Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/tgvXIki0g-pfbDcyTN4Jty571wU.roa
File: tgvXIki0g-pfbDcyTN4Jty571wU.roa (raw, json)
Hash identifier: aBHUTes6NUct+J0pVH5+kLoc6/IlFtoI9S3mihoYFaM=
Subject key identifier: B6:0B:D7:22:48:B4:83:EA:5F:6C:37:32:4C:DE:09:B7:2E:7B:D7:05
Certificate issuer: /CN=4017b4c9f01da83469a9851f95106e396fd25e64
Certificate serial: 019F23685FA8888D52FF6CA3B6C7F287315D
Authority key identifier: 40:17:B4:C9:F0:1D:A8:34:69:A9:85:1F:95:10:6E:39:6F:D2:5E:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QBe0yfAdqDRpqYUflRBuOW_SXmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/tgvXIki0g-pfbDcyTN4Jty571wU.roa
Signing time: Thu 02 Jul 2026 15:17:50 +0000
ROA not before: Thu 02 Jul 2026 15:17:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3170
IP address blocks: 5.198.137.0/24 maxlen: 24
5.198.138.0/24 maxlen: 24
5.198.139.0/24 maxlen: 24
5.198.141.0/24 maxlen: 24
83.137.211.0/24 maxlen: 24
83.137.212.0/24 maxlen: 24
188.92.138.0/24 maxlen: 24
188.92.139.0/24 maxlen: 24
2001:67c:128::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/QBe0yfAdqDRpqYUflRBuOW_SXmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/QBe0yfAdqDRpqYUflRBuOW_SXmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QBe0yfAdqDRpqYUflRBuOW_SXmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:5f:a8:88:8d:52:ff:6c:a3:b6:c7:f2:87:31:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4017b4c9f01da83469a9851f95106e396fd25e64
Validity
Not Before: Jul 2 15:17:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b60bd72248b483ea5f6c37324cde09b72e7bd705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e9:8a:18:d9:87:e9:59:a1:3a:28:4c:fe:5c:
fe:b5:68:3e:9f:25:24:61:12:5c:b0:a8:f2:f1:15:
a9:19:f0:8c:6d:be:89:1d:bf:03:79:ad:9e:c5:58:
fc:dc:c1:b3:22:91:cf:99:4e:c1:3d:ad:fd:d9:4e:
03:4e:44:c9:ae:af:4f:ac:f9:4d:0c:4a:1f:b6:19:
58:26:31:0a:a7:b5:22:70:dd:ca:51:95:6b:84:0f:
11:03:8d:54:a1:3a:2b:6a:6c:55:7e:01:d8:a1:d1:
41:50:7c:c4:e7:2e:3b:66:09:c0:b7:ed:6b:f0:0f:
87:c0:07:ae:f2:dc:28:7c:c2:b8:be:8d:c7:ea:e9:
cc:36:0e:df:53:60:ad:85:85:21:b8:d2:4a:de:b7:
a5:db:2b:bb:5f:9f:02:42:8c:09:46:05:09:75:72:
36:49:69:d6:7b:fa:d9:c1:d4:63:02:94:f4:80:da:
1c:45:8f:bb:ed:83:c7:92:10:c6:cd:f5:b0:db:6c:
40:80:d3:5a:3d:e4:90:2d:81:6e:d9:4e:c6:58:60:
69:e4:79:a7:29:d3:5c:c5:46:6c:2d:67:92:df:42:
3b:e7:ce:5c:88:2b:c9:01:7a:d6:1b:7c:fa:b8:9b:
81:d0:f1:a6:33:38:81:ac:53:31:f7:d9:08:64:cb:
2e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0B:D7:22:48:B4:83:EA:5F:6C:37:32:4C:DE:09:B7:2E:7B:D7:05
X509v3 Authority Key Identifier:
keyid:40:17:B4:C9:F0:1D:A8:34:69:A9:85:1F:95:10:6E:39:6F:D2:5E:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBe0yfAdqDRpqYUflRBuOW_SXmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/tgvXIki0g-pfbDcyTN4Jty571wU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/QBe0yfAdqDRpqYUflRBuOW_SXmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.198.137.0-5.198.139.255
5.198.141.0/24
83.137.211.0-83.137.212.255
188.92.138.0/23
IPv6:
2001:67c:128::/48
Signature Algorithm: sha256WithRSAEncryption
c4:4f:02:f0:a0:4e:dc:a7:bd:a8:71:83:bd:ee:b7:e3:d9:d8:
26:53:a2:06:0e:30:cc:29:63:42:4a:b1:bf:22:4c:d0:18:31:
f8:c2:cf:ea:4d:08:96:2c:8e:5c:df:67:bc:e3:78:da:3f:e6:
a0:fc:0a:35:2f:19:20:aa:62:c4:bb:52:72:2a:c0:a4:6e:e7:
e5:86:0c:c2:62:c9:dc:2d:d8:16:26:ae:ed:92:92:ed:5d:1e:
4c:a2:5a:07:e8:d4:63:11:a3:5a:f5:73:d4:bd:13:f1:16:69:
d2:1e:de:50:f0:c0:68:dc:5c:96:f7:40:fa:a3:c5:0d:6b:5b:
99:6a:f0:9e:3e:0b:85:58:73:fb:c2:4b:ce:c4:31:25:0b:aa:
75:b6:c9:4d:77:1d:f8:91:f4:b9:f2:2d:35:52:10:d3:ce:a1:
c6:d7:39:bc:e5:40:9d:5c:04:e6:84:82:24:7b:5f:2e:60:ff:
a3:6b:ff:40:28:1d:30:b7:8b:85:24:ff:e7:7f:0f:73:b7:91:
3b:41:bb:9a:b2:cd:1e:7c:11:4f:1f:c5:e1:33:45:63:d5:06:
ce:a6:64:fa:f0:ed:0b:90:17:03:55:36:28:27:28:56:0e:5d:
59:92:6c:73:ed:dc:7f:de:3c:2a:81:24:67:26:f5:63:3f:72:
ca:78:13:fe
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAZ8jaF+oiI1S/2yjtsfyhzFdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMTdiNGM5ZjAxZGE4MzQ2OWE5ODUxZjk1MTA2ZTM5NmZk
MjVlNjQwHhcNMjYwNzAyMTUxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjBiZDcyMjQ4YjQ4M2VhNWY2YzM3MzI0Y2RlMDliNzJlN2JkNzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvemKGNmH6VmhOihM/lz+tWg+nyUk
YRJcsKjy8RWpGfCMbb6JHb8Dea2exVj83MGzIpHPmU7BPa392U4DTkTJrq9PrPlN
DEofthlYJjEKp7UicN3KUZVrhA8RA41UoToramxVfgHYodFBUHzE5y47ZgnAt+1r
8A+HwAeu8twofMK4vo3H6unMNg7fU2CthYUhuNJK3rel2yu7X58CQowJRgUJdXI2
SWnWe/rZwdRjApT0gNocRY+77YPHkhDGzfWw22xAgNNaPeSQLYFu2U7GWGBp5Hmn
KdNcxUZsLWeS30I7585ciCvJAXrWG3z6uJuB0PGmMziBrFMx99kIZMsumwIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFLYL1yJItIPqX2w3MkzeCbcue9cFMB8GA1UdIwQY
MBaAFEAXtMnwHag0aamFH5UQbjlv0l5kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUJlMHlmQWRxRFJwcVlVZmxSQnVPV19TWG1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8zMTI1MjktNzNmNi00ODA5LWFmOWIt
ZThkNzA3MTdmZjhhLzEvdGd2WElraTBnLXBmYkRjeVRONEp0eTU3MXdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8zMTI1MjktNzNmNi00ODA5LWFmOWItZThkNzA3MTdmZjhh
LzEvUUJlMHlmQWRxRFJwcVlVZmxSQnVPV19TWG1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAuBAIAATAoMAwDBAAFxokD
BAIFxogDBAAFxo0wDAMEAFOJ0wMEAFOJ1AMEAbxcijAPBAIAAjAJAwcAIAEGfAEo
MA0GCSqGSIb3DQEBCwUAA4IBAQDETwLwoE7cp72ocYO97rfj2dgmU6IGDjDMKWNC
SrG/IkzQGDH4ws/qTQiWLI5c32e843jaP+ag/Ao1LxkgqmLEu1JyKsCkbuflhgzC
YsncLdgWJq7tkpLtXR5MoloH6NRjEaNa9XPUvRPxFmnSHt5Q8MBo3FyW90D6o8UN
a1uZavCePguFWHP7wkvOxDElC6p1tslNdx34kfS58i01UhDTzqHG1zm85UCdXATm
hIIke18uYP+ja/9AKB0wt4uFJP/nfw9zt5E7Qbuass0efBFPH8XhM0Vj1QbOpmT6
8O0LkBcDVTYoJyhWDl1Zkmxz7dx/3jwqgSRnJvVjP3LKeBP+
-----END CERTIFICATE-----
Generated at Wed Jul 8 19:33:39 2026 by rpki-client