Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/TgSCC5KwM7742j8mJJTq-gFMwHE.roa
File: TgSCC5KwM7742j8mJJTq-gFMwHE.roa (raw, json)
Hash identifier: +wOhWzlwLpRhzaq75+/ZOhGg3xC9QggYBfkia2ut1YM=
Subject key identifier: 4E:04:82:0B:92:B0:33:BE:F8:DA:3F:26:24:94:EA:FA:01:4C:C0:71
Certificate issuer: /CN=a7890440daf1c3ac38773e85215112f74b706232
Certificate serial: 019F6B791B36742CE60D3F33967A1D15CC2A
Authority key identifier: A7:89:04:40:DA:F1:C3:AC:38:77:3E:85:21:51:12:F7:4B:70:62:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/TgSCC5KwM7742j8mJJTq-gFMwHE.roa
Signing time: Thu 16 Jul 2026 15:08:46 +0000
ROA not before: Thu 16 Jul 2026 15:08:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50599
IP address blocks: 213.239.128.0/22 maxlen: 22
213.239.128.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:79:1b:36:74:2c:e6:0d:3f:33:96:7a:1d:15:cc:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7890440daf1c3ac38773e85215112f74b706232
Validity
Not Before: Jul 16 15:08:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e04820b92b033bef8da3f262494eafa014cc071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:73:e2:af:6e:a3:10:15:97:c7:31:91:c7:a4:
ed:95:8d:73:57:b8:87:56:df:02:79:e9:6c:92:4e:
86:6a:cd:7a:c3:c5:f3:dd:9d:4e:65:b6:89:ca:b8:
f8:65:b2:2d:b9:bd:85:d2:7d:d9:42:2f:86:b2:5b:
f2:25:48:69:35:31:cf:11:d7:fd:22:e6:8b:6a:30:
bd:08:09:1e:db:aa:e6:67:65:88:ff:9c:50:bc:88:
d9:cc:bb:0f:a1:11:f0:51:66:12:a5:2b:9e:e2:86:
34:e5:38:c7:b8:37:69:04:a4:e2:ce:28:74:71:52:
0b:12:11:5c:4b:99:54:9c:55:51:99:98:d1:53:ce:
a6:af:00:f9:f5:0d:bf:99:b6:54:10:6f:b5:83:27:
96:c5:05:d4:74:83:11:07:85:70:0b:2a:e1:02:88:
94:4c:5e:05:fc:46:31:61:40:75:8e:9d:90:7b:0e:
18:35:f7:e4:75:ca:9c:de:db:1b:ff:aa:6c:b1:92:
68:ef:8a:f2:ef:51:a1:5f:73:60:c1:7a:1b:c5:db:
68:79:89:aa:e6:77:37:df:94:33:84:76:cd:d3:c8:
ab:70:f6:40:99:10:49:20:2f:75:34:fb:a9:b1:48:
78:da:fb:6e:47:c3:d4:8d:3f:95:3c:1a:02:c5:2d:
b5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:04:82:0B:92:B0:33:BE:F8:DA:3F:26:24:94:EA:FA:01:4C:C0:71
X509v3 Authority Key Identifier:
keyid:A7:89:04:40:DA:F1:C3:AC:38:77:3E:85:21:51:12:F7:4B:70:62:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/TgSCC5KwM7742j8mJJTq-gFMwHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.239.128.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:11:ca:00:1d:9e:2e:1a:36:b7:7d:84:46:4a:de:1d:a3:98:
30:48:6f:ac:21:40:11:f3:d6:a8:8b:3f:06:f2:40:dd:e7:c3:
a2:71:64:9b:5d:f4:27:14:2e:75:21:66:7b:8d:13:df:a2:8c:
f3:05:5c:b6:3a:23:b2:76:13:32:2a:19:5a:08:f0:ae:ed:9e:
8d:df:d1:a0:89:7f:70:38:bc:54:6b:a7:59:e3:ae:9d:f3:b2:
60:5e:14:41:a5:77:0f:dd:95:98:13:f0:ec:e2:c0:2e:d6:7f:
f2:32:19:17:36:fa:d9:a1:44:bf:35:40:9e:ad:bd:66:b8:19:
55:6f:2f:df:2a:d2:93:3e:68:75:27:e6:09:0a:2d:fd:b5:2e:
d6:e7:e2:09:fa:4d:42:a9:0b:18:18:26:16:52:ed:09:a4:3f:
b6:d7:e4:c9:9f:ba:3a:0a:ce:c4:fc:f6:67:1d:80:95:fe:c6:
be:23:c4:cc:06:3d:9a:64:9a:82:8d:53:27:09:93:61:2c:98:
2c:80:a0:3b:dd:cf:81:0d:b5:2f:ed:1a:54:53:00:db:de:2f:
77:15:3e:3c:c1:4f:dd:96:33:c2:f2:fa:cc:68:a3:c9:7b:5f:
04:61:7d:5e:2b:37:d8:31:af:b0:a0:9d:1f:e7:cb:af:c9:e9:
3a:34:5a:dc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9reRs2dCzmDT8zlnodFcwqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ODkwNDQwZGFmMWMzYWMzODc3M2U4NTIxNTExMmY3NGI3
MDYyMzIwHhcNMjYwNzE2MTUwODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTA0ODIwYjkyYjAzM2JlZjhkYTNmMjYyNDk0ZWFmYTAxNGNjMDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nPir26jEBWXxzGRx6TtlY1zV7iH
Vt8Ceelskk6Gas16w8Xz3Z1OZbaJyrj4ZbItub2F0n3ZQi+GslvyJUhpNTHPEdf9
IuaLajC9CAke26rmZ2WI/5xQvIjZzLsPoRHwUWYSpSue4oY05TjHuDdpBKTizih0
cVILEhFcS5lUnFVRmZjRU86mrwD59Q2/mbZUEG+1gyeWxQXUdIMRB4VwCyrhAoiU
TF4F/EYxYUB1jp2Qew4YNffkdcqc3tsb/6pssZJo74ry71GhX3NgwXobxdtoeYmq
5nc335QzhHbN08ircPZAmRBJIC91NPupsUh42vtuR8PUjT+VPBoCxS211QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE4EgguSsDO++No/JiSU6voBTMBxMB8GA1UdIwQY
MBaAFKeJBEDa8cOsOHc+hSFREvdLcGIyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDRrRVFOcnh3Nnc0ZHo2RklWRVM5MHR3WWpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9hY2MwOWMtZTNkYy00Njk3LWFjNDkt
OGQ5N2U4Nzg1ZDRmLzEvVGdTQ0M1S3dNNzc0Mmo4bUpKVHEtZ0ZNd0hFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9hY2MwOWMtZTNkYy00Njk3LWFjNDktOGQ5N2U4Nzg1ZDRm
LzEvcDRrRVFOcnh3Nnc0ZHo2RklWRVM5MHR3WWpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1e+AMA0G
CSqGSIb3DQEBCwUAA4IBAQCaEcoAHZ4uGja3fYRGSt4do5gwSG+sIUAR89aoiz8G
8kDd58OicWSbXfQnFC51IWZ7jRPfoozzBVy2OiOydhMyKhlaCPCu7Z6N39GgiX9w
OLxUa6dZ466d87JgXhRBpXcP3ZWYE/Ds4sAu1n/yMhkXNvrZoUS/NUCerb1muBlV
by/fKtKTPmh1J+YJCi39tS7W5+IJ+k1CqQsYGCYWUu0JpD+21+TJn7o6Cs7E/PZn
HYCV/sa+I8TMBj2aZJqCjVMnCZNhLJgsgKA73c+BDbUv7RpUUwDb3i93FT48wU/d
ljPC8vrMaKPJe18EYX1eKzfYMa+woJ0f58uvyek6NFrc
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:27:43 2026 by rpki-client