Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/TY-6wIosCGnW66OWe0_NroPMbeI.roa
File: TY-6wIosCGnW66OWe0_NroPMbeI.roa (raw, json)
Hash identifier: nXhbRc2aX8mNZLPnZ6EyWqXf/5jOIvwFHTTVaDOKJ7c=
Subject key identifier: 4D:8F:BA:C0:8A:2C:08:69:D6:EB:A3:96:7B:4F:CD:AE:83:CC:6D:E2
Certificate issuer: /CN=4157fd83e08e0f31e79514677c098811ef6906d7
Certificate serial: 019B7E386FBB586A68833613B63334979ECB
Authority key identifier: 41:57:FD:83:E0:8E:0F:31:E7:95:14:67:7C:09:88:11:EF:69:06:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/TY-6wIosCGnW66OWe0_NroPMbeI.roa
Signing time: Fri 02 Jan 2026 10:19:46 +0000
ROA not before: Fri 02 Jan 2026 10:19:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200573
IP address blocks: 185.239.40.0/24 maxlen: 32
185.239.41.0/24 maxlen: 32
185.239.42.0/24 maxlen: 32
185.239.43.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 16:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:6f:bb:58:6a:68:83:36:13:b6:33:34:97:9e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4157fd83e08e0f31e79514677c098811ef6906d7
Validity
Not Before: Jan 2 10:19:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d8fbac08a2c0869d6eba3967b4fcdae83cc6de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:67:ac:da:e4:c2:b2:4f:2d:80:3b:59:bf:20:
68:0c:52:66:f2:37:5b:04:55:f2:8c:dc:c3:5d:f9:
08:0c:4b:7c:8c:26:22:53:65:51:c1:bf:7e:bb:76:
a8:fd:4e:53:e0:c4:cf:1f:ed:3b:3f:bd:72:3d:0d:
40:98:89:89:76:df:85:42:84:1d:88:c2:a1:ac:95:
a5:2a:a2:c7:05:34:be:95:22:57:ae:7f:f1:dc:03:
c4:84:1c:f8:0c:78:4f:95:32:35:7e:65:de:f5:44:
16:0e:aa:e2:86:86:d4:33:03:18:fe:ae:e0:08:4f:
bc:c2:3d:98:77:c4:fe:85:a0:81:f5:d2:e7:ab:38:
d0:24:91:b6:14:d8:8e:14:ea:b4:87:b5:a9:31:c5:
85:20:ba:d7:20:a2:84:22:3b:45:a7:73:69:f2:7a:
27:44:b6:8b:30:f5:31:a8:16:db:67:0e:02:0c:a9:
22:5b:9f:24:35:01:5f:85:45:a2:db:e1:45:32:3a:
af:de:03:b2:d4:38:a4:53:5b:a7:ff:27:49:5b:24:
2e:9b:9a:bf:96:a1:c2:9d:32:7e:8d:d6:40:f7:e1:
7b:7d:23:e7:41:8f:cc:16:70:17:7d:ff:76:0b:67:
7f:5a:97:85:bd:02:ef:6c:de:bd:2b:74:a4:f8:89:
0b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8F:BA:C0:8A:2C:08:69:D6:EB:A3:96:7B:4F:CD:AE:83:CC:6D:E2
X509v3 Authority Key Identifier:
keyid:41:57:FD:83:E0:8E:0F:31:E7:95:14:67:7C:09:88:11:EF:69:06:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/TY-6wIosCGnW66OWe0_NroPMbeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.40.0/22
Signature Algorithm: sha256WithRSAEncryption
90:ef:fa:2e:b4:2a:5f:57:4a:1e:eb:a1:9e:a8:82:4d:20:7a:
3d:a5:88:14:ba:c1:2a:0d:25:99:b8:c1:63:c0:a7:2e:46:09:
42:f5:1c:ae:2f:3d:f0:72:25:80:9c:6c:ea:7e:a2:7a:f3:c2:
77:f3:27:5d:58:5d:a6:86:d8:57:73:d8:da:1d:0e:01:fe:c0:
1c:de:33:a0:74:96:d6:a8:22:a2:74:a6:79:8d:bd:3b:f6:19:
82:ba:10:2c:0f:4b:74:98:22:e5:94:7a:e3:51:29:ff:2e:7c:
1d:ef:a8:29:5a:74:6e:2b:54:ea:14:c0:f3:a4:f6:6c:1c:73:
30:f0:6b:2b:2c:80:72:1a:80:68:b8:04:c7:be:a6:8f:4b:55:
c0:6b:7c:55:da:a8:3b:3c:82:f8:80:12:37:3e:36:95:92:0b:
6e:c3:c8:3e:ca:43:bf:45:74:b4:36:30:d1:77:b9:94:eb:a8:
6d:ab:74:c2:a7:99:62:7c:cb:2c:40:02:b3:2c:0f:15:29:0a:
e4:79:28:12:06:12:8b:7a:d9:6b:7c:23:f0:c8:40:ad:1e:a8:
ac:42:87:e9:a9:9a:31:f8:f8:15:71:ce:e3:b6:81:f8:ff:02:
7c:71:09:eb:30:6f:20:54:c0:fc:ab:5f:03:23:67:5e:fd:75:
91:81:8c:7c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt+OG+7WGpogzYTtjM0l57LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNTdmZDgzZTA4ZTBmMzFlNzk1MTQ2NzdjMDk4ODExZWY2
OTA2ZDcwHhcNMjYwMTAyMTAxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDhmYmFjMDhhMmMwODY5ZDZlYmEzOTY3YjRmY2RhZTgzY2M2ZGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWes2uTCsk8tgDtZvyBoDFJm8jdb
BFXyjNzDXfkIDEt8jCYiU2VRwb9+u3ao/U5T4MTPH+07P71yPQ1AmImJdt+FQoQd
iMKhrJWlKqLHBTS+lSJXrn/x3APEhBz4DHhPlTI1fmXe9UQWDqrihobUMwMY/q7g
CE+8wj2Yd8T+haCB9dLnqzjQJJG2FNiOFOq0h7WpMcWFILrXIKKEIjtFp3Np8non
RLaLMPUxqBbbZw4CDKkiW58kNQFfhUWi2+FFMjqv3gOy1DikU1un/ydJWyQum5q/
lqHCnTJ+jdZA9+F7fSPnQY/MFnAXff92C2d/WpeFvQLvbN69K3Sk+IkLtQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE2PusCKLAhp1uujlntPza6DzG3iMB8GA1UdIwQY
MBaAFEFX/YPgjg8x55UUZ3wJiBHvaQbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVZmOWctQ09EekhubFJSbmZBbUlFZTlwQnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jMjczMDctMWZkZC00MjFiLWJiZmQt
ZTI4MzFjZDdmY2M4LzEvVFktNndJb3NDR25XNjZPV2UwX05yb1BNYmVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9jMjczMDctMWZkZC00MjFiLWJiZmQtZTI4MzFjZDdmY2M4
LzEvUVZmOWctQ09EekhubFJSbmZBbUlFZTlwQnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCue8oMA0G
CSqGSIb3DQEBCwUAA4IBAQCQ7/outCpfV0oe66GeqIJNIHo9pYgUusEqDSWZuMFj
wKcuRglC9RyuLz3wciWAnGzqfqJ688J38yddWF2mhthXc9jaHQ4B/sAc3jOgdJbW
qCKidKZ5jb079hmCuhAsD0t0mCLllHrjUSn/Lnwd76gpWnRuK1TqFMDzpPZsHHMw
8GsrLIByGoBouATHvqaPS1XAa3xV2qg7PIL4gBI3PjaVkgtuw8g+ykO/RXS0NjDR
d7mU66htq3TCp5lifMssQAKzLA8VKQrkeSgSBhKLetlrfCPwyECtHqisQofpqZox
+PgVcc7jtoH4/wJ8cQnrMG8gVMD8q18DI2de/XWRgYx8
-----END CERTIFICATE-----
Generated at Tue Mar 3 01:54:43 2026 by rpki-client