Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/TsG-08E7E3j0bF17sG_CDo2wgnI.roa
File: TsG-08E7E3j0bF17sG_CDo2wgnI.roa (raw, json)
Hash identifier: EN2Ee8vh8Zv1oDwthsBsU4PB62H3surwxAv9aKQnIHg=
Subject key identifier: 4E:C1:BE:D3:C1:3B:13:78:F4:6C:5D:7B:B0:6F:C2:0E:8D:B0:82:72
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01A125106AFA7BF2C6DD12DE2A9C38F3BC0E
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/TsG-08E7E3j0bF17sG_CDo2wgnI.roa
Signing time: Sat 10 Oct 2026 09:06:35 +0000
ROA not before: Sat 10 Oct 2026 09:06:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219075
IP address blocks: 194.233.149.0/24 maxlen: 24
212.224.6.0/24 maxlen: 24
217.172.168.0/24 maxlen: 24
217.172.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:10:6a:fa:7b:f2:c6:dd:12:de:2a:9c:38:f3:bc:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Oct 10 09:06:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ec1bed3c13b1378f46c5d7bb06fc20e8db08272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9b:d3:a2:15:a7:7d:ec:1d:60:b4:af:ff:96:
43:b5:cc:13:c6:c9:19:e3:18:84:5f:25:6d:92:27:
99:5f:b2:10:fb:e7:67:d6:b9:9b:9a:3d:5d:c0:47:
cb:10:4b:9b:2d:9d:f5:ff:28:fd:df:24:a2:46:8b:
4c:12:35:f4:19:f5:a0:8b:40:f6:e9:69:54:39:d2:
62:04:0c:c0:b0:9f:44:a5:b1:a1:e4:a4:55:78:fe:
4d:fb:73:25:74:10:94:22:5a:27:5c:ba:33:1a:7d:
ac:cb:b8:ee:b9:b6:be:94:23:75:e8:e2:db:d9:8a:
cd:ab:18:a0:9d:f5:6a:5c:53:33:ee:67:ea:25:7b:
b9:7d:01:d8:ac:a8:1e:17:01:43:3a:2f:81:36:7b:
87:85:0b:a9:db:5c:ab:bb:27:d2:e0:69:58:71:19:
ab:2b:ee:11:60:15:41:f2:17:25:3b:cc:46:06:2f:
bc:52:77:59:49:ab:92:b8:30:a7:4c:9c:65:92:0e:
fe:4d:bf:dc:2d:80:f3:36:50:55:87:bb:8e:c0:fe:
bc:d3:7f:ba:40:55:67:f2:90:e6:1d:47:d5:84:bc:
f6:a8:4e:f6:d9:88:d5:a1:ed:59:54:15:b2:59:2e:
b5:0e:ae:05:a2:0e:bc:af:e3:53:59:e5:3e:1f:b2:
74:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C1:BE:D3:C1:3B:13:78:F4:6C:5D:7B:B0:6F:C2:0E:8D:B0:82:72
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/TsG-08E7E3j0bF17sG_CDo2wgnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.233.149.0/24
212.224.6.0/24
217.172.168.0/23
Signature Algorithm: sha256WithRSAEncryption
73:1a:da:ce:a7:0f:3c:32:03:4a:23:6a:3a:48:60:ca:64:8f:
79:df:38:b3:49:0a:fa:7d:38:1e:66:55:b9:29:07:95:91:a8:
77:08:d5:a7:1e:ce:f7:14:62:cf:b7:e9:4e:40:4d:0c:95:52:
b3:dc:12:56:6d:bc:d1:d8:d4:e6:f4:a4:02:c1:a3:e1:c9:3b:
a7:6e:30:f2:a9:d8:2b:a9:ca:c0:a6:a1:9f:77:31:64:59:9d:
64:b2:9e:cd:a7:6d:ef:2a:98:d0:d1:54:2d:ba:0d:7f:28:82:
7b:b6:36:68:49:04:a2:0d:db:18:0a:65:ad:27:a5:2e:72:18:
19:7a:43:03:b4:ca:a0:f6:53:d3:c9:5e:c6:74:b0:95:53:66:
f4:1b:1a:a5:8f:4a:62:1c:9f:2a:86:fd:82:bb:7c:0b:88:dd:
0c:00:d2:a4:b6:a7:e4:39:eb:6e:b1:6f:58:9b:af:c4:8a:e4:
38:99:cc:92:89:b3:f7:df:bb:d7:94:1d:9c:bd:b8:7e:62:be:
29:99:c9:3f:a8:dc:f5:8c:40:15:20:c6:31:f2:73:28:5a:96:
2c:20:53:70:82:ea:17:52:0a:47:62:6e:67:6a:d4:05:26:cc:
2c:3a:47:65:dd:fa:c1:74:03:ac:af:99:13:39:ab:3d:34:32:
8b:d4:03:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:41:58 2026 by rpki-client