Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/tlGel_aESKh9Q5NcAJwydSlGFxg.roa
File: tlGel_aESKh9Q5NcAJwydSlGFxg.roa (raw, json)
Hash identifier: +7ZMdrX7ZPoXi90BV30MCP++snK3AB9I77yJbSA2Q3M=
Subject key identifier: B6:51:9E:97:F6:84:48:A8:7D:43:93:5C:00:9C:32:75:29:46:17:18
Certificate issuer: /CN=0287a4e2cfa8ecd02b507302b3c6db17f211742f
Certificate serial: 0198AADD92996A84757524EA9B59BB2887EE
Authority key identifier: 02:87:A4:E2:CF:A8:EC:D0:2B:50:73:02:B3:C6:DB:17:F2:11:74:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aoek4s-o7NArUHMCs8bbF_IRdC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/tlGel_aESKh9Q5NcAJwydSlGFxg.roa
Signing time: Thu 14 Aug 2025 23:15:04 +0000
ROA not before: Thu 14 Aug 2025 23:15:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202639
IP address blocks: 193.56.152.0/22 maxlen: 22
193.56.152.0/24 maxlen: 24
193.56.153.0/24 maxlen: 24
193.56.154.0/24 maxlen: 24
193.56.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aoek4s-o7NArUHMCs8bbF_IRdC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:aa:dd:92:99:6a:84:75:75:24:ea:9b:59:bb:28:87:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0287a4e2cfa8ecd02b507302b3c6db17f211742f
Validity
Not Before: Aug 14 23:15:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6519e97f68448a87d43935c009c327529461718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:72:a1:b1:90:5e:25:7c:6e:1e:99:22:16:1b:
57:24:c3:0f:c1:36:60:77:7f:ea:39:fc:d4:56:d9:
c7:fe:c6:12:8b:c4:c4:19:73:78:d9:ae:82:2b:5a:
50:ff:1a:2b:f5:56:a3:1c:90:47:18:7d:1c:b0:a2:
29:ea:9b:7e:93:2c:37:94:b5:f5:be:c5:88:6e:f5:
b3:92:4c:ef:64:c6:46:2e:0e:4e:65:b3:69:58:9e:
83:90:91:d3:d3:5c:f1:b9:b4:a1:31:15:a3:c0:34:
70:bb:9b:31:8d:c2:24:43:6e:c9:6b:80:b8:04:73:
8f:f7:2e:6c:37:d3:80:cc:ff:c4:6b:2d:d7:f5:e0:
0c:63:43:77:6d:8f:84:9e:9a:fb:29:cc:4a:a9:5e:
ae:1d:4d:66:9e:9c:43:ec:ad:22:06:84:d0:98:da:
25:c7:1d:12:88:6e:38:d5:a8:cc:97:b4:40:14:8e:
b7:41:1d:ff:8c:64:a3:fc:fa:1a:02:ce:95:e5:6d:
af:96:e9:fa:b3:14:ed:cb:36:b2:05:bb:eb:7d:ee:
76:d2:5f:fb:e9:c2:b2:a7:72:d2:c3:81:fa:88:cd:
6c:23:50:ea:4e:77:f2:85:0b:b6:f0:74:92:09:1a:
95:56:fe:b7:3b:7f:db:1a:eb:b8:e4:d6:de:03:79:
1a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:51:9E:97:F6:84:48:A8:7D:43:93:5C:00:9C:32:75:29:46:17:18
X509v3 Authority Key Identifier:
keyid:02:87:A4:E2:CF:A8:EC:D0:2B:50:73:02:B3:C6:DB:17:F2:11:74:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aoek4s-o7NArUHMCs8bbF_IRdC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/tlGel_aESKh9Q5NcAJwydSlGFxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.152.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:65:db:f0:62:09:4f:34:08:2e:1f:76:e8:09:dd:06:a1:e2:
08:00:91:de:5d:02:e8:ee:2a:65:64:fd:5e:2a:d7:4b:cf:9c:
79:cb:bd:73:ab:81:c9:8f:c7:c1:7a:60:cf:c6:15:90:0e:d8:
24:94:08:e3:8f:5c:3d:d2:96:f0:aa:be:57:ed:2f:0c:a0:c3:
49:6d:3a:eb:91:ca:b4:a1:4b:86:40:de:8f:a6:7d:e9:11:10:
71:81:d0:7d:c4:74:34:64:e5:ee:11:c9:28:dc:f3:2a:95:87:
02:16:29:68:c4:a6:90:64:c8:09:98:20:e7:11:08:52:0f:a6:
56:dc:ba:a9:7e:91:92:08:75:45:d5:39:44:c9:4e:a7:1d:77:
a8:52:91:0b:e7:fe:f7:8b:b3:ad:59:98:cc:b1:00:04:c5:2c:
e8:7a:e5:e4:68:67:4e:f4:d0:e3:ba:c1:e5:5d:3f:1f:d5:00:
56:5a:4b:bc:a2:60:0a:51:a9:39:c4:be:fe:38:ce:6f:f4:a4:
95:22:00:70:1a:49:9e:ee:25:e2:a4:6e:70:72:a9:b0:1d:d3:
f2:dc:34:c8:d3:3f:32:a8:5e:11:68:d9:1c:0c:a5:0a:07:af:
32:44:cc:71:e2:53:df:21:c5:0d:0d:3e:65:ff:c8:5d:53:03:
ee:69:db:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:27:14 2025 by rpki-client