Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/TBVCeR3JZxitx2qIRvwUVmMfz3k.roa
File: TBVCeR3JZxitx2qIRvwUVmMfz3k.roa (raw, json)
Hash identifier: a3GoE65n8nFjDCqtKBSr3lSZewdyS6h51Ixfs3mMRKo=
Subject key identifier: 4C:15:42:79:1D:C9:67:18:AD:C7:6A:88:46:FC:14:56:63:1F:CF:79
Certificate issuer: /CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
Certificate serial: 01997B97B55ABA100545289FFC8EEEA5FDE3
Authority key identifier: F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/TBVCeR3JZxitx2qIRvwUVmMfz3k.roa
Signing time: Wed 24 Sep 2025 11:59:23 +0000
ROA not before: Wed 24 Sep 2025 11:59:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16247
IP address blocks: 194.145.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7b:97:b5:5a:ba:10:05:45:28:9f:fc:8e:ee:a5:fd:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
Validity
Not Before: Sep 24 11:59:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c1542791dc96718adc76a8846fc1456631fcf79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5a:ae:df:5c:fa:53:91:b1:78:68:72:dc:9d:
35:8d:6f:e0:1a:c8:2a:6a:e8:25:e6:54:bf:52:79:
b3:36:7f:52:ee:fa:7b:99:9a:6b:af:e0:be:df:72:
22:59:f6:07:8e:25:1c:ef:22:bf:0e:b5:93:b9:c3:
b9:99:d2:ed:41:44:32:cf:55:b9:b1:8b:43:5b:66:
7f:1e:4f:f0:d7:ee:e3:d9:69:8a:46:3f:f4:25:22:
aa:75:ce:ae:02:f3:6d:ee:7b:06:65:6c:59:98:92:
28:70:9e:18:7d:43:0a:a3:11:10:55:64:9c:2f:2e:
bb:e5:c0:bc:28:4d:9e:30:55:f5:89:e6:d5:7b:c4:
74:77:21:a7:cc:c2:a2:ab:94:bc:2c:05:aa:4d:ee:
93:ac:22:3c:8d:dd:b2:b3:d3:19:53:37:f1:56:1b:
d4:fc:51:08:e3:df:82:ee:05:aa:48:82:4a:d2:f6:
df:84:3e:5a:50:f4:de:6f:4d:09:e8:33:e7:af:30:
ab:0e:ad:d6:eb:9f:de:a1:e1:69:a0:1b:09:c2:63:
90:bc:a2:14:ca:a0:f2:05:4b:13:ea:b7:2f:74:a4:
09:c8:ba:f3:9c:a8:f1:1f:ea:02:3a:39:38:49:f5:
47:b9:0c:cf:7f:a0:e0:fc:4d:69:8b:b7:d3:c2:b3:
e7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:15:42:79:1D:C9:67:18:AD:C7:6A:88:46:FC:14:56:63:1F:CF:79
X509v3 Authority Key Identifier:
keyid:F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/TBVCeR3JZxitx2qIRvwUVmMfz3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.145.241.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:66:65:7e:ee:3a:4b:6a:e6:30:42:bf:bf:a7:c5:6c:aa:ee:
44:9e:66:14:b8:25:0a:53:ed:78:5f:c0:79:8b:c3:85:09:a6:
7b:ba:53:fb:02:c0:c4:69:c3:b8:84:01:32:f4:92:1f:64:89:
29:b5:48:6a:1e:df:23:bd:45:ba:05:37:60:9d:67:f8:fb:1c:
bf:1b:bf:0e:75:6e:97:5e:98:c4:b3:81:1a:87:71:fc:65:aa:
73:d0:6b:97:32:34:a6:3d:ca:b8:92:3f:a7:ee:67:ed:9b:99:
bd:97:fa:62:a1:95:df:87:a9:67:bf:3e:37:81:4a:6c:b3:b5:
6b:d1:3f:97:6c:4e:1b:ff:54:d6:4a:26:9a:3c:2c:cc:d6:f7:
e6:1e:64:85:7c:a3:7f:ae:87:41:ec:d4:04:8d:fd:ca:ab:82:
f8:3f:75:50:ef:03:ca:22:7e:f0:eb:0c:f3:aa:10:f8:21:87:
ac:5d:29:71:e1:8e:b4:62:92:51:db:00:db:be:a3:2b:d7:03:
8e:5a:9d:6c:ac:c9:e1:8e:38:2b:8a:2d:2b:ca:82:33:5d:b0:
49:8a:7f:ff:18:ff:72:26:eb:99:64:29:0d:1d:d8:32:c8:cd:
4e:9d:79:90:d0:00:da:8b:c8:95:c3:4d:56:34:6b:19:b2:c9:
37:5b:ef:94
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZl7l7VauhAFRSif/I7upf3jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YWU5ODgxYmYxMTIwOThhMmJmZDQ5YTBiY2ZmZGNjY2U3
YmMyMDgwHhcNMjUwOTI0MTE1OTIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzE1NDI3OTFkYzk2NzE4YWRjNzZhODg0NmZjMTQ1NjYzMWZjZjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlqu31z6U5GxeGhy3J01jW/gGsgq
augl5lS/UnmzNn9S7vp7mZprr+C+33IiWfYHjiUc7yK/DrWTucO5mdLtQUQyz1W5
sYtDW2Z/Hk/w1+7j2WmKRj/0JSKqdc6uAvNt7nsGZWxZmJIocJ4YfUMKoxEQVWSc
Ly675cC8KE2eMFX1iebVe8R0dyGnzMKiq5S8LAWqTe6TrCI8jd2ys9MZUzfxVhvU
/FEI49+C7gWqSIJK0vbfhD5aUPTeb00J6DPnrzCrDq3W65/eoeFpoBsJwmOQvKIU
yqDyBUsT6rcvdKQJyLrznKjxH+oCOjk4SfVHuQzPf6Dg/E1pi7fTwrPn4wIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFEwVQnkdyWcYrcdqiEb8FFZjH895MB8GA1UdIwQY
MBaAFPiumIG/ESCYor/UmgvP/czOe8IIMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LNllnYjhSSUppaXY5U2FDOF85ek01N3dnZy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvNWQ5ZjU3LTBmMTAtNGUxNC1iNGFm
LTI1YTE1YTUyNGY4Ny8xL1RCVkNlUjNKWnhpdHgycUlSdndVVm1NZnozay5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMTQvNWQ5ZjU3LTBmMTAtNGUxNC1iNGFmLTI1YTE1YTUyNGY4
Ny8xLzEtSzZZZ2I4UklKaWl2OVNhQzhfOXpNNTd3Z2cuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADCkfEw
DQYJKoZIhvcNAQELBQADggEBALpmZX7uOktq5jBCv7+nxWyq7kSeZhS4JQpT7Xhf
wHmLw4UJpnu6U/sCwMRpw7iEATL0kh9kiSm1SGoe3yO9RboFN2CdZ/j7HL8bvw51
bpdemMSzgRqHcfxlqnPQa5cyNKY9yriSP6fuZ+2bmb2X+mKhld+HqWe/PjeBSmyz
tWvRP5dsThv/VNZKJpo8LMzW9+YeZIV8o3+uh0Hs1ASN/cqrgvg/dVDvA8oifvDr
DPOqEPghh6xdKXHhjrRiklHbANu+oyvXA45anWysyeGOOCuKLSvKgjNdsEmKf/8Y
/3Im65lkKQ0d2DLIzU6deZDQANqLyJXDTVY0axmyyTdb75Q=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:58 2025 by rpki-client