Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/TP9dYTF0vVdnxjZeUQZFSyII5ac.roa
File: TP9dYTF0vVdnxjZeUQZFSyII5ac.roa (raw, json)
Hash identifier: MmcVJ+lVWDkeC9181Wfg7drTD00d3xDDi5SoyoKiIL4=
Subject key identifier: 4C:FF:5D:61:31:74:BD:57:67:C6:36:5E:51:06:45:4B:22:08:E5:A7
Certificate issuer: /CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Certificate serial: 0197B00710C0EAC39C93E306750D76913167
Authority key identifier: 9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/TP9dYTF0vVdnxjZeUQZFSyII5ac.roa
Signing time: Fri 27 Jun 2025 06:15:42 +0000
ROA not before: Fri 27 Jun 2025 06:15:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12076
IP address blocks: 193.29.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b0:07:10:c0:ea:c3:9c:93:e3:06:75:0d:76:91:31:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Validity
Not Before: Jun 27 06:15:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4cff5d613174bd5767c6365e5106454b2208e5a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2e:1a:c7:24:c3:69:cc:f0:99:9c:bd:76:71:
a0:6e:03:40:bb:5c:34:b5:5a:1e:87:56:19:39:cb:
cf:ff:f5:e6:41:68:e7:c1:24:9b:37:26:52:32:a3:
85:11:c2:12:a7:14:27:dd:a7:30:a3:fc:ed:fa:e8:
a1:b3:c6:92:65:fe:ae:18:29:b8:b5:80:c1:50:40:
70:b9:d9:1c:4f:cd:24:1a:0b:aa:a9:6c:b3:a7:f0:
9f:95:45:24:51:94:ff:d3:c3:2a:35:99:32:ae:12:
96:73:ec:96:97:37:71:8f:6f:61:5e:4c:31:fe:53:
df:67:bf:38:cb:93:32:d9:a9:59:31:f1:e3:93:ed:
87:c5:5b:de:a0:70:50:d8:06:a1:0f:8d:9c:c1:3f:
71:9a:5f:c0:5f:02:68:35:54:c0:03:2d:7e:12:7b:
55:d0:e8:c6:24:51:ef:fe:fa:6b:18:89:75:85:2c:
57:00:50:2a:eb:4f:21:46:04:d3:dc:41:be:95:08:
05:26:31:92:74:e1:fe:1c:12:04:d8:38:0f:bb:c1:
9e:10:60:ec:d1:33:b4:8d:38:cf:e3:4e:60:e4:1a:
11:7d:9b:44:39:99:02:fa:59:2a:2b:ff:7b:d4:24:
7f:79:2f:05:f7:38:d0:6b:3d:6e:04:df:3e:96:a7:
57:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FF:5D:61:31:74:BD:57:67:C6:36:5E:51:06:45:4B:22:08:E5:A7
X509v3 Authority Key Identifier:
keyid:9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/TP9dYTF0vVdnxjZeUQZFSyII5ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.158.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:06:43:35:bf:6f:5b:b3:ed:12:a3:f5:69:fd:44:f1:ef:02:
26:92:b0:fc:28:a0:a3:f1:3e:f7:33:e9:40:b0:d4:07:10:a1:
24:79:6e:5e:6b:d5:6a:83:25:cf:f0:f1:03:60:b8:ce:d0:af:
7a:f7:c9:a3:e8:34:72:2a:a6:de:3b:4a:6f:05:a4:97:08:07:
46:38:43:fa:1c:9e:d2:b3:93:47:25:29:d6:7a:86:d7:e2:9d:
9d:b1:f7:f3:68:1a:eb:9f:bb:67:70:94:3c:05:7a:bc:48:51:
21:a4:2a:cc:0b:92:27:0a:b3:5b:81:2d:00:5d:7b:b9:b1:7c:
05:ed:c8:77:d7:3b:c3:e0:34:43:0b:20:08:5f:dd:53:77:39:
8a:cc:63:9b:09:07:2c:c0:c1:5d:a6:55:ec:1d:7b:0f:c0:41:
b3:dd:21:82:de:66:ea:35:ee:2f:4d:55:6d:ab:44:33:1c:27:
fd:70:7e:8f:b9:19:d7:ce:1d:18:93:f5:e4:c1:b7:49:b9:59:
fc:c9:32:81:21:a4:52:b4:8a:42:ef:1b:f4:34:b3:c9:52:8f:
d7:9d:2d:4e:47:16:b8:0c:43:fe:19:3a:d0:a4:74:6b:c6:b2:
6c:68:12:4f:b4:f3:8d:57:6c:97:19:3e:38:3e:d3:03:f5:eb:
5e:20:05:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:17:28 2025 by rpki-client