Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TlkpR4MzFj21nTT0gecasXWPJl4.roa
File: TlkpR4MzFj21nTT0gecasXWPJl4.roa (raw, json)
Hash identifier: lLBNOogAnVFAyTT8kNPsAk8niGxQvwkYdWreqAkkXYU=
Subject key identifier: 4E:59:29:47:83:33:16:3D:B5:9D:34:F4:81:E7:1A:B1:75:8F:26:5E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0199E2EE176AD8C0E1F89EC0C468C21057CA
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TlkpR4MzFj21nTT0gecasXWPJl4.roa
Signing time: Tue 14 Oct 2025 13:34:38 +0000
ROA not before: Tue 14 Oct 2025 13:34:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199785
IP address blocks: 194.87.199.0/24 maxlen: 24
195.58.38.0/24 maxlen: 24
195.58.39.0/24 maxlen: 24
195.133.64.0/24 maxlen: 24
195.133.65.0/24 maxlen: 24
212.193.4.0/24 maxlen: 24
212.193.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e2:ee:17:6a:d8:c0:e1:f8:9e:c0:c4:68:c2:10:57:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 14 13:34:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e5929478333163db59d34f481e71ab1758f265e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c5:48:e4:12:fa:7c:78:f3:09:53:11:5f:82:
ca:0c:19:3e:ed:83:03:e6:c7:01:b7:7a:cd:9f:bd:
e4:80:61:35:1e:32:c8:2a:cb:da:5f:9d:42:15:00:
69:59:31:88:d7:3f:55:e8:93:c2:72:d1:98:a0:6f:
0c:da:b0:80:b3:37:98:d8:97:a4:55:07:d4:a2:07:
8e:6b:57:36:bb:44:4e:9f:d3:53:75:4a:49:a0:e2:
4d:42:fb:c5:f1:62:e1:de:3b:b9:c0:9c:27:9c:9e:
46:2b:c0:2c:59:6f:55:28:84:15:c9:7c:1f:eb:6f:
6c:43:d9:4a:cc:ee:9d:ba:83:bf:75:da:64:67:b4:
7f:96:43:e9:98:c0:b6:f3:04:1c:cd:99:ac:93:e1:
64:35:81:a2:6c:7c:bd:64:38:f4:25:d1:45:fb:32:
a0:fd:e2:25:df:4c:6c:2d:d5:10:2a:98:a4:29:a1:
c0:4d:5b:1c:cd:3d:a0:03:93:b6:23:31:f1:2f:b9:
6d:0e:51:b0:b1:7f:0f:1b:24:23:ea:79:33:3e:0b:
29:52:aa:4e:91:a6:a7:ac:df:61:6a:bb:14:0f:48:
c9:36:08:ae:68:cd:30:06:74:ce:04:bb:f1:d3:c9:
4c:66:84:44:41:43:5d:c0:d4:11:72:7a:5e:31:d9:
7c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:59:29:47:83:33:16:3D:B5:9D:34:F4:81:E7:1A:B1:75:8F:26:5E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TlkpR4MzFj21nTT0gecasXWPJl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.199.0/24
195.58.38.0/23
195.133.64.0/23
212.193.4.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:26:e3:16:8d:89:93:fb:5d:ad:e4:ab:4c:09:2a:91:b7:7a:
93:2e:17:64:17:9a:95:16:1e:cc:72:46:33:f3:f0:f1:99:6a:
d3:19:32:65:dd:cc:46:f9:57:24:59:5b:cf:64:7d:85:f3:9e:
0d:c7:3d:27:a6:bd:71:96:40:5d:8d:88:e1:b7:b3:ba:da:11:
00:23:f9:42:68:3b:4f:84:72:56:dd:2c:f4:93:07:90:e7:0e:
5b:c4:3f:08:cc:68:ae:6e:02:44:2e:d3:b9:d8:dd:97:f8:60:
50:92:42:5d:d4:7c:13:96:69:29:11:9f:f8:a0:24:2e:9b:ba:
30:bb:92:d8:c7:2e:db:fe:22:07:2e:56:b4:bf:8c:c7:31:70:
a6:ff:25:02:0f:7a:9c:f3:d5:0c:a5:6f:61:83:44:f4:de:05:
08:82:5c:04:fe:58:00:eb:67:7d:7b:08:ed:b2:48:57:b4:4d:
f3:41:53:fd:f6:05:83:fd:a6:f9:2e:82:e5:9e:d8:8d:fb:d1:
28:74:13:54:df:54:c2:92:6e:ef:60:c3:53:3c:75:94:8c:5e:
9a:89:8a:29:7f:41:4b:f2:2f:24:8d:73:f5:21:46:eb:45:7c:
4d:d5:72:ef:40:80:15:a3:2f:89:60:55:03:09:85:70:fc:f6:
78:93:a1:3a
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZni7hdq2MDh+J7AxGjCEFfKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjUxMDE0MTMzNDM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTU5Mjk0NzgzMzMxNjNkYjU5ZDM0ZjQ4MWU3MWFiMTc1OGYyNjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsVI5BL6fHjzCVMRX4LKDBk+7YMD
5scBt3rNn73kgGE1HjLIKsvaX51CFQBpWTGI1z9V6JPCctGYoG8M2rCAszeY2Jek
VQfUogeOa1c2u0ROn9NTdUpJoOJNQvvF8WLh3ju5wJwnnJ5GK8AsWW9VKIQVyXwf
629sQ9lKzO6duoO/ddpkZ7R/lkPpmMC28wQczZmsk+FkNYGibHy9ZDj0JdFF+zKg
/eIl30xsLdUQKpikKaHATVsczT2gA5O2IzHxL7ltDlGwsX8PGyQj6nkzPgspUqpO
kaanrN9harsUD0jJNgiuaM0wBnTOBLvx08lMZoREQUNdwNQRcnpeMdl8eQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFE5ZKUeDMxY9tZ009IHnGrF1jyZeMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvVGxrcFI0TXpGajIxblRUMGdlY2FzWFdQSmw0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwlfHAwQB
wzomAwQBw4VAAwQB1MEEMA0GCSqGSIb3DQEBCwUAA4IBAQAqJuMWjYmT+12t5KtM
CSqRt3qTLhdkF5qVFh7MckYz8/DxmWrTGTJl3cxG+VckWVvPZH2F854Nxz0npr1x
lkBdjYjht7O62hEAI/lCaDtPhHJW3Sz0kweQ5w5bxD8IzGiubgJELtO52N2X+GBQ
kkJd1HwTlmkpEZ/4oCQum7owu5LYxy7b/iIHLla0v4zHMXCm/yUCD3qc89UMpW9h
g0T03gUIglwE/lgA62d9ewjtskhXtE3zQVP99gWD/ab5LoLlntiN+9EodBNU31TC
km7vYMNTPHWUjF6aiYopf0FL8i8kjXP1IUbrRXxN1XLvQIAVoy+JYFUDCYVw/PZ4
k6E6
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:09:20 2025 by rpki-client