Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/TSXqej0WW_9xcvEDJRvBI7pt5LE.roa
File: TSXqej0WW_9xcvEDJRvBI7pt5LE.roa (raw, json)
Hash identifier: ZTp/vNt08nHTq/Tb6B374ia403187ADNP0tAFEOnaq0=
Subject key identifier: 4D:25:EA:7A:3D:16:5B:FF:71:72:F1:03:25:1B:C1:23:BA:6D:E4:B1
Certificate issuer: /CN=1aed0204ff51f289421854fa62b3c231c35eaf6c
Certificate serial: 019F236888159EC9BDC207ED11C5D3B3C467
Authority key identifier: 1A:ED:02:04:FF:51:F2:89:42:18:54:FA:62:B3:C2:31:C3:5E:AF:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gu0CBP9R8olCGFT6YrPCMcNer2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/TSXqej0WW_9xcvEDJRvBI7pt5LE.roa
Signing time: Thu 02 Jul 2026 15:18:00 +0000
ROA not before: Thu 02 Jul 2026 15:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209897
IP address blocks: 193.149.240.0/22 maxlen: 24
193.149.244.0/23 maxlen: 24
193.149.248.0/21 maxlen: 24
193.149.253.0/24 maxlen: 24
193.149.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/Gu0CBP9R8olCGFT6YrPCMcNer2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/Gu0CBP9R8olCGFT6YrPCMcNer2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gu0CBP9R8olCGFT6YrPCMcNer2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 18:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:88:15:9e:c9:bd:c2:07:ed:11:c5:d3:b3:c4:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aed0204ff51f289421854fa62b3c231c35eaf6c
Validity
Not Before: Jul 2 15:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d25ea7a3d165bff7172f103251bc123ba6de4b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:54:ee:6c:6e:d9:e2:dc:d7:e1:b2:9e:c6:a1:
f2:4d:70:f2:13:e8:5e:32:43:b1:fa:68:86:ff:c1:
cd:c5:cd:2d:f0:2e:18:d9:e5:c1:6d:37:16:ad:d5:
08:12:cc:be:9d:b4:0e:83:81:55:d2:27:39:6f:07:
78:1d:8f:c8:78:b8:a1:d6:d0:60:8a:dc:21:dd:e5:
27:3f:76:a9:1c:37:4e:68:6d:9b:d3:8b:91:fd:f6:
2d:a1:77:89:d9:60:76:08:d8:c5:dc:f9:6a:a7:c3:
19:36:ce:45:2d:0e:a6:7d:5b:32:60:d9:47:f1:02:
36:df:14:92:42:5f:e0:81:7a:43:63:6b:4c:fd:08:
1c:29:59:67:42:2f:71:1e:40:11:72:0e:77:df:84:
2a:b6:a9:d1:df:78:85:c2:96:89:10:30:44:e4:31:
a3:73:3b:0f:43:5d:66:f9:de:d3:9f:62:3b:99:07:
80:36:5f:23:ce:d9:df:9d:cb:e1:bb:cd:1c:9a:b2:
eb:f4:3b:14:4f:74:3f:4c:6d:32:bf:df:db:e7:24:
5c:b5:2d:b7:09:db:b0:e6:f5:bb:28:a2:fe:4f:7c:
f8:93:35:ec:9d:70:52:cc:75:32:32:4f:1a:e7:75:
80:7c:56:cd:61:5e:f8:f6:2a:55:2c:08:1e:49:a1:
8f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:25:EA:7A:3D:16:5B:FF:71:72:F1:03:25:1B:C1:23:BA:6D:E4:B1
X509v3 Authority Key Identifier:
keyid:1A:ED:02:04:FF:51:F2:89:42:18:54:FA:62:B3:C2:31:C3:5E:AF:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gu0CBP9R8olCGFT6YrPCMcNer2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/TSXqej0WW_9xcvEDJRvBI7pt5LE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/Gu0CBP9R8olCGFT6YrPCMcNer2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.149.240.0-193.149.245.255
193.149.248.0/21
Signature Algorithm: sha256WithRSAEncryption
a2:cf:4d:92:f6:48:d1:14:f1:8b:16:3d:a0:69:b7:cc:7c:a4:
1e:30:4e:b1:aa:7b:bc:2d:3d:6a:8a:0d:f5:bd:e1:1a:8f:a9:
f8:14:3d:26:41:76:15:ae:9e:c8:54:f3:36:c7:e3:39:6d:44:
9d:c8:14:8e:f4:0a:86:89:57:70:b7:91:d8:d1:f3:c3:ed:e7:
c0:3c:15:b5:a7:d2:3c:34:cc:d8:e4:b0:f2:1a:2d:67:b8:aa:
42:9c:08:0a:12:04:99:b8:80:6b:07:94:45:5c:de:71:37:8a:
94:e1:e0:e2:81:55:91:5d:d2:b4:17:ba:94:fa:86:9f:f7:cd:
71:a4:84:db:52:c6:3b:10:18:87:40:71:57:7f:21:87:c8:0b:
bc:50:03:d8:04:7f:df:52:54:b9:39:2b:4b:4e:1e:ee:7b:74:
d2:1b:8b:7d:65:f5:c0:49:e8:ed:ea:e4:a2:fd:e5:99:5e:28:
44:23:e2:50:6f:bf:e2:41:71:ef:07:9e:ab:d3:38:1e:f3:a9:
d5:96:98:f1:48:bb:a7:e3:fa:6e:e5:f3:fb:14:04:ce:82:30:
cd:8f:b8:be:b3:e8:0c:36:2d:ba:72:4f:f3:b8:d5:54:d1:49:
fc:3a:9a:d4:6e:04:a3:17:1e:aa:6a:f9:6f:63:6c:22:c1:20:
e1:c3:c8:0e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 7 00:16:25 2026 by rpki-client