24
194.87.7.0/24
194.87.53.0/24
194.87.59.0/24
194.87.67.0/24
194.87.81.0/24
194.87.119.0-194.87.120.255
194.87.122.0/24
194.87.136.0/24
194.87.160.0/24
194.87.163.0/24
194.87.172.0/24
194.87.179.0/24
194.87.182.0/23
194.87.185.0/24
194.87.211.0-194.87.212.255
194.87.231.0/24
194.135.23.0-194.135.24.255
195.58.55.0-195.58.56.255
195.133.7.0/24
195.133.24.0/23
195.133.29.0/24
195.133.40.0-195.133.42.255
195.133.50.0/23
195.133.58.0/24
195.133.72.0/24
195.133.92.0/23
212.192.241.0-212.192.242.255
212.192.251.0/24
212.193.0.0/24
212.193.26.0-212.193.28.255
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
55:82:85:b5:5a:6b:f2:b8:95:e3:3d:70:55:5e:29:66:db:9a:
0e:63:06:a2:ba:02:88:41:fb:15:10:58:4d:90:ee:5a:9b:9d:
81:6a:51:b1:24:fd:a6:32:56:6d:00:f6:8a:bf:e7:90:19:e2:
88:15:44:8e:d5:e4:b5:fc:e7:fd:a6:23:4d:9c:8d:76:83:8a:
2d:a0:fa:04:d8:52:b0:fb:c4:9b:b2:93:0b:22:ab:44:e9:b4:
1a:87:81:4b:36:ad:6c:99:20:df:c0:c9:1e:11:2c:25:bd:48:
f5:c0:8a:f4:7b:b0:18:7d:db:df:0a:25:2e:bb:89:a4:4e:3d:
39:a5:2a:eb:13:ab:07:f6:32:05:b8:b9:d5:cd:63:32:3b:d5:
19:9c:86:b5:78:90:f2:d8:b8:e5:3e:70:3c:de:9c:04:82:0a:
82:b0:b9:7d:ca:a5:11:63:55:d2:65:63:18:b4:fe:41:14:a2:
58:aa:15:63:64:42:e0:c2:ac:06:c4:50:21:bb:eb:e4:96:42:
6c:a5:ec:b6:74:4e:84:0f:12:20:3f:37:ff:72:3f:22:de:05:
a5:47:61:ef:50:f5:49:b8:9f:a0:71:82:a2:ec:76:bf:7e:8c:
63:ab:2f:ba:ca:a4:c8:b5:07:69:96:f0:f1:03:96:f6:9d:8e:
09:57:39:21
-----BEGIN CERTIFICATE-----
MIIGPzCCBSegAwIBAgISAaEKRJsl8rukMwCW+OzX9mc/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjYxMDA1MDQxMzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZWE0YzkyYzAwNTliOTlkZDlmZWI4OWE3MjVjNWNjMjUyMjdiMTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3Ymz/3EvGk+y2nN+jwjay3Y2Y12
ca0iU6d0ZVe8OAvdvfuzaEWtSEUjQRl54hb+y4CVtKDdaNuNbvEAV5hCzA4vsRW7
V53Yak5NGKCK0SMCeTwRfrd+VOOlo1GMDn2vjmFtV4to7ZjzM+4LbYIYBjv21S6d
0OHeTbX/BF6yOafWBGqs+pA2/sH1pkzPHXlUXiq34BFCsd0o9iPdFuH0WeAxs5Yd
9trcwyqTKcv6fukpPKIP+AF33aFACODvbygEKv3CmERnCSRfpRkQUievlH7uNKTC
82INig5IJ2wYr35/HlUR57qxZMocTVNkWaGZh15KK+v9CtQ6y5wtvpuBOQIDAQAB
o4IDSzCCA0cwHQYDVR0OBBYEFE6kySwAWbmd2f64mnJcXMJSJ7GTMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvVHFUSkxBQlp1WjNaX3JpYWNseGN3bEluc1pNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBXwYIKwYBBQUHAQcBAf8EggFOMIIBSjCCATAEAgABMIIB
KAMEAD5M5gMEALlICgMEAMB8vgMEAMF8BQMEAMF8BwMEAMF8ygMEAMF8zgMEAMI6
QwMEAMI6mwMEAMJXAwMEAMJXBwMEAMJXNQMEAMJXOwMEAMJXQwMEAMJXUTAMAwQA
wld3AwQAwld4AwQAwld6AwQAwleIAwQAwlegAwQAwlejAwQAwlesAwQAwlezAwQB
wle2AwQAwle5MAwDBADCV9MDBADCV9QDBADCV+cwDAMEAMKHFwMEAMKHGDAMAwQA
wzo3AwQAwzo4AwQAw4UHAwQBw4UYAwQAw4UdMAwDBAPDhSgDBADDhSoDBAHDhTID
BADDhToDBADDhUgDBAHDhVwwDAMEANTA8QMEANTA8gMEANTA+wMEANTBADAMAwQB
1MEaAwQA1MEcMBQEAgACMA4DBQMqAVfAAwUDKgz/QDANBgkqhkiG9w0BAQsFAAOC
AQEAVYKFtVpr8riV4z1wVV4pZtuaDmMGoroCiEH7FRBYTZDuWpudgWpRsST9pjJW
bQD2ir/nkBniiBVEjtXktfzn/aYjTZyNdoOKLaD6BNhSsPvEm7KTCyKrROm0GoeB
SzatbJkg38DJHhEsJb1I9cCK9HuwGH3b3wolLruJpE49OaUq6xOrB/YyBbi51c1j
MjvVGZyGtXiQ8ti45T5wPN6cBIIKgrC5fcqlEWNV0mVjGLT+QRSiWKoVY2RC4MKs
BsRQIbvr5JZCbKXstnROhA8SID83/3I/It4FpUdh71D1SbifoHGCoux2v36MY6sv
usqkyLUHaZbw8QOW9p2OCVc5IQ==
-----END CERTIFICATE-----
Generated at Tue Oct 6 15:15:50 2026 by rpki-client