Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/teZJ6_LqLnx92nmkvTPepcfMWZw.roa
File: teZJ6_LqLnx92nmkvTPepcfMWZw.roa (raw, json)
Hash identifier: 0ILJT1grLOzee/Zpb5vXkzuMcl1Ak2N0YJtSEb2noHE=
Subject key identifier: B5:E6:49:EB:F2:EA:2E:7C:7D:DA:79:A4:BD:33:DE:A5:C7:CC:59:9C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01996092763C8BBD70E9034E0BE008BE0EFF
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/teZJ6_LqLnx92nmkvTPepcfMWZw.roa
Signing time: Fri 19 Sep 2025 06:03:55 +0000
ROA not before: Fri 19 Sep 2025 06:03:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60230
IP address blocks: 31.13.244.0/24 maxlen: 24
31.13.244.99/32 maxlen: 32
2a00:1728:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:60:92:76:3c:8b:bd:70:e9:03:4e:0b:e0:08:be:0e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 19 06:03:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5e649ebf2ea2e7c7dda79a4bd33dea5c7cc599c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ba:2e:69:e2:94:32:41:ee:dc:96:16:7f:03:
e2:00:bf:c7:2e:74:3b:6a:8b:43:bf:31:6c:0a:b6:
e4:e0:a5:65:70:9f:70:5e:fc:67:15:43:e6:09:ac:
71:a9:1a:a0:49:f7:29:b3:e1:93:a0:3a:30:b4:4c:
de:03:e9:21:e6:f2:62:96:60:2e:aa:6c:3d:4c:f5:
fd:69:97:f4:e7:e7:58:3b:e7:b0:a8:ca:40:51:ab:
1c:2a:e5:0c:e8:db:8d:04:34:ed:e9:5f:9c:30:a1:
f3:58:45:0d:1c:ac:6d:34:98:ae:41:5d:cb:0e:be:
dc:5f:9f:bc:cb:00:ab:e7:57:e5:f3:dd:5e:d2:3a:
bc:70:f9:54:a4:84:38:de:26:96:13:da:62:1b:18:
ff:6e:e4:32:82:3a:72:62:ba:fb:aa:59:a0:59:a8:
aa:50:c7:cc:e6:0b:83:7b:69:55:4b:f4:bc:09:99:
c1:75:b8:c1:a1:d8:69:ca:48:d1:eb:8e:f7:05:65:
4e:ff:f5:44:35:ed:33:34:ff:c8:89:5a:67:f5:a5:
e3:34:98:bb:48:b6:ec:4a:34:91:3d:9e:09:01:16:
78:05:07:8a:c1:fb:72:8a:98:49:b8:7d:a5:13:1b:
61:10:84:54:b8:ac:73:e4:03:b2:3e:2b:1f:c7:5c:
a4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E6:49:EB:F2:EA:2E:7C:7D:DA:79:A4:BD:33:DE:A5:C7:CC:59:9C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/teZJ6_LqLnx92nmkvTPepcfMWZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.244.0/24
IPv6:
2a00:1728:a::/48
Signature Algorithm: sha256WithRSAEncryption
43:fd:76:8a:44:01:90:f1:3c:28:76:5b:10:ec:e3:0e:1b:3b:
87:79:22:0b:26:45:0d:bd:02:c2:60:b4:79:31:fa:7c:39:fe:
03:d0:cb:7f:8b:d1:56:98:cf:ae:e0:fb:ee:28:46:8f:81:2d:
4b:ff:f0:af:b3:59:16:75:10:5f:d7:17:4c:8d:9e:e6:85:08:
fb:3c:3c:4b:90:ef:04:ba:0c:cf:68:55:a7:e1:9b:c8:34:2d:
10:4c:08:84:05:ff:01:76:37:6c:9a:e2:b1:4c:f1:88:a7:bf:
60:ce:50:2b:99:73:c4:ad:85:17:73:8e:0e:30:80:7d:cb:63:
02:1b:ea:3e:77:4e:25:a2:b2:c7:48:89:cd:bc:af:6d:1e:f9:
80:18:61:dd:44:48:72:5f:bc:03:71:19:3d:06:98:ed:3b:f1:
85:75:f5:20:54:44:50:13:f2:dc:25:bb:c5:4a:6e:cb:96:29:
93:34:5d:85:10:5f:dc:7f:d2:11:be:44:68:9e:c1:cc:f7:76:
0f:e3:a9:e4:0e:91:92:d3:99:70:3c:62:c9:36:cf:ac:0b:b7:
9b:3e:c7:48:a3:b5:94:4c:34:a6:98:24:4b:17:69:3a:f5:fb:
c1:d0:04:58:86:15:76:bb:21:11:09:91:1c:3e:be:2f:d3:37:
2e:d9:9a:f7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZlgknY8i71w6QNOC+AIvg7/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwOTE5MDYwMzU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNWU2NDllYmYyZWEyZTdjN2RkYTc5YTRiZDMzZGVhNWM3Y2M1OTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rouaeKUMkHu3JYWfwPiAL/HLnQ7
aotDvzFsCrbk4KVlcJ9wXvxnFUPmCaxxqRqgSfcps+GToDowtEzeA+kh5vJilmAu
qmw9TPX9aZf05+dYO+ewqMpAUascKuUM6NuNBDTt6V+cMKHzWEUNHKxtNJiuQV3L
Dr7cX5+8ywCr51fl891e0jq8cPlUpIQ43iaWE9piGxj/buQygjpyYrr7qlmgWaiq
UMfM5guDe2lVS/S8CZnBdbjBodhpykjR6473BWVO//VENe0zNP/IiVpn9aXjNJi7
SLbsSjSRPZ4JARZ4BQeKwftyiphJuH2lExthEIRUuKxz5AOyPisfx1ykkwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLXmSevy6i58fdp5pL0z3qXHzFmcMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvdGVaSjZfTHFMbng5Mm5ta3ZUUGVwY2ZNV1p3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAHw30MA8E
AgACMAkDBwAqABcoAAowDQYJKoZIhvcNAQELBQADggEBAEP9dopEAZDxPCh2WxDs
4w4bO4d5IgsmRQ29AsJgtHkx+nw5/gPQy3+L0VaYz67g++4oRo+BLUv/8K+zWRZ1
EF/XF0yNnuaFCPs8PEuQ7wS6DM9oVafhm8g0LRBMCIQF/wF2N2ya4rFM8Yinv2DO
UCuZc8SthRdzjg4wgH3LYwIb6j53TiWissdIic28r20e+YAYYd1ESHJfvANxGT0G
mO078YV19SBURFAT8twlu8VKbsuWKZM0XYUQX9x/0hG+RGiewcz3dg/jqeQOkZLT
mXA8Ysk2z6wLt5s+x0ijtZRMNKaYJEsXaTr1+8HQBFiGFXa7IREJkRw+vi/TNy7Z
mvc=
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:46 2025 by rpki-client