Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/TxbDZ92_D1JcE6gFaCzsdbEg8Dw.roa
File: TxbDZ92_D1JcE6gFaCzsdbEg8Dw.roa (raw, json)
Hash identifier: w4shAAAl4BC6mnnYlahv1hVwM6Z+ODkO+q4aaMk3Of8=
Subject key identifier: 4F:16:C3:67:DD:BF:0F:52:5C:13:A8:05:68:2C:EC:75:B1:20:F0:3C
Certificate issuer: /CN=5c002c4479bb4c96e2234399ce71f560345299d0
Certificate serial: 019D3344C34F62B3ADAB319F109722921674
Authority key identifier: 5C:00:2C:44:79:BB:4C:96:E2:23:43:99:CE:71:F5:60:34:52:99:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/TxbDZ92_D1JcE6gFaCzsdbEg8Dw.roa
Signing time: Sat 28 Mar 2026 07:07:17 +0000
ROA not before: Sat 28 Mar 2026 07:07:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210273
IP address blocks: 5.42.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:44:c3:4f:62:b3:ad:ab:31:9f:10:97:22:92:16:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c002c4479bb4c96e2234399ce71f560345299d0
Validity
Not Before: Mar 28 07:07:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f16c367ddbf0f525c13a805682cec75b120f03c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0f:40:16:e4:82:0c:c1:46:d1:38:59:be:1d:
34:a1:0d:00:6e:06:77:d9:c1:c2:fb:e8:e0:ad:a3:
8c:ab:db:fd:f0:0d:3e:56:a6:66:15:00:2d:a2:91:
dc:44:50:f6:99:4b:2a:24:ad:44:79:fa:08:1a:d0:
ea:01:7a:f2:fc:28:a1:85:15:4d:9d:75:2e:38:7b:
1b:17:57:da:b7:db:ea:59:bf:c3:41:58:66:7a:53:
43:10:fb:84:aa:06:a2:f4:a7:66:9d:3e:6b:07:c1:
a6:65:40:61:5d:4a:f1:92:60:0b:20:9e:53:45:5a:
28:08:15:f5:8d:6c:54:ba:08:a4:03:3b:47:ef:0c:
a7:53:0f:d0:64:e8:eb:77:bd:75:b9:bc:ad:8a:3b:
04:3c:a8:57:a5:14:7b:70:f5:0e:f7:c6:05:6d:a9:
bb:c8:8a:94:33:30:53:07:d0:ae:74:bc:a3:51:59:
42:4b:83:49:2d:e5:1a:1e:ca:10:5e:22:86:46:6d:
55:dc:7e:a6:75:fe:0d:b4:40:45:b5:d8:5a:39:8c:
12:1c:10:92:c8:21:b9:47:2a:0f:4c:f6:06:3b:c3:
8d:08:b1:ed:65:fe:0c:89:27:8c:42:8e:7d:61:87:
a9:e3:6a:44:da:f1:02:a1:8c:a4:18:ce:bb:51:d6:
dc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:16:C3:67:DD:BF:0F:52:5C:13:A8:05:68:2C:EC:75:B1:20:F0:3C
X509v3 Authority Key Identifier:
keyid:5C:00:2C:44:79:BB:4C:96:E2:23:43:99:CE:71:F5:60:34:52:99:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/TxbDZ92_D1JcE6gFaCzsdbEg8Dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.222.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:5b:82:74:16:14:c8:3e:04:b8:f6:3c:ab:a2:6c:70:34:4d:
8b:a9:ba:6c:0d:df:b2:31:03:9f:e2:d1:38:be:d2:ea:2f:c3:
d5:0b:c6:6d:0b:e5:66:ae:78:e2:19:25:27:fd:e5:22:6c:33:
db:d1:3a:be:b7:8f:d6:f4:91:e7:da:f3:e6:7f:5a:94:d1:d1:
33:b9:6b:c7:c2:66:db:0f:18:2a:88:9f:51:38:65:f2:d2:ee:
ab:29:4f:cd:5e:1c:e3:aa:85:8d:ce:df:1a:1a:04:e6:24:e2:
6a:4c:e1:de:08:0c:90:aa:af:71:3b:50:3e:2b:cb:da:0b:c0:
be:85:e8:5c:0e:5a:b7:53:ce:f2:b6:ff:ce:e7:f5:b2:bc:73:
a6:e7:67:ae:8d:41:9e:f1:d9:d6:dd:32:0d:07:a2:d1:f6:66:
52:31:0c:7e:2c:80:25:29:45:05:fb:86:84:ca:1b:be:9e:d9:
be:3b:93:1e:74:6f:2c:43:22:1c:8d:cb:bf:6a:8e:48:ef:aa:
b6:af:4b:23:37:a8:21:60:61:7e:2c:8c:a4:d0:8a:3a:4c:66:
ce:2d:2d:53:1d:6f:af:66:59:79:c7:d9:73:cf:44:5c:99:a6:
09:ce:bd:0f:bb:f1:cd:dd:95:de:09:e8:8c:53:a5:23:65:27:
df:72:20:82
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0zRMNPYrOtqzGfEJcikhZ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjMDAyYzQ0NzliYjRjOTZlMjIzNDM5OWNlNzFmNTYwMzQ1
Mjk5ZDAwHhcNMjYwMzI4MDcwNzE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjE2YzM2N2RkYmYwZjUyNWMxM2E4MDU2ODJjZWM3NWIxMjBmMDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ9AFuSCDMFG0ThZvh00oQ0AbgZ3
2cHC++jgraOMq9v98A0+VqZmFQAtopHcRFD2mUsqJK1EefoIGtDqAXry/CihhRVN
nXUuOHsbF1fat9vqWb/DQVhmelNDEPuEqgai9KdmnT5rB8GmZUBhXUrxkmALIJ5T
RVooCBX1jWxUugikAztH7wynUw/QZOjrd711ubytijsEPKhXpRR7cPUO98YFbam7
yIqUMzBTB9CudLyjUVlCS4NJLeUaHsoQXiKGRm1V3H6mdf4NtEBFtdhaOYwSHBCS
yCG5RyoPTPYGO8ONCLHtZf4MiSeMQo59YYep42pE2vECoYykGM67Udbc0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE8Ww2fdvw9SXBOoBWgs7HWxIPA8MB8GA1UdIwQY
MBaAFFwALER5u0yW4iNDmc5x9WA0UpnQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEFBc1JIbTdUSmJpSTBPWnpuSDFZRFJTbWRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jNTAzZDYtYjZlNC00M2UyLTkxZTYt
NzFjNTcwZGNiMGE0LzEvVHhiRFo5Ml9EMUpjRTZnRmFDenNkYkVnOER3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9jNTAzZDYtYjZlNC00M2UyLTkxZTYtNzFjNTcwZGNiMGE0
LzEvWEFBc1JIbTdUSmJpSTBPWnpuSDFZRFJTbWRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABSreMA0G
CSqGSIb3DQEBCwUAA4IBAQCMW4J0FhTIPgS49jyromxwNE2LqbpsDd+yMQOf4tE4
vtLqL8PVC8ZtC+VmrnjiGSUn/eUibDPb0Tq+t4/W9JHn2vPmf1qU0dEzuWvHwmbb
DxgqiJ9ROGXy0u6rKU/NXhzjqoWNzt8aGgTmJOJqTOHeCAyQqq9xO1A+K8vaC8C+
hehcDlq3U87ytv/O5/WyvHOm52eujUGe8dnW3TINB6LR9mZSMQx+LIAlKUUF+4aE
yhu+ntm+O5MedG8sQyIcjcu/ao5I76q2r0sjN6ghYGF+LIyk0Io6TGbOLS1THW+v
Zll5x9lzz0RcmaYJzr0Pu/HN3ZXeCeiMU6UjZSffciCC
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:05 2026 by rpki-client