Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/I_tvpcw1DStUnDyLlqJtm7bxEiM.roa
File: I_tvpcw1DStUnDyLlqJtm7bxEiM.roa (raw, json)
Hash identifier: HB1SG2HkW3RuY/uEbn4LG1m5LnBHTalDVklBlrK2Va8=
Subject key identifier: 23:FB:6F:A5:CC:35:0D:2B:54:9C:3C:8B:96:A2:6D:9B:B6:F1:12:23
Certificate issuer: /CN=733c01fc6bdfeb090d5732c872eeda53cb421abe
Certificate serial: 01A111DA5DF3601B1A2D04F0821CC9FEFBF7
Authority key identifier: 73:3C:01:FC:6B:DF:EB:09:0D:57:32:C8:72:EE:DA:53:CB:42:1A:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czwB_Gvf6wkNVzLIcu7aU8tCGr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/I_tvpcw1DStUnDyLlqJtm7bxEiM.roa
Signing time: Tue 06 Oct 2026 15:34:45 +0000
ROA not before: Tue 06 Oct 2026 15:34:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19905
IP address blocks: 5.255.48.0/21 maxlen: 24
94.198.172.0/22 maxlen: 24
138.124.224.0/22 maxlen: 24
138.124.236.0/22 maxlen: 24
185.17.96.0/22 maxlen: 24
185.22.4.0/22 maxlen: 24
185.49.36.0/22 maxlen: 24
185.100.88.0/22 maxlen: 24
213.178.132.0/22 maxlen: 24
217.30.24.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/czwB_Gvf6wkNVzLIcu7aU8tCGr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:da:5d:f3:60:1b:1a:2d:04:f0:82:1c:c9:fe:fb:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733c01fc6bdfeb090d5732c872eeda53cb421abe
Validity
Not Before: Oct 6 15:34:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23fb6fa5cc350d2b549c3c8b96a26d9bb6f11223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:53:e6:ef:e4:39:a6:b3:72:0d:99:3a:be:3d:
98:42:0d:0a:9c:c1:3f:eb:3d:83:42:eb:33:90:cc:
b4:7f:cc:b7:68:b7:31:27:26:59:16:c2:ca:94:c3:
82:73:41:50:7d:c1:de:d0:de:40:e0:d0:f3:72:06:
e9:3e:fd:39:3d:99:32:4e:2a:bc:8c:5d:1f:79:8b:
6a:bd:06:e0:8a:f5:3d:ff:a5:bc:f2:91:bc:4d:0e:
f8:e8:9e:4d:f8:62:81:08:ca:86:93:2d:5d:b3:f3:
28:47:09:30:eb:ce:40:28:0e:82:1e:13:16:4f:f6:
24:b6:66:7c:07:5a:8d:db:e8:4c:01:a1:bd:9b:51:
6c:e0:b3:77:57:c3:6a:a4:30:39:60:bc:3b:46:7d:
06:d0:de:2d:f7:cb:78:de:31:73:17:19:ae:78:78:
80:af:77:32:cd:d9:60:71:21:2e:ce:2c:d6:d6:2b:
2f:fa:59:2d:7c:04:58:30:4f:8a:e0:d2:de:cf:e2:
02:8b:d8:42:cb:b0:f4:18:81:bc:76:1a:69:b1:62:
71:c3:fd:26:dd:97:3a:ef:6a:5e:e7:b0:c2:0e:ad:
5a:a9:cc:df:5f:c3:73:ae:6e:cc:e4:8e:9a:70:c2:
e5:bb:28:c7:be:05:a8:b5:37:b2:d4:f6:13:43:9e:
81:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FB:6F:A5:CC:35:0D:2B:54:9C:3C:8B:96:A2:6D:9B:B6:F1:12:23
X509v3 Authority Key Identifier:
keyid:73:3C:01:FC:6B:DF:EB:09:0D:57:32:C8:72:EE:DA:53:CB:42:1A:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czwB_Gvf6wkNVzLIcu7aU8tCGr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/I_tvpcw1DStUnDyLlqJtm7bxEiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.255.48.0/21
94.198.172.0/22
138.124.224.0/22
138.124.236.0/22
185.17.96.0/22
185.22.4.0/22
185.49.36.0/22
185.100.88.0/22
213.178.132.0/22
217.30.24.0/21
Signature Algorithm: sha256WithRSAEncryption
25:95:07:a2:8d:b8:34:22:22:08:ae:88:5f:b0:d2:76:b9:f4:
8c:ad:09:ce:0c:68:58:8d:b1:87:35:46:af:f7:62:42:78:89:
68:b1:d2:e1:22:9c:ca:b9:3f:03:7e:2e:74:5f:4d:05:7e:ec:
34:c4:ef:15:ad:be:c6:c5:87:66:5d:c5:c0:47:cc:dd:31:ce:
cd:83:36:f1:6b:4b:bd:b9:65:a6:bf:77:19:4b:d1:d3:ac:86:
14:de:59:90:29:f3:60:8b:1e:6f:9d:a9:d0:65:ed:83:46:c8:
89:7e:14:8d:95:8e:67:df:05:d3:f3:1e:c7:5b:3a:c2:78:c7:
ac:00:88:f2:35:2a:ed:f6:29:47:56:bc:6e:cc:92:e9:58:23:
b8:58:87:1b:9d:64:93:be:7a:07:64:ec:bd:7b:5f:4d:8a:32:
97:87:62:b2:db:99:00:44:0b:e1:d2:5b:82:a8:17:2d:27:e0:
f4:01:5a:06:fd:0a:91:3c:c7:a3:a0:88:ac:61:74:df:a9:b6:
dc:32:41:d5:be:77:be:46:18:83:fe:26:ff:95:d9:b2:b2:42:
36:fd:70:65:f3:2b:76:fc:a3:1e:64:22:5c:42:a6:b7:b4:d4:
dd:a6:a5:83:bb:77:04:77:80:1d:b5:74:a0:46:f8:97:15:a7:
60:9d:d7:a4
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAaER2l3zYBsaLQTwghzJ/vv3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczM2MwMWZjNmJkZmViMDkwZDU3MzJjODcyZWVkYTUzY2I0
MjFhYmUwHhcNMjYxMDA2MTUzNDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyM2ZiNmZhNWNjMzUwZDJiNTQ5YzNjOGI5NmEyNmQ5YmI2ZjExMjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7FPm7+Q5prNyDZk6vj2YQg0KnME/
6z2DQuszkMy0f8y3aLcxJyZZFsLKlMOCc0FQfcHe0N5A4NDzcgbpPv05PZkyTiq8
jF0feYtqvQbgivU9/6W88pG8TQ746J5N+GKBCMqGky1ds/MoRwkw685AKA6CHhMW
T/YktmZ8B1qN2+hMAaG9m1Fs4LN3V8NqpDA5YLw7Rn0G0N4t98t43jFzFxmueHiA
r3cyzdlgcSEuzizW1isv+lktfARYME+K4NLez+ICi9hCy7D0GIG8dhppsWJxw/0m
3Zc672pe57DCDq1aqczfX8Nzrm7M5I6acMLluyjHvgWotTey1PYTQ56B2wIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFCP7b6XMNQ0rVJw8i5aibZu28RIjMB8GA1UdIwQY
MBaAFHM8Afxr3+sJDVcyyHLu2lPLQhq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3p3Ql9HdmY2d2tOVnpMSWN1N2FVOHRDR3I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8yOTIxMTEtYzQ1YS00ZjVhLTgxNmQt
NWEzYWJmZjIxNWNlLzEvSV90dnBjdzFEU3RVbkR5TGxxSnRtN2J4RWlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS8yOTIxMTEtYzQ1YS00ZjVhLTgxNmQtNWEzYWJmZjIxNWNl
LzEvY3p3Ql9HdmY2d2tOVnpMSWN1N2FVOHRDR3I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQDBf8wAwQC
XsasAwQCinzgAwQCinzsAwQCuRFgAwQCuRYEAwQCuTEkAwQCuWRYAwQC1bKEAwQD
2R4YMA0GCSqGSIb3DQEBCwUAA4IBAQAllQeijbg0IiIIrohfsNJ2ufSMrQnODGhY
jbGHNUav92JCeIlosdLhIpzKuT8Dfi50X00Ffuw0xO8Vrb7GxYdmXcXAR8zdMc7N
gzbxa0u9uWWmv3cZS9HTrIYU3lmQKfNgix5vnanQZe2DRsiJfhSNlY5n3wXT8x7H
WzrCeMesAIjyNSrt9ilHVrxuzJLpWCO4WIcbnWSTvnoHZOy9e19NijKXh2Ky25kA
RAvh0luCqBctJ+D0AVoG/QqRPMejoIisYXTfqbbcMkHVvne+RhiD/ib/ldmyskI2
/XBl8yt2/KMeZCJcQqa3tNTdpqWDu3cEd4AdtXSgRviXFadgndek
-----END CERTIFICATE-----
Generated at Mon Oct 19 20:58:02 2026 by rpki-client