Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/Tn5ng77xX18Flj7EQ7YaizP0HfA.roa
File: Tn5ng77xX18Flj7EQ7YaizP0HfA.roa (raw, json)
Hash identifier: CHCJga4qHQGdS7XPRJpja8I3f/1aSKKQiYWwpS8klg8=
Subject key identifier: 4E:7E:67:83:BE:F1:5F:5F:05:96:3E:C4:43:B6:1A:8B:33:F4:1D:F0
Certificate issuer: /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Certificate serial: 019E6FE9B29F1DD3B4572C397843C1246F3B
Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/Tn5ng77xX18Flj7EQ7YaizP0HfA.roa
Signing time: Thu 28 May 2026 18:47:27 +0000
ROA not before: Thu 28 May 2026 18:47:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62240
IP address blocks: 85.203.8.0/24 maxlen: 24
85.203.15.0/24 maxlen: 24
85.203.22.0/24 maxlen: 24
85.203.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6f:e9:b2:9f:1d:d3:b4:57:2c:39:78:43:c1:24:6f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Validity
Not Before: May 28 18:47:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e7e6783bef15f5f05963ec443b61a8b33f41df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9d:d5:89:36:c9:76:5d:f1:84:19:44:1b:6e:
3b:1b:bd:44:7b:f8:ed:85:a1:63:62:f7:1d:84:95:
f3:e8:5e:21:30:c1:c6:12:57:6a:03:ff:d3:a6:28:
96:31:79:17:ff:b2:9b:ac:98:58:cc:ba:d8:41:c9:
45:c5:72:84:28:96:e6:b0:ec:8b:28:4b:88:14:4c:
26:18:11:a7:99:65:c4:e5:32:42:7e:62:fd:b8:42:
e2:73:65:ff:de:95:02:4b:d6:f0:e5:c1:1f:ff:c0:
35:50:1b:0c:cd:42:5c:42:4b:02:e1:8f:e4:d9:bf:
f3:9c:96:31:a4:17:a7:73:39:09:15:f0:77:b0:aa:
67:ed:ce:70:ba:bd:1e:d1:62:24:34:06:30:10:cf:
c4:28:34:99:9a:18:bb:80:86:47:5f:1c:f0:d1:27:
c1:5d:bd:1d:fd:23:ca:47:fa:66:91:1b:4d:5b:5e:
7a:aa:03:97:b1:85:49:ce:44:5a:91:42:3a:5b:ae:
cf:da:1e:ae:a5:21:75:1d:39:63:a6:80:91:50:1b:
40:71:97:7d:1b:84:97:7c:c5:ff:27:74:d3:5e:da:
0c:ca:6e:c9:8b:fb:95:69:8d:d6:8f:da:b2:9a:ca:
30:87:77:4a:33:c8:ad:f1:fc:cc:2e:56:99:53:59:
a1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7E:67:83:BE:F1:5F:5F:05:96:3E:C4:43:B6:1A:8B:33:F4:1D:F0
X509v3 Authority Key Identifier:
keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/Tn5ng77xX18Flj7EQ7YaizP0HfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.8.0/24
85.203.15.0/24
85.203.22.0/24
85.203.36.0/24
Signature Algorithm: sha256WithRSAEncryption
79:c5:f3:d5:90:13:a2:bd:86:d1:79:17:bb:49:d1:5b:8f:43:
b9:b8:ce:20:18:9a:97:2c:46:3a:23:3c:b0:78:e5:51:23:65:
1a:e2:dd:8b:bc:80:5f:02:66:51:bb:3d:ff:a2:24:c4:e9:34:
81:54:3e:8f:7d:b3:9e:6b:85:1d:71:f9:94:ef:9c:7b:0e:b2:
07:18:2f:53:f9:4b:b6:9a:7a:23:27:d3:f1:49:4c:18:92:b9:
82:a6:aa:5c:b3:6e:ac:9f:59:a1:e0:cf:f5:2a:f1:98:ac:5b:
f0:61:d5:92:36:4a:23:2b:bd:46:6e:e1:c6:64:4b:6f:57:b5:
c3:0c:8a:4b:9c:73:44:8e:6c:48:0c:f0:93:95:e4:be:71:7c:
cf:d9:c7:d8:5a:ad:4b:73:77:af:14:e7:85:a1:f1:d8:e8:7f:
33:29:71:f2:62:2c:d5:56:03:6f:4c:4a:b3:d5:f4:d6:e9:7b:
33:96:6b:8d:df:6b:ff:8f:5b:01:b7:05:c3:8e:c2:33:5a:68:
18:80:9f:9a:53:00:12:7d:46:0a:f0:94:63:5e:04:49:5f:d0:
34:3c:b9:5b:a3:d3:40:c0:e9:db:9f:6a:aa:1f:31:7f:66:d7:
9e:3b:3e:01:4c:e0:b2:5d:6c:c7:83:d6:be:33:43:02:64:ab:
b5:f7:a3:cf
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ5v6bKfHdO0Vyw5eEPBJG87MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MmJkNzZhNWNhYzI4M2VjZTBhMGY4ZWFiMmM5NzAyMTQw
MWZiODkwHhcNMjYwNTI4MTg0NzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTdlNjc4M2JlZjE1ZjVmMDU5NjNlYzQ0M2I2MWE4YjMzZjQxZGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz53ViTbJdl3xhBlEG247G71Ee/jt
haFjYvcdhJXz6F4hMMHGEldqA//TpiiWMXkX/7KbrJhYzLrYQclFxXKEKJbmsOyL
KEuIFEwmGBGnmWXE5TJCfmL9uELic2X/3pUCS9bw5cEf/8A1UBsMzUJcQksC4Y/k
2b/znJYxpBenczkJFfB3sKpn7c5wur0e0WIkNAYwEM/EKDSZmhi7gIZHXxzw0SfB
Xb0d/SPKR/pmkRtNW156qgOXsYVJzkRakUI6W67P2h6upSF1HTljpoCRUBtAcZd9
G4SXfMX/J3TTXtoMym7Ji/uVaY3Wj9qymsowh3dKM8it8fzMLlaZU1mhmQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFE5+Z4O+8V9fBZY+xEO2Gosz9B3wMB8GA1UdIwQY
MBaAFJYr12pcrCg+zgoPjqsslwIUAfuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMt
NmFiMTExNTVmNmZiLzEvVG41bmc3N3hYMThGbGo3RVE3WWFpelAwSGZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMtNmFiMTExNTVmNmZi
LzEvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVcsIAwQA
VcsPAwQAVcsWAwQAVcskMA0GCSqGSIb3DQEBCwUAA4IBAQB5xfPVkBOivYbReRe7
SdFbj0O5uM4gGJqXLEY6IzyweOVRI2Ua4t2LvIBfAmZRuz3/oiTE6TSBVD6PfbOe
a4UdcfmU75x7DrIHGC9T+Uu2mnojJ9PxSUwYkrmCpqpcs26sn1mh4M/1KvGYrFvw
YdWSNkojK71GbuHGZEtvV7XDDIpLnHNEjmxIDPCTleS+cXzP2cfYWq1Lc3evFOeF
ofHY6H8zKXHyYizVVgNvTEqz1fTW6XszlmuN32v/j1sBtwXDjsIzWmgYgJ+aUwAS
fUYK8JRjXgRJX9A0PLlbo9NAwOnbn2qqHzF/ZteeOz4BTOCyXWzHg9a+M0MCZKu1
96PP
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:58:53 2026 by rpki-client