Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/n_tsv6Gyy6l05YXi3Ux3ZNxYK4k.roa
File: n_tsv6Gyy6l05YXi3Ux3ZNxYK4k.roa (raw, json)
Hash identifier: tTwofU2ePVTBmlzrQLu6MXi58L90+r8cW89IO3vj7uk=
Subject key identifier: 9F:FB:6C:BF:A1:B2:CB:A9:74:E5:85:E2:DD:4C:77:64:DC:58:2B:89
Certificate issuer: /CN=19b390b62d09950d500cd6bbbd78d0390560ec42
Certificate serial: 019DD9F07AB89C9B96B271ECBA14E80283D7
Authority key identifier: 19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/n_tsv6Gyy6l05YXi3Ux3ZNxYK4k.roa
Signing time: Wed 29 Apr 2026 15:51:49 +0000
ROA not before: Wed 29 Apr 2026 15:51:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395374
IP address blocks: 185.133.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d9:f0:7a:b8:9c:9b:96:b2:71:ec:ba:14:e8:02:83:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b390b62d09950d500cd6bbbd78d0390560ec42
Validity
Not Before: Apr 29 15:51:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ffb6cbfa1b2cba974e585e2dd4c7764dc582b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d4:5a:59:f9:a2:b3:c1:24:61:cd:b7:e6:15:
d6:71:e5:16:cc:67:28:32:6c:dc:03:a2:80:e4:bc:
45:43:a2:df:f6:0b:49:4e:4b:6a:27:e8:7a:1f:a6:
30:93:7d:f3:ee:77:d6:2e:24:24:72:dd:96:cf:d8:
b4:0c:fc:23:c6:84:a9:95:39:33:aa:ce:9a:cb:5a:
02:b6:e4:70:7d:dd:e0:b3:54:00:8b:8c:07:f4:8e:
57:16:36:0a:f7:d3:59:af:1a:13:66:7a:4f:80:b2:
ef:6d:43:2c:57:e2:06:ca:ee:69:61:e5:01:03:7b:
76:72:0f:4e:78:47:b1:6b:72:8b:56:d4:a6:a5:29:
c3:f4:96:de:62:4d:45:bb:1d:df:1a:9f:dc:58:25:
3e:e8:cf:f2:11:69:0f:d0:be:2e:cb:66:a7:38:b7:
b0:f9:9b:d7:76:de:a0:50:a4:72:a1:55:ce:1e:f6:
38:99:66:de:9c:df:20:97:85:00:34:e3:56:1a:4e:
9e:95:29:07:cd:17:a3:49:ee:60:54:00:fa:c5:69:
26:e5:15:d5:0c:48:00:0d:b5:68:17:76:ea:d2:9c:
8c:ae:49:b3:ce:b6:a5:68:0f:60:a5:44:f5:bb:6a:
de:54:d9:83:fd:82:7a:8d:32:8c:ac:0e:0d:d4:93:
cb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:FB:6C:BF:A1:B2:CB:A9:74:E5:85:E2:DD:4C:77:64:DC:58:2B:89
X509v3 Authority Key Identifier:
keyid:19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/n_tsv6Gyy6l05YXi3Ux3ZNxYK4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.241.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:10:25:e2:3f:e7:d5:82:c2:e0:bd:c0:c7:5f:46:5d:b5:76:
dc:d2:cf:33:1b:e5:c0:e5:8a:66:4d:73:c5:67:11:68:54:10:
b4:da:47:ae:d0:ee:93:83:e0:3a:8e:f3:40:c6:3c:9c:01:af:
7c:1f:4b:07:e4:3d:56:93:ca:99:41:fc:26:84:c4:d1:91:4d:
0c:df:4e:23:70:85:7b:7a:b0:1c:de:5a:1e:34:72:d3:22:17:
08:65:aa:93:63:ae:07:66:fe:f1:13:4a:20:3d:7e:d3:4c:f3:
8c:f6:2a:f4:05:9c:e6:8e:ce:02:85:86:8c:1d:55:ad:93:ac:
46:91:29:39:7a:3b:fe:83:47:19:9b:9f:90:8d:0f:7c:0f:d5:
27:ea:82:16:61:6f:00:0b:50:46:04:8d:25:b8:cd:3a:56:1f:
73:22:7f:2a:32:c2:32:9a:7e:ce:7e:48:c1:82:26:58:79:2d:
8c:47:bd:32:c8:6c:97:5d:df:16:e5:b5:21:ae:67:2d:33:4d:
25:c7:21:d1:4f:39:7d:14:6e:ad:7b:42:fe:8d:1c:f3:be:2e:
b6:ea:b1:bd:69:48:b2:11:de:ba:06:6c:f1:0d:7c:3a:5f:93:
4c:64:57:09:27:d8:28:14:a6:7a:8e:46:62:49:43:3b:85:70:
ee:fe:d7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:27:08 2026 by rpki-client