Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/kTrZwWya8vKsPzaTCCVly2aeBF0.roa
File: kTrZwWya8vKsPzaTCCVly2aeBF0.roa (raw, json)
Hash identifier: GYxaPQmLs3qRxZhpYVXS6A4uk/iHpf3iWjyGg7/VHF4=
Subject key identifier: 91:3A:D9:C1:6C:9A:F2:F2:AC:3F:36:93:08:25:65:CB:66:9E:04:5D
Certificate issuer: /CN=4ca66f3c0f25774e696d2a46723277eb961128c3
Certificate serial: 019DF7352808D6BC426A22D343B2212A623A
Authority key identifier: 4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/kTrZwWya8vKsPzaTCCVly2aeBF0.roa
Signing time: Tue 05 May 2026 08:15:49 +0000
ROA not before: Tue 05 May 2026 08:15:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58232
IP address blocks: 176.65.140.0/24 maxlen: 24
176.65.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f7:35:28:08:d6:bc:42:6a:22:d3:43:b2:21:2a:62:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca66f3c0f25774e696d2a46723277eb961128c3
Validity
Not Before: May 5 08:15:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=913ad9c16c9af2f2ac3f3693082565cb669e045d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:57:e2:13:5e:63:ca:cd:cb:af:32:61:dd:ae:
18:db:b1:9b:88:2a:64:81:5b:e3:af:49:dd:38:9a:
70:84:98:14:56:13:8f:fd:e0:8c:bb:ab:07:5b:c7:
8d:80:d3:db:09:2b:29:12:b6:3e:c7:84:86:ba:dc:
93:ca:59:3d:d2:df:9f:62:29:00:b3:39:ea:77:8f:
4c:42:d4:58:d7:ff:68:e3:d4:77:f4:f0:cc:28:5d:
97:d1:a8:8c:fb:bc:bf:18:55:b1:6a:2d:0c:ba:4e:
c3:5e:0b:0e:4e:5c:cf:b2:0a:ad:d2:f4:22:9a:6a:
5d:d4:4f:b8:f7:be:bb:2d:ee:ce:a0:b6:77:a6:b3:
2c:85:57:7b:0a:5b:17:06:79:13:ee:f8:c9:be:e1:
72:ff:b1:fc:42:9c:1c:fb:fa:5f:fe:e5:33:7b:10:
7b:75:5a:ac:f4:81:2c:0d:52:ad:5c:5d:a5:80:18:
3f:63:6c:a5:23:a6:62:b5:ac:5a:af:64:10:d9:cc:
e1:7a:95:34:16:33:ab:35:49:e5:42:c7:a7:76:62:
8d:92:2c:24:14:cf:f1:0c:fe:af:14:42:d6:2c:cb:
b7:4a:5b:2b:65:eb:8e:60:d9:4c:37:2d:e5:10:f3:
45:81:3a:d8:6f:4e:5d:e3:cb:98:57:62:29:1f:8b:
1a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:3A:D9:C1:6C:9A:F2:F2:AC:3F:36:93:08:25:65:CB:66:9E:04:5D
X509v3 Authority Key Identifier:
keyid:4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/kTrZwWya8vKsPzaTCCVly2aeBF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.65.140.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:1a:c9:2a:af:4d:d1:8f:58:12:a7:6f:2a:fd:81:31:58:02:
0f:fb:7a:23:e2:0d:81:5a:38:0d:08:d6:24:e9:4b:3d:8d:64:
b8:2a:75:f7:23:a2:cf:8d:65:b4:95:ac:9e:81:0a:54:31:17:
9e:e5:1b:78:a4:52:51:a0:f5:b1:8d:b5:ce:86:ab:b7:40:cb:
9d:ec:0f:f0:ed:0c:d1:07:62:3b:ca:34:b8:45:f0:07:b1:76:
e9:4a:3b:83:83:bc:d5:af:1c:d9:5e:c5:d7:01:cd:18:1e:ec:
e5:a9:19:da:19:09:54:91:1f:ed:47:69:37:76:a8:fe:a7:c8:
87:2f:76:84:ac:5e:07:df:51:8a:46:c4:23:23:b7:2f:d1:e1:
f1:0c:3c:2b:47:41:89:61:94:74:d3:a7:04:60:b8:f1:6d:52:
0f:8d:cc:0c:6d:56:7b:02:d8:51:85:75:4d:66:1e:1e:d0:80:
06:9e:7b:9a:3c:f4:f6:c0:e2:43:f4:0a:a0:47:6d:35:16:a5:
5d:9d:b6:c6:5e:30:6e:25:71:e2:18:b6:76:db:50:cc:2c:25:
71:00:37:af:80:3a:74:3c:9e:d8:7c:16:9f:37:43:2d:b7:a8:
dc:14:2f:40:b1:5f:cb:47:c7:f6:d7:2d:2e:db:fc:6b:49:d0:
13:f4:9d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:41:56 2026 by rpki-client