Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/e_Ttq77piq6wF1yuPFNldkncOVQ.roa
File: e_Ttq77piq6wF1yuPFNldkncOVQ.roa (raw, json)
Hash identifier: +QjhC5QnhRqdgfsyzMWtYYn07LSLNsKAkyo98FAjHdg=
Subject key identifier: 7B:F4:ED:AB:BE:E9:8A:AE:B0:17:5C:AE:3C:53:65:76:49:DC:39:54
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0199377237ED176B6BA31F35BE29E46A9D6A
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/e_Ttq77piq6wF1yuPFNldkncOVQ.roa
Signing time: Thu 11 Sep 2025 06:24:16 +0000
ROA not before: Thu 11 Sep 2025 06:24:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34304
IP address blocks: 80.96.99.0/24 maxlen: 24
80.96.106.0/24 maxlen: 24
81.180.252.0/23 maxlen: 23
81.181.173.0/24 maxlen: 24
217.156.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:72:37:ed:17:6b:6b:a3:1f:35:be:29:e4:6a:9d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Sep 11 06:24:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7bf4edabbee98aaeb0175cae3c53657649dc3954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:59:92:4e:c3:38:36:03:ad:69:92:7d:d2:ab:
98:44:fa:a7:df:e9:2e:5b:8f:9b:d1:cf:1d:00:d3:
cf:5d:ac:aa:39:e5:4b:6f:f0:21:cd:a8:14:0f:48:
bb:40:03:2b:56:91:cb:ce:57:49:91:08:bf:a7:07:
e6:78:85:53:b4:9d:fb:b2:11:c6:c1:46:c2:0d:24:
73:44:35:a3:5f:7b:0f:8f:09:fd:26:9d:b4:47:dd:
47:62:89:e3:a2:97:4a:6a:6f:25:53:f6:e7:78:67:
a8:dd:f4:a6:02:f7:27:8b:fa:69:54:36:6a:5e:b5:
07:96:68:6b:b8:bd:2d:8f:47:68:2e:a9:51:7e:98:
cb:71:df:13:a9:a2:be:b6:70:a3:a4:d5:ee:31:65:
0a:d5:b8:46:c8:96:9e:4d:05:f1:7e:a3:08:3a:50:
b1:19:bc:7a:fb:5b:d8:7d:fd:15:3a:47:2c:51:96:
c6:ee:77:bf:4d:ef:f4:7b:d7:ea:df:96:68:63:c4:
fa:59:59:86:4f:33:c7:d8:37:eb:3c:02:19:44:5d:
9a:7b:ba:8e:15:3a:ab:83:e1:5a:ce:b7:b9:24:4e:
b8:0f:be:5b:97:46:d3:36:12:ff:f5:7c:b0:a3:53:
fa:71:cf:33:15:84:13:73:3a:37:97:f0:e9:1a:96:
ee:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F4:ED:AB:BE:E9:8A:AE:B0:17:5C:AE:3C:53:65:76:49:DC:39:54
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/e_Ttq77piq6wF1yuPFNldkncOVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.99.0/24
80.96.106.0/24
81.180.252.0/23
81.181.173.0/24
217.156.56.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:65:1b:75:75:41:98:96:78:17:1e:9c:84:e8:7f:45:47:43:
cc:79:ad:c9:a3:c2:8e:03:52:84:18:65:a2:d7:51:1f:bd:3f:
4e:b7:5b:bd:13:70:f5:81:3f:b6:22:62:3d:96:8d:71:ba:a3:
9b:4b:f8:dc:d7:38:1c:47:78:00:fa:15:d5:b6:38:3d:17:d4:
22:eb:cb:07:f1:5a:a8:b0:20:37:33:4e:1d:31:06:e8:b2:ba:
30:36:01:6f:a3:fb:7c:3c:2e:af:65:f3:dd:ba:21:40:40:02:
f8:2a:4d:ca:cf:2d:49:d8:10:d8:d9:ce:7a:ec:b3:f2:ad:9f:
22:83:5a:78:9a:6f:ee:76:d0:95:2d:0a:8d:53:e7:ca:46:66:
d7:96:8f:e4:36:e2:58:13:12:7d:ab:2e:05:79:86:a6:18:c1:
b3:4b:08:1b:08:7e:c0:e2:9f:b6:94:25:8e:10:e6:df:d6:ee:
3b:c1:db:81:11:5b:b9:7d:e8:cc:e9:d9:16:97:67:ce:5a:59:
3a:fc:8d:4a:05:29:30:05:78:a5:2e:59:27:72:55:63:02:bb:
2d:f6:9b:a7:6c:5e:87:9c:2a:22:81:8c:35:53:85:ef:ae:cc:
be:6d:95:f7:5a:60:07:c6:68:46:72:2b:8c:70:f0:7d:06:d1:
e8:28:a5:2b
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZk3cjftF2trox81vinkap1qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjUwOTExMDYyNDE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmY0ZWRhYmJlZTk4YWFlYjAxNzVjYWUzYzUzNjU3NjQ5ZGMzOTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVmSTsM4NgOtaZJ90quYRPqn3+ku
W4+b0c8dANPPXayqOeVLb/AhzagUD0i7QAMrVpHLzldJkQi/pwfmeIVTtJ37shHG
wUbCDSRzRDWjX3sPjwn9Jp20R91HYonjopdKam8lU/bneGeo3fSmAvcni/ppVDZq
XrUHlmhruL0tj0doLqlRfpjLcd8TqaK+tnCjpNXuMWUK1bhGyJaeTQXxfqMIOlCx
Gbx6+1vYff0VOkcsUZbG7ne/Te/0e9fq35ZoY8T6WVmGTzPH2DfrPAIZRF2ae7qO
FTqrg+Fazre5JE64D75bl0bTNhL/9Xywo1P6cc8zFYQTczo3l/DpGpbu0QIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFHv07au+6YqusBdcrjxTZXZJ3DlUMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvZV9UdHE3N3BpcTZ3RjF5dVBGTmxka25jT1ZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAUGBjAwQA
UGBqAwQBUbT8AwQAUbWtAwQA2Zw4MA0GCSqGSIb3DQEBCwUAA4IBAQAaZRt1dUGY
lngXHpyE6H9FR0PMea3Jo8KOA1KEGGWi11EfvT9Ot1u9E3D1gT+2ImI9lo1xuqOb
S/jc1zgcR3gA+hXVtjg9F9Qi68sH8VqosCA3M04dMQbosrowNgFvo/t8PC6vZfPd
uiFAQAL4Kk3Kzy1J2BDY2c567LPyrZ8ig1p4mm/udtCVLQqNU+fKRmbXlo/kNuJY
ExJ9qy4FeYamGMGzSwgbCH7A4p+2lCWOEObf1u47wduBEVu5fejM6dkWl2fOWlk6
/I1KBSkwBXilLlknclVjArst9punbF6HnCoigYw1U4Xvrsy+bZX3WmAHxmhGciuM
cPB9BtHoKKUr
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:32:14 2025 by rpki-client