Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/TDBzNKDN0zcFzzdrha4ku17Bw2c.roa
File: TDBzNKDN0zcFzzdrha4ku17Bw2c.roa (raw, json)
Hash identifier: UKRggR/5hKhCIyEF+Xn/ipp57q4dtFjayf1JHCNIfSk=
Subject key identifier: 4C:30:73:34:A0:CD:D3:37:05:CF:37:6B:85:AE:24:BB:5E:C1:C3:67
Certificate issuer: /CN=11340dc7e8b8a7e8d7feaf1e08203d87916cb29d
Certificate serial: 019FFA5C276B6214E986807DF9AC7B9B39E7
Authority key identifier: 11:34:0D:C7:E8:B8:A7:E8:D7:FE:AF:1E:08:20:3D:87:91:6C:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/TDBzNKDN0zcFzzdrha4ku17Bw2c.roa
Signing time: Thu 13 Aug 2026 09:02:51 +0000
ROA not before: Thu 13 Aug 2026 09:02:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207081
IP address blocks: 185.247.0.0/24 maxlen: 24
185.247.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:5c:27:6b:62:14:e9:86:80:7d:f9:ac:7b:9b:39:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11340dc7e8b8a7e8d7feaf1e08203d87916cb29d
Validity
Not Before: Aug 13 09:02:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c307334a0cdd33705cf376b85ae24bb5ec1c367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d0:8e:eb:de:ad:9a:04:01:45:b8:0f:65:0b:
49:c6:1f:77:05:4b:71:f6:01:78:32:59:2c:b6:4a:
e1:e3:a9:86:cc:97:ef:f8:90:83:5a:17:a2:0e:a7:
c0:51:01:4e:e0:bb:6a:1d:33:1a:86:40:15:39:86:
ed:bc:9b:60:f4:56:f9:97:e6:a0:ca:2a:70:92:a1:
2d:bd:f6:37:b4:6a:d8:bf:d7:a4:e3:62:49:f9:af:
ef:13:a9:b9:a5:17:e0:f1:3f:1c:37:65:2e:cd:78:
4a:cd:d6:22:c0:81:cf:f6:72:f4:fe:2a:6e:10:96:
ed:ad:2b:0b:5f:7c:78:65:7d:9e:e2:7f:ac:23:bf:
14:a7:a9:88:8e:f5:87:f5:84:9f:e3:f9:9c:b2:0e:
57:bc:89:68:e4:04:80:45:b7:3b:a4:c2:0e:98:0b:
7c:67:81:7d:1e:88:50:bf:d2:e7:a3:45:fd:ba:f1:
15:fb:86:fe:c2:f5:77:a6:d0:0a:12:b2:ba:5b:4e:
f5:ca:0b:5b:ea:08:0b:8e:ee:e6:e3:6f:8e:64:f7:
94:33:6c:b7:ee:69:17:d4:65:94:29:27:12:2e:90:
a1:df:9a:0e:20:a9:0e:2b:f9:de:a6:f9:22:b6:cc:
23:c4:4a:4f:bb:41:20:a7:fc:0b:2b:35:45:b3:e1:
b0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:30:73:34:A0:CD:D3:37:05:CF:37:6B:85:AE:24:BB:5E:C1:C3:67
X509v3 Authority Key Identifier:
keyid:11:34:0D:C7:E8:B8:A7:E8:D7:FE:AF:1E:08:20:3D:87:91:6C:B2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/TDBzNKDN0zcFzzdrha4ku17Bw2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.0.0/23
Signature Algorithm: sha256WithRSAEncryption
39:5b:86:4c:e3:0a:87:df:a8:dc:7c:70:03:2e:1d:fc:e2:eb:
a6:0e:5a:be:bd:8d:8b:58:52:58:6f:e3:56:e5:d8:62:ad:ce:
c0:be:6c:a6:5e:bb:01:10:ce:b0:bb:6a:e3:76:f6:ef:8c:4b:
47:3d:5b:df:ab:b4:9f:42:97:7f:52:08:3c:7c:41:85:68:86:
40:f3:d2:62:72:8e:21:d9:d0:e0:d7:d3:bf:7c:a4:ef:c7:5f:
4a:f4:b1:0a:b0:29:75:97:74:69:b9:06:22:56:74:9e:81:b8:
d5:06:47:c6:36:62:77:dc:58:70:ef:06:3b:ae:df:36:4a:dc:
8f:9f:90:ba:e7:95:43:cd:d5:42:44:9c:29:e1:e1:cf:14:4e:
f8:35:eb:c9:fc:1d:18:34:71:77:ca:de:7d:70:00:a6:75:b9:
76:e8:66:2e:f1:b5:75:8d:f0:c0:12:b5:2b:bd:84:34:71:a2:
9c:be:f4:0f:1e:1b:74:61:5b:7b:ea:85:39:5c:f6:b5:dd:19:
92:73:41:c8:ea:5d:ea:8b:fc:9b:aa:66:41:1e:fd:c3:15:df:
5f:a6:27:2e:ae:f7:e9:0e:64:22:16:8e:d6:9c:c6:19:64:e5:
87:ee:80:db:53:32:a1:fc:7a:c9:31:7d:88:30:46:f5:b5:7c:
c9:ec:d7:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/6XCdrYhTphoB9+ax7mznnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMzQwZGM3ZThiOGE3ZThkN2ZlYWYxZTA4MjAzZDg3OTE2
Y2IyOWQwHhcNMjYwODEzMDkwMjUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzMwNzMzNGEwY2RkMzM3MDVjZjM3NmI4NWFlMjRiYjVlYzFjMzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtCO696tmgQBRbgPZQtJxh93BUtx
9gF4Mlkstkrh46mGzJfv+JCDWheiDqfAUQFO4LtqHTMahkAVOYbtvJtg9Fb5l+ag
yipwkqEtvfY3tGrYv9ek42JJ+a/vE6m5pRfg8T8cN2UuzXhKzdYiwIHP9nL0/ipu
EJbtrSsLX3x4ZX2e4n+sI78Up6mIjvWH9YSf4/mcsg5XvIlo5ASARbc7pMIOmAt8
Z4F9HohQv9Lno0X9uvEV+4b+wvV3ptAKErK6W071ygtb6ggLju7m42+OZPeUM2y3
7mkX1GWUKScSLpCh35oOIKkOK/nepvkitswjxEpPu0Egp/wLKzVFs+GwOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEwwczSgzdM3Bc83a4WuJLtewcNnMB8GA1UdIwQY
MBaAFBE0DcfouKfo1/6vHgggPYeRbLKdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVRRTngtaTRwLWpYX3E4ZUNDQTloNUZzc3AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9iMjM3MmQtMjIxZS00NzVkLWI2N2Ut
ZjA4NDI3MjA4MTU1LzEvVERCek5LRE4wemNGenpkcmhhNGt1MTdCdzJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9iMjM3MmQtMjIxZS00NzVkLWI2N2UtZjA4NDI3MjA4MTU1
LzEvRVRRTngtaTRwLWpYX3E4ZUNDQTloNUZzc3AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufcAMA0G
CSqGSIb3DQEBCwUAA4IBAQA5W4ZM4wqH36jcfHADLh384uumDlq+vY2LWFJYb+NW
5dhirc7AvmymXrsBEM6wu2rjdvbvjEtHPVvfq7SfQpd/Ugg8fEGFaIZA89Jico4h
2dDg19O/fKTvx19K9LEKsCl1l3RpuQYiVnSegbjVBkfGNmJ33Fhw7wY7rt82StyP
n5C655VDzdVCRJwp4eHPFE74NevJ/B0YNHF3yt59cACmdbl26GYu8bV1jfDAErUr
vYQ0caKcvvQPHht0YVt76oU5XPa13RmSc0HI6l3qi/ybqmZBHv3DFd9fpicurvfp
DmQiFo7WnMYZZOWH7oDbUzKh/HrJMX2IMEb1tXzJ7Nek
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:30:04 2026 by rpki-client