Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/TqNWBp43K167ap_xbVUtCbMqlfk.roa
File: TqNWBp43K167ap_xbVUtCbMqlfk.roa (raw, json)
Hash identifier: GZkML9NOoHL82aPSrNllSSV41ccVjUDJLFCiKNWqB00=
Subject key identifier: 4E:A3:56:06:9E:37:2B:5E:BB:6A:9F:F1:6D:55:2D:09:B3:2A:95:F9
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 019D873E4DF83524018FC56A23E39680FF86
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/TqNWBp43K167ap_xbVUtCbMqlfk.roa
Signing time: Mon 13 Apr 2026 14:28:20 +0000
ROA not before: Mon 13 Apr 2026 14:28:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200558
IP address blocks: 2a14:67c2:c000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:87:3e:4d:f8:35:24:01:8f:c5:6a:23:e3:96:80:ff:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Apr 13 14:28:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ea356069e372b5ebb6a9ff16d552d09b32a95f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0e:a2:7d:ae:78:80:a0:48:78:3b:20:0f:79:
dd:ec:4c:00:27:5c:fb:fb:1a:18:10:fc:35:6e:c5:
7b:a2:bb:c7:c9:9a:c5:e4:a9:aa:39:ae:35:29:ff:
5a:29:1f:a6:ed:58:69:a9:a5:99:21:1d:09:99:d9:
a9:a9:8c:ec:84:26:33:23:76:c6:bd:96:9c:ed:06:
a2:54:b0:26:d7:85:b9:45:c1:e5:8d:a5:73:ab:e7:
ae:00:ae:1a:0a:8a:95:d4:a8:d9:c1:23:29:49:52:
60:6a:e1:48:9b:0c:1d:7f:87:91:2a:6f:79:19:4b:
05:21:ce:5c:3e:c6:ca:63:6a:15:9d:77:b5:d7:16:
9b:04:c2:c7:93:c4:68:01:ac:2d:a5:0b:c4:a4:12:
41:a7:fa:ce:39:72:27:ac:96:97:03:b0:0f:61:ab:
f5:46:fd:14:43:15:61:8f:83:34:5e:6e:cb:49:25:
7b:dc:d5:e9:93:63:0f:68:55:d9:44:d4:1a:9b:19:
29:75:ab:16:25:8c:97:72:8e:41:8e:e4:c0:e3:39:
9f:ea:4d:97:5d:3e:f9:49:63:a1:e5:2b:0f:6c:b6:
06:51:7d:c1:0c:c1:bc:35:00:21:25:cb:31:f9:f1:
82:1b:6d:19:ea:dd:4f:26:cc:45:e6:56:83:f4:18:
ec:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A3:56:06:9E:37:2B:5E:BB:6A:9F:F1:6D:55:2D:09:B3:2A:95:F9
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/TqNWBp43K167ap_xbVUtCbMqlfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c2:c000::/40
Signature Algorithm: sha256WithRSAEncryption
37:59:7d:37:e3:4a:86:d3:39:e5:df:fb:bf:77:07:86:e3:f5:
01:a5:e7:83:47:81:4c:d9:c3:16:04:5f:9c:d5:52:73:d1:34:
b2:7a:f7:f7:f4:89:4d:07:54:62:d6:9f:2b:4e:f0:22:cb:e8:
33:f9:ec:ef:90:bf:c1:2a:2c:50:7b:75:65:63:1e:56:0a:f0:
19:32:b1:4c:f1:81:2f:8a:ac:23:7f:d0:30:9a:13:36:0a:0f:
d3:d6:e8:7d:8b:a7:be:f1:35:5e:79:79:fc:16:4f:c2:6d:3a:
f0:c7:b2:0c:13:8b:91:4f:26:ac:f4:2b:c6:67:43:83:a9:0c:
9f:3d:d6:05:ce:43:af:f6:6f:46:36:57:37:1b:11:ac:20:96:
42:93:03:aa:9a:c5:03:9a:0d:3d:46:14:31:ba:02:0f:e6:39:
4a:84:25:44:fe:d1:1c:f7:50:6b:e8:9d:03:3a:45:f7:65:f3:
32:47:bf:43:3e:7a:64:51:8c:d8:59:41:18:58:16:1d:49:60:
71:c2:72:e2:33:d7:d1:c1:53:84:70:41:33:c8:f0:cd:81:7e:
4f:2f:97:75:b3:88:fb:0c:8b:77:17:81:38:ea:02:93:82:41:
2e:5f:79:a9:0b:56:f9:69:5e:d8:b5:8b:ae:7c:ba:c5:74:64:
8f:d9:95:6a
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZ2HPk34NSQBj8VqI+OWgP+GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll
NGUwZTAwHhcNMjYwNDEzMTQyODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZWEzNTYwNjllMzcyYjVlYmI2YTlmZjE2ZDU1MmQwOWIzMmE5NWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQ6ifa54gKBIeDsgD3nd7EwAJ1z7
+xoYEPw1bsV7orvHyZrF5KmqOa41Kf9aKR+m7VhpqaWZIR0JmdmpqYzshCYzI3bG
vZac7QaiVLAm14W5RcHljaVzq+euAK4aCoqV1KjZwSMpSVJgauFImwwdf4eRKm95
GUsFIc5cPsbKY2oVnXe11xabBMLHk8RoAawtpQvEpBJBp/rOOXInrJaXA7APYav1
Rv0UQxVhj4M0Xm7LSSV73NXpk2MPaFXZRNQamxkpdasWJYyXco5BjuTA4zmf6k2X
XT75SWOh5SsPbLYGUX3BDMG8NQAhJcsx+fGCG20Z6t1PJsxF5laD9Bjs0wIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFE6jVgaeNyteu2qf8W1VLQmzKpX5MB8GA1UdIwQY
MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt
ZjZjYzRlZjBmN2RmLzEvVHFOV0JwNDNLMTY3YXBfeGJWVXRDYk1xbGZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm
LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhRnwsAw
DQYJKoZIhvcNAQELBQADggEBADdZfTfjSobTOeXf+793B4bj9QGl54NHgUzZwxYE
X5zVUnPRNLJ69/f0iU0HVGLWnytO8CLL6DP57O+Qv8EqLFB7dWVjHlYK8BkysUzx
gS+KrCN/0DCaEzYKD9PW6H2Lp77xNV55efwWT8JtOvDHsgwTi5FPJqz0K8ZnQ4Op
DJ891gXOQ6/2b0Y2VzcbEawglkKTA6qaxQOaDT1GFDG6Ag/mOUqEJUT+0Rz3UGvo
nQM6Rfdl8zJHv0M+emRRjNhZQRhYFh1JYHHCcuIz19HBU4RwQTPI8M2Bfk8vl3Wz
iPsMi3cXgTjqApOCQS5feakLVvlpXti1i658usV0ZI/ZlWo=
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:09:33 2026 by rpki-client