Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/TTUCwJ5Rphm99i4-oQnp2WqH53Q.roa
File: TTUCwJ5Rphm99i4-oQnp2WqH53Q.roa (raw, json)
Hash identifier: RLoA51wJLV0x8aHqMkZQVkS1Oj/Vdtu7nGSHCZOAOsk=
Subject key identifier: 4D:35:02:C0:9E:51:A6:19:BD:F6:2E:3E:A1:09:E9:D9:6A:87:E7:74
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 0199E6C55DAAD13B022A9CEF6D5A45BE1B17
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/TTUCwJ5Rphm99i4-oQnp2WqH53Q.roa
Signing time: Wed 15 Oct 2025 07:28:38 +0000
ROA not before: Wed 15 Oct 2025 07:28:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44341
IP address blocks: 46.8.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e6:c5:5d:aa:d1:3b:02:2a:9c:ef:6d:5a:45:be:1b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Oct 15 07:28:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d3502c09e51a619bdf62e3ea109e9d96a87e774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:01:27:0d:b9:4e:3b:97:46:7d:5d:4b:89:cb:
ae:6c:8a:b4:07:06:b7:9d:3f:11:45:aa:d2:78:d1:
b7:9f:af:84:10:9f:f1:b4:5c:2d:7a:ad:6e:9c:1f:
fd:3b:90:39:8a:f8:6d:05:36:d6:7c:e7:71:ad:6f:
84:69:21:d2:58:cd:f6:93:16:41:8b:db:c2:85:f6:
02:29:9a:50:4e:92:84:48:d8:33:2c:77:a9:7f:d0:
af:99:89:60:b9:91:10:51:60:05:02:3a:bf:61:d7:
d6:72:9d:af:f4:a7:c9:5a:4b:b8:84:14:18:50:0f:
7a:3b:d5:50:ac:c7:fd:e2:47:26:6f:80:e4:78:26:
e4:51:1e:fb:3b:47:aa:f5:4e:0d:13:39:f9:f7:08:
18:65:86:c5:9b:24:9d:b9:4b:85:62:c3:bb:d4:ee:
c4:50:b1:f5:e7:88:a2:d4:2d:d9:8b:cd:56:dd:c4:
62:c9:43:fc:01:75:79:48:fb:b6:d6:22:dc:56:2d:
29:8a:b8:07:ee:56:c9:b1:1d:c0:8b:82:dc:9d:84:
2b:dd:43:f4:90:45:c9:92:19:4c:af:bb:6e:08:0c:
c1:c1:81:05:0c:b1:01:53:d9:54:36:03:2e:66:29:
94:ac:90:fd:16:e0:bc:de:07:20:f4:b5:19:43:e5:
97:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:35:02:C0:9E:51:A6:19:BD:F6:2E:3E:A1:09:E9:D9:6A:87:E7:74
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/TTUCwJ5Rphm99i4-oQnp2WqH53Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.206.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:c1:b2:e1:3b:30:c0:d2:ec:49:c6:ce:7b:f6:77:35:fc:71:
bf:e6:4d:33:b9:e0:18:e2:06:51:44:80:49:13:93:21:d5:4b:
d7:82:c2:d6:15:0e:ae:fd:df:53:84:d9:e9:d7:1c:89:7a:0e:
68:25:c9:3e:f1:bc:d9:0f:35:a0:d8:ba:70:8c:da:28:9a:fb:
c1:f3:c6:5a:78:6b:b5:f3:35:42:25:60:73:3a:cb:8d:f3:7e:
da:e2:b7:21:40:6a:63:c1:8f:9a:08:71:79:96:f4:fa:4b:4c:
c8:cc:a4:16:bb:05:9a:2d:72:8a:05:84:86:08:27:ee:bd:e6:
67:0f:9a:a1:c3:ac:e1:12:46:9b:1e:38:23:b4:f8:ec:27:fd:
b7:29:b2:1c:15:0f:6a:45:f3:1e:2a:ec:34:e6:33:c1:6d:1a:
b5:33:df:d2:b1:d6:eb:0a:f3:4f:9b:e3:6b:39:8b:22:0a:90:
96:79:6d:a9:6f:4f:12:98:6a:93:7b:be:84:40:07:80:70:99:
6d:0e:4a:01:38:b9:9a:f3:12:92:c2:e3:af:2e:9c:54:11:05:
cd:9a:6f:9d:60:d2:09:7d:3d:83:35:97:68:28:f3:06:33:52:
98:7d:9c:6b:8a:92:bf:6e:d3:83:3c:a5:a0:27:56:c0:03:03:
c4:b8:4f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:10:30 2025 by rpki-client