Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/TleCnyfGdZ_mECH_iBY0pup0z6g.roa
File: TleCnyfGdZ_mECH_iBY0pup0z6g.roa (raw, json)
Hash identifier: HrmWALEujgW08ieMDEygOWdRlqfGF9a1VyxcNiVM0Vg=
Subject key identifier: 4E:57:82:9F:27:C6:75:9F:E6:10:21:FF:88:16:34:A6:EA:74:CF:A8
Certificate issuer: /CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01
Certificate serial: 0199E8521B12E988D6548C89127E977CB8B5
Authority key identifier: 2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/TleCnyfGdZ_mECH_iBY0pup0z6g.roa
Signing time: Wed 15 Oct 2025 14:41:58 +0000
ROA not before: Wed 15 Oct 2025 14:41:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212027
IP address blocks: 194.150.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e8:52:1b:12:e9:88:d6:54:8c:89:12:7e:97:7c:b8:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01
Validity
Not Before: Oct 15 14:41:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e57829f27c6759fe61021ff881634a6ea74cfa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:20:61:10:8d:57:4a:6a:3b:b0:b7:1e:d9:0e:
47:01:d1:65:03:39:d2:17:79:bd:21:bc:c5:3e:aa:
3b:d5:bb:76:60:31:1b:07:16:79:4b:bc:76:58:73:
54:b6:d3:d2:dc:87:52:a1:66:a3:d8:be:09:94:dd:
f8:bb:da:a7:66:40:c4:7f:bb:44:33:15:e3:52:4b:
31:15:a6:0e:9c:7b:4a:f6:d6:e1:a8:a4:57:60:93:
0b:99:c6:52:a9:07:83:fa:9f:bf:1d:0e:c9:b5:e0:
f9:33:9e:a6:4c:cb:36:6a:bb:74:23:ab:c9:3c:6c:
58:0f:ac:15:01:6e:4e:5e:fc:17:d2:15:fb:28:aa:
54:c2:46:4e:67:b5:89:8f:82:50:f3:04:84:b0:d8:
b3:9c:14:b1:a7:da:5c:b5:7d:88:5e:8d:e2:00:6a:
f0:46:d9:2b:69:70:5d:dd:08:c2:8c:15:66:00:ac:
9a:39:f0:00:7c:4c:89:12:a2:bb:48:66:d5:95:10:
f9:97:e0:22:3e:05:e9:8c:45:81:82:02:a2:57:e9:
33:3a:37:ca:13:29:b5:63:95:32:c8:7a:73:17:02:
52:2d:8e:d8:a2:4b:f4:f3:2e:e5:91:3b:9d:cf:49:
9c:2d:e0:57:a7:27:9e:f6:86:6e:18:4c:60:10:98:
c1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:57:82:9F:27:C6:75:9F:E6:10:21:FF:88:16:34:A6:EA:74:CF:A8
X509v3 Authority Key Identifier:
keyid:2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/TleCnyfGdZ_mECH_iBY0pup0z6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.73.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:cf:e9:a6:26:51:28:6c:2a:76:14:74:a3:dc:93:da:4d:b7:
7e:34:2b:04:2f:17:eb:13:2c:e3:c9:43:a0:c4:df:c3:0d:f9:
b6:0a:2c:5b:5e:3c:b1:d0:34:36:6f:bf:a7:33:c6:29:bb:41:
8f:52:92:1b:eb:bd:ac:70:77:c8:c5:0e:40:6b:ac:dc:f1:1a:
ff:e7:90:7f:f9:bd:d4:3b:c8:04:d7:2e:c6:ee:32:11:5e:72:
38:4f:6d:9a:8f:cd:61:12:cc:52:4e:36:3d:6e:62:68:54:77:
2b:08:ba:28:70:56:e4:15:53:28:57:3c:f7:c8:ca:a3:15:e2:
e2:32:45:bd:a8:f7:3e:0e:75:52:c5:fa:b4:bb:fa:a9:d6:66:
86:9f:a8:71:6e:9b:7c:61:5c:e5:81:3d:6b:39:ef:e0:ac:3d:
98:23:fb:03:c2:4a:1d:e3:a7:41:4a:6b:1a:e2:84:7c:6a:4b:
ae:c6:e6:a8:48:88:77:dd:fe:32:03:db:59:ea:48:8c:45:72:
74:90:ff:cd:79:ff:c8:f6:16:cb:37:29:da:ec:47:aa:b5:58:
70:2d:7a:b0:68:b8:b2:56:d7:f8:69:96:55:fd:4f:9c:40:c6:
c2:03:26:9b:15:52:d7:9b:b3:64:8e:b7:09:33:2a:d6:70:67:
64:5b:3d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:23:47 2025 by rpki-client