Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/TjLS0-sv5HlbfwuedxiTX3hfr70.roa
File: TjLS0-sv5HlbfwuedxiTX3hfr70.roa (raw, json)
Hash identifier: Xw4v/XHqrjPEUz2/nVAIr6aO/uYB4Ak47yBZaE0uW0Q=
Subject key identifier: 4E:32:D2:D3:EB:2F:E4:79:5B:7F:0B:9E:77:18:93:5F:78:5F:AF:BD
Certificate issuer: /CN=e3342c586371d465bcf35f79e1660e11e0805155
Certificate serial: 01977DFACC8207B151AADC9F917E31AFC2F7
Authority key identifier: E3:34:2C:58:63:71:D4:65:BC:F3:5F:79:E1:66:0E:11:E0:80:51:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/TjLS0-sv5HlbfwuedxiTX3hfr70.roa
Signing time: Tue 17 Jun 2025 13:01:17 +0000
ROA not before: Tue 17 Jun 2025 13:01:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38923
IP address blocks: 83.142.136.0/21 maxlen: 21
193.218.148.0/22 maxlen: 22
194.54.16.0/22 maxlen: 22
195.206.112.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:fa:cc:82:07:b1:51:aa:dc:9f:91:7e:31:af:c2:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3342c586371d465bcf35f79e1660e11e0805155
Validity
Not Before: Jun 17 13:01:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e32d2d3eb2fe4795b7f0b9e7718935f785fafbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:68:5b:74:d7:f7:d4:78:a7:a8:01:a4:e5:f1:
4b:60:45:a2:b5:2d:2f:79:46:2a:1d:44:31:95:16:
7d:eb:2e:1c:1b:af:c9:35:f5:d7:a1:d5:a3:6b:78:
6e:db:73:d6:8e:d6:21:8f:ca:fc:6a:43:08:5c:cd:
46:70:8b:6b:43:4f:39:9e:5d:7a:10:6c:04:7a:98:
e0:ff:14:54:bd:3c:3e:a2:c0:56:58:28:16:3c:a3:
97:0c:f6:2b:89:19:59:2f:23:48:43:38:ca:6f:1a:
e8:f2:84:b8:21:92:d1:56:ce:a1:04:11:3c:75:49:
01:8c:41:36:7b:b9:30:c9:ab:4d:f6:43:de:29:23:
20:3f:36:05:a1:e3:fe:90:2c:aa:c8:c1:e3:35:9f:
5c:6f:44:f1:10:37:80:46:21:b0:6d:41:04:40:e1:
7b:df:9a:fa:3c:72:f4:df:fe:93:ba:8a:0a:3e:83:
6e:a9:73:f5:3b:b8:84:d4:c4:76:d0:11:aa:22:4a:
9e:a8:47:d8:d4:d4:9f:05:b4:fd:89:0e:fc:08:9e:
65:ba:7a:3a:b0:02:89:11:3e:37:0c:51:07:f6:53:
59:3b:74:cd:34:12:a8:a8:2c:a3:79:a8:cc:51:9a:
ae:0f:af:f1:3d:e5:1f:fd:56:74:0a:8a:8a:48:f6:
1c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:32:D2:D3:EB:2F:E4:79:5B:7F:0B:9E:77:18:93:5F:78:5F:AF:BD
X509v3 Authority Key Identifier:
keyid:E3:34:2C:58:63:71:D4:65:BC:F3:5F:79:E1:66:0E:11:E0:80:51:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/TjLS0-sv5HlbfwuedxiTX3hfr70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.142.136.0/21
193.218.148.0/22
194.54.16.0/22
195.206.112.0/22
Signature Algorithm: sha256WithRSAEncryption
03:ee:3e:b4:7e:7e:54:87:a1:87:dc:72:68:60:fd:e8:e1:ee:
2d:a4:6f:59:69:1f:f2:7c:f2:11:d6:20:2f:da:62:36:67:82:
c3:a1:40:c8:ff:12:75:be:f0:ff:b2:e3:d3:42:ea:5c:e4:a7:
41:fb:bd:62:f1:9c:3b:16:68:76:85:16:08:06:47:0d:50:58:
3c:43:25:d9:72:5b:6a:15:12:0b:b6:3d:ce:5c:35:0c:62:bf:
66:eb:5e:22:87:1d:4e:15:8a:8e:a1:1c:8c:3f:99:7d:64:04:
5c:90:fd:51:81:d4:18:97:df:74:88:48:34:c0:5a:39:1e:fa:
43:fe:e1:56:5b:f3:8f:6c:80:eb:58:fe:56:ec:6b:26:26:e2:
29:8c:6f:0c:37:a3:a4:e3:c7:6d:c2:04:2b:88:fc:66:11:c5:
2a:b4:f1:1b:8b:db:f0:6d:0f:32:1f:dc:78:18:d8:91:66:a7:
4e:94:0d:1a:77:d8:c7:b3:c1:5a:24:76:5e:65:ca:00:60:e9:
12:4a:a4:4e:a9:99:38:e1:62:3b:af:59:99:82:6f:e6:02:5e:
41:20:ca:66:ef:82:fd:ef:ba:a0:ca:7b:24:d8:35:38:48:36:
97:48:de:a3:68:e7:a5:45:fc:b2:00:32:bc:d7:29:22:45:96:
b7:f2:d3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:27:26 2025 by rpki-client