Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/xEmv6iMzO6ox8HZNasxgI207Ico.roa
File: xEmv6iMzO6ox8HZNasxgI207Ico.roa (raw, json)
Hash identifier: hvgnhFfU21tndV9juMrzdngLR+nEgCJ6x3FzWgGB75g=
Subject key identifier: C4:49:AF:EA:23:33:3B:AA:31:F0:76:4D:6A:CC:60:23:6D:3B:21:CA
Certificate issuer: /CN=4ca66f3c0f25774e696d2a46723277eb961128c3
Certificate serial: 019EFE22802E4AD531F18BE74E07685A9BFB
Authority key identifier: 4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/xEmv6iMzO6ox8HZNasxgI207Ico.roa
Signing time: Thu 25 Jun 2026 09:35:34 +0000
ROA not before: Thu 25 Jun 2026 09:35:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51396
IP address blocks: 176.65.134.0/24 maxlen: 24
176.65.139.0/24 maxlen: 24
176.65.148.0/24 maxlen: 24
176.65.149.0/24 maxlen: 24
176.65.150.0/24 maxlen: 24
176.65.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 17:15:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fe:22:80:2e:4a:d5:31:f1:8b:e7:4e:07:68:5a:9b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca66f3c0f25774e696d2a46723277eb961128c3
Validity
Not Before: Jun 25 09:35:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c449afea23333baa31f0764d6acc60236d3b21ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f9:e2:4f:47:9e:41:08:7d:75:b4:3d:1f:44:
62:dc:6b:fe:e4:ca:65:e9:6a:04:3b:b6:4f:ae:70:
07:6a:19:0f:a2:a2:53:02:61:08:d4:82:04:09:a5:
3d:ef:2d:ea:19:14:a3:d7:a1:f6:ab:a9:40:0a:ae:
10:ee:3e:37:3e:5b:81:a9:b0:68:59:99:d8:d5:b9:
43:b8:4b:4d:28:03:5f:07:61:4f:15:83:20:86:78:
29:53:59:16:4b:a4:cb:e0:66:bf:3a:a7:6e:1e:c3:
2b:21:f9:91:bd:59:64:d2:23:fb:b6:ce:9e:54:24:
16:98:96:b7:ec:23:17:f1:0e:56:d5:ed:f1:b8:5f:
be:ad:b1:a8:50:be:ba:dd:e3:09:02:d3:c8:45:af:
b4:b3:c3:f9:b7:79:49:bb:f6:9c:5d:b1:e8:3b:0a:
87:0e:48:b1:2a:79:68:07:52:f8:7e:5a:47:52:8c:
33:39:28:19:4e:66:1b:9f:e8:30:ec:41:5b:27:28:
27:88:71:f6:c1:cf:d7:ef:83:c6:50:e8:2b:dd:95:
11:71:d6:d7:0f:40:06:8a:b3:61:01:50:f6:b3:8a:
21:7d:5e:e3:ff:4f:5b:98:ca:f7:26:5c:22:12:ae:
21:85:78:8d:02:c6:40:15:31:e0:44:dc:92:4d:bb:
07:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:49:AF:EA:23:33:3B:AA:31:F0:76:4D:6A:CC:60:23:6D:3B:21:CA
X509v3 Authority Key Identifier:
keyid:4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/xEmv6iMzO6ox8HZNasxgI207Ico.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.65.134.0/24
176.65.139.0/24
176.65.148.0/22
Signature Algorithm: sha256WithRSAEncryption
02:fb:c3:0a:db:f8:4d:d7:2c:4a:9e:d3:07:3d:7f:e7:20:c6:
b6:73:0b:b1:38:c6:ac:f3:b1:26:e6:f8:ee:ef:85:e3:15:a5:
eb:dd:c1:49:ea:bb:aa:8d:bf:c4:6e:5d:eb:a5:8c:b1:b6:f2:
f4:96:84:b9:5a:d2:83:65:31:18:26:e2:1d:00:55:d1:c7:f0:
0c:0b:37:19:72:fe:d1:59:9b:1a:29:c9:1b:a1:20:e2:ae:89:
52:78:bd:5e:3d:05:c5:3e:97:f1:12:43:fc:6f:7a:3f:9b:1e:
0c:04:7d:76:a9:c5:6a:05:de:15:ae:d6:2c:12:c6:db:e2:eb:
0f:c7:31:c9:91:f9:d4:57:9d:93:74:c6:e2:8d:b2:b0:bc:cb:
bd:a8:23:87:d6:06:d8:bb:08:e6:e1:a3:26:07:70:13:5c:d7:
ea:1f:52:72:c8:0b:83:6f:5d:21:81:c6:b3:7e:97:51:1d:d8:
c4:da:12:ee:69:c3:22:07:39:96:e1:c3:6f:c7:26:27:1d:b9:
b1:72:38:2e:cc:06:59:c5:c9:f1:4e:f2:f2:bc:bb:91:e7:3c:
a9:0c:07:42:80:f9:20:dc:88:71:81:54:69:f8:03:51:e9:b7:
cf:83:59:00:21:8c:ba:0d:d1:e3:50:8a:a4:03:fe:89:bc:c8:
04:c9:e0:af
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ7+IoAuStUx8YvnTgdoWpv7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYTY2ZjNjMGYyNTc3NGU2OTZkMmE0NjcyMzI3N2ViOTYx
MTI4YzMwHhcNMjYwNjI1MDkzNTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDQ5YWZlYTIzMzMzYmFhMzFmMDc2NGQ2YWNjNjAyMzZkM2IyMWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fniT0eeQQh9dbQ9H0Ri3Gv+5Mpl
6WoEO7ZPrnAHahkPoqJTAmEI1IIECaU97y3qGRSj16H2q6lACq4Q7j43PluBqbBo
WZnY1blDuEtNKANfB2FPFYMghngpU1kWS6TL4Ga/OqduHsMrIfmRvVlk0iP7ts6e
VCQWmJa37CMX8Q5W1e3xuF++rbGoUL663eMJAtPIRa+0s8P5t3lJu/acXbHoOwqH
DkixKnloB1L4flpHUowzOSgZTmYbn+gw7EFbJygniHH2wc/X74PGUOgr3ZURcdbX
D0AGirNhAVD2s4ohfV7j/09bmMr3JlwiEq4hhXiNAsZAFTHgRNySTbsHrwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMRJr+ojMzuqMfB2TWrMYCNtOyHKMB8GA1UdIwQY
MBaAFEymbzwPJXdOaW0qRnIyd+uWESjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUt
MzE5YjBjODc0NDQwLzEveEVtdjZpTXpPNm94OEhaTmFzeGdJMjA3SWNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUtMzE5YjBjODc0NDQw
LzEvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAsEGGAwQA
sEGLAwQCsEGUMA0GCSqGSIb3DQEBCwUAA4IBAQAC+8MK2/hN1yxKntMHPX/nIMa2
cwuxOMas87Em5vju74XjFaXr3cFJ6ruqjb/Ebl3rpYyxtvL0loS5WtKDZTEYJuId
AFXRx/AMCzcZcv7RWZsaKckboSDirolSeL1ePQXFPpfxEkP8b3o/mx4MBH12qcVq
Bd4VrtYsEsbb4usPxzHJkfnUV52TdMbijbKwvMu9qCOH1gbYuwjm4aMmB3ATXNfq
H1JyyAuDb10hgcazfpdRHdjE2hLuacMiBzmW4cNvxyYnHbmxcjguzAZZxcnxTvLy
vLuR5zypDAdCgPkg3IhxgVRp+ANR6bfPg1kAIYy6DdHjUIqkA/6JvMgEyeCv
-----END CERTIFICATE-----
Generated at Sun Jun 28 01:46:46 2026 by rpki-client