Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/TMHOC9wHX1rJxaiSMLx9Echx3zw.roa
File: TMHOC9wHX1rJxaiSMLx9Echx3zw.roa (raw, json)
Hash identifier: 6/uJg6ZI9mm5TR8x6Rj4/9T2uacQMFztBl7MRd/GXGE=
Subject key identifier: 4C:C1:CE:0B:DC:07:5F:5A:C9:C5:A8:92:30:BC:7D:11:C8:71:DF:3C
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 0198AB4F19A2830F69A2194F8E268650D2B2
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/TMHOC9wHX1rJxaiSMLx9Echx3zw.roa
Signing time: Fri 15 Aug 2025 01:19:04 +0000
ROA not before: Fri 15 Aug 2025 01:19:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44547
IP address blocks: 5.178.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ab:4f:19:a2:83:0f:69:a2:19:4f:8e:26:86:50:d2:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Aug 15 01:19:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4cc1ce0bdc075f5ac9c5a89230bc7d11c871df3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6e:8b:73:81:b3:42:97:e4:bf:83:a6:31:28:
88:b6:60:6c:d0:83:f0:e8:52:b1:7f:37:b1:c4:04:
a1:0e:09:b8:f0:53:00:2f:cf:7c:fc:79:4b:ff:44:
63:30:b8:85:59:5e:5e:cf:01:62:60:f0:f4:c9:84:
9a:07:57:6e:06:4c:ab:2e:c9:93:0b:8e:c1:a9:df:
ef:4e:42:cd:42:49:04:e6:24:97:1e:7d:72:30:49:
d6:71:ad:7a:a2:a8:3e:82:92:6a:2c:55:45:32:1b:
a7:79:83:21:11:72:9e:c8:96:7c:e9:2d:d3:6c:83:
4b:f2:3f:2a:ff:82:20:7f:56:57:91:a6:26:60:e8:
a1:6f:69:a9:d6:8b:b9:3e:d8:5e:1d:70:18:83:c8:
d6:9b:66:e2:c4:ba:69:d6:58:7f:ac:41:b1:a6:cc:
61:02:33:c9:de:89:a7:b3:2f:d3:cf:51:e2:49:f7:
97:df:4d:ed:95:18:d7:ab:9b:4a:12:7b:30:f4:a5:
ff:20:05:b2:58:18:ad:3f:d1:82:f1:fb:2d:06:d9:
1f:d1:d0:9d:04:be:7c:d0:99:04:01:d2:ae:fb:42:
72:38:ea:39:00:e0:3d:ab:0e:e6:2f:e1:09:47:85:
aa:f5:c1:22:bc:20:d6:3a:8c:79:68:0a:77:bb:3a:
b9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C1:CE:0B:DC:07:5F:5A:C9:C5:A8:92:30:BC:7D:11:C8:71:DF:3C
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/TMHOC9wHX1rJxaiSMLx9Echx3zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.100.0/24
Signature Algorithm: sha256WithRSAEncryption
17:df:6f:c8:47:60:ef:9f:d0:06:54:9d:05:79:f8:05:03:19:
eb:01:48:0f:c9:3f:ce:c3:42:d3:42:f7:0a:4c:c2:43:fe:56:
a1:81:e9:fb:00:b5:a0:3a:38:6f:2a:37:60:6e:b6:5e:04:87:
52:ef:49:b9:a7:43:5c:60:30:3b:40:aa:f0:50:ad:0c:55:f1:
ea:11:55:26:be:70:12:1b:29:fa:61:12:73:ca:bc:a9:55:63:
56:1f:51:89:6d:b7:f3:f2:82:de:0e:03:41:28:ba:03:95:63:
59:6f:92:f2:47:a3:60:a4:e0:32:f4:dd:0a:34:5a:88:5c:47:
78:42:54:2d:03:b0:d2:2d:e2:37:ab:92:dc:d4:c0:76:28:24:
0a:18:05:b7:a8:6f:18:30:c4:f6:b8:e3:29:31:42:c1:fc:6d:
24:ab:b3:6c:40:aa:39:b5:5e:57:3b:80:df:74:6a:74:11:5a:
a9:7f:c9:33:bf:62:2c:9a:dd:e8:43:80:cc:1f:29:d2:12:29:
ec:c8:f3:37:e5:e5:ae:ee:94:e8:33:de:3f:79:a4:b3:a1:b2:
4b:c0:5e:e8:d5:43:dc:97:c1:d9:8c:80:2b:ba:73:a8:43:9e:
42:81:cf:90:4d:93:21:64:61:de:c7:0f:73:a8:3a:36:0c:cc:
0b:57:e3:03
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZirTxmigw9pohlPjiaGUNKyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMTg4MTczMmEzZTI0NWE5NTliYzY3OWUwNDU4YzM5Zjg5
M2U0NmIwHhcNMjUwODE1MDExOTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2MxY2UwYmRjMDc1ZjVhYzljNWE4OTIzMGJjN2QxMWM4NzFkZjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA326Lc4GzQpfkv4OmMSiItmBs0IPw
6FKxfzexxAShDgm48FMAL898/HlL/0RjMLiFWV5ezwFiYPD0yYSaB1duBkyrLsmT
C47Bqd/vTkLNQkkE5iSXHn1yMEnWca16oqg+gpJqLFVFMhuneYMhEXKeyJZ86S3T
bINL8j8q/4Igf1ZXkaYmYOihb2mp1ou5PtheHXAYg8jWm2bixLpp1lh/rEGxpsxh
AjPJ3omnsy/Tz1HiSfeX303tlRjXq5tKEnsw9KX/IAWyWBitP9GC8fstBtkf0dCd
BL580JkEAdKu+0JyOOo5AOA9qw7mL+EJR4Wq9cEivCDWOox5aAp3uzq5XQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEzBzgvcB19aycWokjC8fRHIcd88MB8GA1UdIwQY
MBaAFBMYgXMqPiRalZvGeeBFjDn4k+RrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUt
Y2Q2MTUyMjYxYzZmLzEvVE1IT0M5d0hYMXJKeGFpU01MeDlFY2h4M3p3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUtY2Q2MTUyMjYxYzZm
LzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbJkMA0G
CSqGSIb3DQEBCwUAA4IBAQAX32/IR2Dvn9AGVJ0FefgFAxnrAUgPyT/Ow0LTQvcK
TMJD/lahgen7ALWgOjhvKjdgbrZeBIdS70m5p0NcYDA7QKrwUK0MVfHqEVUmvnAS
Gyn6YRJzyrypVWNWH1GJbbfz8oLeDgNBKLoDlWNZb5LyR6NgpOAy9N0KNFqIXEd4
QlQtA7DSLeI3q5Lc1MB2KCQKGAW3qG8YMMT2uOMpMULB/G0kq7NsQKo5tV5XO4Df
dGp0EVqpf8kzv2Ismt3oQ4DMHynSEinsyPM35eWu7pToM94/eaSzobJLwF7o1UPc
l8HZjIArunOoQ55Cgc+QTZMhZGHexw9zqDo2DMwLV+MD
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:55:14 2025 by rpki-client