Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/tvlTnxEFmsdDpctFANg0Ped1cNk.roa
File: tvlTnxEFmsdDpctFANg0Ped1cNk.roa (raw, json)
Hash identifier: f9ny7joJyTcWBvlpJ0xuVP9R+M5tx+zkuxoeE7Aytys=
Subject key identifier: B6:F9:53:9F:11:05:9A:C7:43:A5:CB:45:00:D8:34:3D:E7:75:70:D9
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 019FB34734002128EC32CCE41A62C48E1F16
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/tvlTnxEFmsdDpctFANg0Ped1cNk.roa
Signing time: Thu 30 Jul 2026 13:46:55 +0000
ROA not before: Thu 30 Jul 2026 13:46:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 46.253.130.0/24 maxlen: 24
85.8.150.0/24 maxlen: 24
91.132.86.0/24 maxlen: 24
185.145.47.0/24 maxlen: 24
185.196.26.0/24 maxlen: 24
185.219.20.0/24 maxlen: 24
185.235.123.0/24 maxlen: 24
185.242.185.0/24 maxlen: 24
193.31.114.0/24 maxlen: 24
193.176.118.0/24 maxlen: 24
194.50.194.0/24 maxlen: 24
195.216.148.0/24 maxlen: 24
195.216.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 20:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b3:47:34:00:21:28:ec:32:cc:e4:1a:62:c4:8e:1f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Jul 30 13:46:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b6f9539f11059ac743a5cb4500d8343de77570d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f8:67:42:98:07:1e:c3:2f:85:b9:1e:7f:66:
9e:f8:cf:39:ef:e9:92:a9:3d:ee:f5:a3:ec:22:e7:
96:13:30:8f:c8:b3:23:e7:14:6d:d0:10:9c:58:66:
89:e7:75:a9:7e:98:5a:6a:1c:27:ac:ff:c6:be:13:
98:78:47:b3:62:ce:64:04:e2:d1:08:97:06:b2:8f:
1f:96:da:04:89:5d:8c:43:ec:4d:33:d4:e1:85:fb:
42:77:d5:08:fc:c3:af:c4:4e:54:ef:68:3c:db:d8:
f3:f8:7d:31:f0:c0:80:5c:b2:23:b8:89:81:40:b0:
8a:a3:77:0d:0e:80:a5:7e:ae:22:b8:02:ce:b6:3a:
53:5f:43:63:29:3e:bb:01:d0:12:25:eb:48:c6:3d:
1f:09:b2:69:62:3f:46:c0:b9:02:71:59:78:1c:14:
e3:85:9c:f5:aa:d4:c6:a8:54:f8:3c:86:41:49:27:
3d:12:c4:9a:40:14:18:91:a0:37:be:1d:a9:4d:4c:
a7:a0:12:41:2e:9b:49:37:6b:a5:d6:a0:72:c9:ff:
09:d6:a5:9a:e6:d2:34:20:cc:cc:69:91:6b:03:f7:
18:61:f7:6e:c6:61:7a:38:d2:8c:f1:76:ce:0d:ad:
90:56:0d:46:75:49:40:f0:5d:39:f6:06:bd:26:e0:
5f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F9:53:9F:11:05:9A:C7:43:A5:CB:45:00:D8:34:3D:E7:75:70:D9
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/tvlTnxEFmsdDpctFANg0Ped1cNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.130.0/24
85.8.150.0/24
91.132.86.0/24
185.145.47.0/24
185.196.26.0/24
185.219.20.0/24
185.235.123.0/24
185.242.185.0/24
193.31.114.0/24
193.176.118.0/24
194.50.194.0/24
195.216.148.0/23
Signature Algorithm: sha256WithRSAEncryption
37:76:d8:83:1e:8f:df:59:f5:c2:7a:45:b6:c3:e2:2d:08:48:
5a:bc:26:78:f1:27:f6:e9:fc:ac:8d:63:c6:b5:b6:d6:b8:f4:
39:3b:90:24:40:a5:bf:ec:6a:38:2f:d7:16:a3:4e:bc:43:f0:
ef:92:9e:7f:c8:54:7c:f4:d3:b0:82:24:71:d0:c3:f9:42:6c:
d3:2c:fd:c5:5b:de:4c:ab:25:bf:43:bc:38:f0:26:2d:f4:b9:
bd:31:02:a0:7d:f9:db:25:ed:5a:ee:72:88:99:dc:a3:27:08:
72:4a:e6:1b:70:f7:f3:24:8b:1c:6e:74:db:82:9b:3a:5d:51:
34:1b:38:9e:a9:49:4f:41:a9:3e:6d:87:48:d7:98:b8:68:26:
e6:6d:3c:80:96:ba:67:df:b4:d4:69:30:ea:24:ec:4a:ea:5d:
27:95:27:f4:a0:93:7a:2c:41:3e:aa:7c:23:43:1e:7f:ef:71:
25:85:7d:c0:3d:08:dc:1d:18:6e:e0:09:98:5e:cb:00:8d:93:
c0:55:f3:6d:a1:92:4a:11:8a:80:7c:ba:5e:7c:bf:be:9f:cb:
d8:61:04:4f:46:2b:d8:fa:cf:39:07:6c:dd:42:85:0f:f3:2d:
4e:ca:fd:32:64:31:36:aa:a7:42:7b:25:09:7b:72:3a:d5:3f:
e2:cd:91:91
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAZ+zRzQAISjsMszkGmLEjh8WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTEyNzcyM2VhMGNmZDA3MjQ3MTNiMjkxNzM0Y2FhMzUz
ZTIwZWEwHhcNMjYwNzMwMTM0NjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmY5NTM5ZjExMDU5YWM3NDNhNWNiNDUwMGQ4MzQzZGU3NzU3MGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vhnQpgHHsMvhbkef2ae+M857+mS
qT3u9aPsIueWEzCPyLMj5xRt0BCcWGaJ53WpfphaahwnrP/GvhOYeEezYs5kBOLR
CJcGso8fltoEiV2MQ+xNM9ThhftCd9UI/MOvxE5U72g829jz+H0x8MCAXLIjuImB
QLCKo3cNDoClfq4iuALOtjpTX0NjKT67AdASJetIxj0fCbJpYj9GwLkCcVl4HBTj
hZz1qtTGqFT4PIZBSSc9EsSaQBQYkaA3vh2pTUynoBJBLptJN2ul1qByyf8J1qWa
5tI0IMzMaZFrA/cYYfduxmF6ONKM8XbODa2QVg1GdUlA8F059ga9JuBfZwIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFLb5U58RBZrHQ6XLRQDYND3ndXDZMB8GA1UdIwQY
MBaAFFBRJ3I+oM/QckcTspFzTKo1PiDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYt
NTU2MDhiNjk0NDU2LzEvdHZsVG54RUZtc2REcGN0RkFOZzBQZWQxY05rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYtNTU2MDhiNjk0NDU2
LzEvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQALv2CAwQA
VQiWAwQAW4RWAwQAuZEvAwQAucQaAwQAudsUAwQAuet7AwQAufK5AwQAwR9yAwQA
wbB2AwQAwjLCAwQBw9iUMA0GCSqGSIb3DQEBCwUAA4IBAQA3dtiDHo/fWfXCekW2
w+ItCEhavCZ48Sf26fysjWPGtbbWuPQ5O5AkQKW/7Go4L9cWo068Q/Dvkp5/yFR8
9NOwgiRx0MP5QmzTLP3FW95MqyW/Q7w48CYt9Lm9MQKgffnbJe1a7nKImdyjJwhy
SuYbcPfzJIscbnTbgps6XVE0GzieqUlPQak+bYdI15i4aCbmbTyAlrpn37TUaTDq
JOxK6l0nlSf0oJN6LEE+qnwjQx5/73ElhX3APQjcHRhu4AmYXssAjZPAVfNtoZJK
EYqAfLpefL++n8vYYQRPRivY+s85B2zdQoUP8y1Oyv0yZDE2qqdCeyUJe3I61T/i
zZGR
-----END CERTIFICATE-----
Generated at Thu Aug 13 02:26:28 2026 by rpki-client