Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/Sy1XXaKv9JrEyY29f5xuY6WPTZ4.roa
File: Sy1XXaKv9JrEyY29f5xuY6WPTZ4.roa (raw, json)
Hash identifier: QzQzh3Bmon/hK1H7MVc4u0jpNg3xapgmcfibGio31+E=
Subject key identifier: 4B:2D:57:5D:A2:AF:F4:9A:C4:C9:8D:BD:7F:9C:6E:63:A5:8F:4D:9E
Certificate issuer: /CN=4ca66f3c0f25774e696d2a46723277eb961128c3
Certificate serial: 019E1AE159DDD5381E10E703C93D32FE21A9
Authority key identifier: 4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/Sy1XXaKv9JrEyY29f5xuY6WPTZ4.roa
Signing time: Tue 12 May 2026 06:30:36 +0000
ROA not before: Tue 12 May 2026 06:30:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51396
IP address blocks: 176.65.132.0/24 maxlen: 24
176.65.134.0/24 maxlen: 24
176.65.139.0/24 maxlen: 24
176.65.148.0/24 maxlen: 24
176.65.149.0/24 maxlen: 24
176.65.150.0/24 maxlen: 24
176.65.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1a:e1:59:dd:d5:38:1e:10:e7:03:c9:3d:32:fe:21:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca66f3c0f25774e696d2a46723277eb961128c3
Validity
Not Before: May 12 06:30:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b2d575da2aff49ac4c98dbd7f9c6e63a58f4d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:61:68:61:8a:39:c1:2c:97:11:77:4d:6c:3e:
82:af:f2:4d:ea:36:82:a7:43:16:99:67:e0:29:cf:
a2:3b:64:16:06:c1:b8:ec:25:c6:6e:46:af:95:2a:
e0:7c:06:fd:b4:88:26:aa:8c:85:9d:ae:d2:67:70:
3c:60:52:77:ff:aa:98:dc:aa:10:c5:95:39:e5:43:
2c:4f:5e:a4:b3:db:e4:d9:f3:62:20:6c:38:32:ca:
4f:9b:58:fc:29:c9:da:85:8f:37:b2:d6:c9:1e:d9:
16:9f:c1:1e:f1:d7:da:83:1e:e2:49:c3:2e:87:42:
bb:b0:8f:ae:a3:ab:0f:6a:72:27:f1:38:ce:42:a5:
41:15:4e:ed:33:ec:2c:e1:2d:e7:0c:78:0f:4d:46:
04:cc:50:d2:4e:03:0c:ef:57:fa:b0:fe:e7:e6:ed:
90:44:50:cd:32:12:de:f3:9f:d0:36:2a:84:3f:78:
c5:fb:f1:1f:14:6a:fc:52:40:eb:d4:33:df:b5:d3:
c3:8c:07:6f:d8:34:ff:06:a5:14:a8:d8:e6:e6:24:
11:ff:4d:95:e9:4f:eb:7d:ec:e6:2d:07:30:f7:6e:
9b:00:b4:c0:b7:61:cc:43:e6:7c:4c:7f:10:27:9c:
f4:e1:22:ca:60:fa:85:5b:a5:0f:4e:56:0c:b2:ec:
48:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2D:57:5D:A2:AF:F4:9A:C4:C9:8D:BD:7F:9C:6E:63:A5:8F:4D:9E
X509v3 Authority Key Identifier:
keyid:4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/Sy1XXaKv9JrEyY29f5xuY6WPTZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.65.132.0/24
176.65.134.0/24
176.65.139.0/24
176.65.148.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:c4:39:e7:c7:28:02:69:54:30:f6:62:14:f7:93:54:65:c4:
68:4a:24:6e:35:d3:78:61:d0:ca:d7:b0:ef:a7:f7:8a:91:63:
db:77:5f:cd:ae:97:f3:95:38:39:a1:62:86:e2:0c:56:ad:56:
e3:ff:8c:91:42:01:b1:79:34:77:20:4c:7d:b8:65:a2:47:88:
17:e3:1d:2c:33:d0:a8:88:ac:f0:7c:c4:74:58:b7:53:ea:d1:
98:58:72:42:0a:00:f8:c4:38:e9:11:48:4b:52:f0:10:1a:12:
56:68:91:12:bc:0f:16:bd:21:8d:be:44:26:01:e8:30:42:8a:
29:e1:e5:d6:ea:25:40:b2:62:ad:ed:27:18:76:d0:a9:7c:d4:
ea:f3:85:e3:6a:63:41:b9:d9:93:0b:c3:bf:23:c8:9b:74:29:
e9:13:11:e6:bf:cf:d7:b0:af:4a:5b:09:b3:df:d8:cc:17:2a:
43:c2:19:80:af:47:d3:43:23:3b:a6:58:05:57:a9:62:70:2d:
1c:72:c4:9a:d3:50:64:3d:71:06:d9:ad:ac:b4:91:83:98:88:
c6:42:f6:2c:ed:5a:20:e2:17:f5:cd:36:d9:1b:93:0e:60:34:
67:67:a7:58:fa:0a:d0:96:d6:e5:e9:0e:25:22:56:03:81:91:
83:67:75:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:32:05 2026 by rpki-client