Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/TBs_8YMvmdiJjenAGhwwCjcNHYI.roa
File: TBs_8YMvmdiJjenAGhwwCjcNHYI.roa (raw, json)
Hash identifier: jMOO0WI2VuvW7cVJaN9yWkUsk5iYntxno76Se2WWgWE=
Subject key identifier: 4C:1B:3F:F1:83:2F:99:D8:89:8D:E9:C0:1A:1C:30:0A:37:0D:1D:82
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 0199970EA2EFAC0B84FEA0C86E0A24FDCF9A
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/TBs_8YMvmdiJjenAGhwwCjcNHYI.roa
Signing time: Mon 29 Sep 2025 19:59:02 +0000
ROA not before: Mon 29 Sep 2025 19:59:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41745
IP address blocks: 92.118.169.0/24 maxlen: 24
92.118.170.0/24 maxlen: 24
185.58.115.0/24 maxlen: 24
185.68.184.0/24 maxlen: 24
185.68.246.0/24 maxlen: 24
185.68.247.0/24 maxlen: 24
185.88.36.0/24 maxlen: 24
185.113.139.0/24 maxlen: 24
193.221.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:97:0e:a2:ef:ac:0b:84:fe:a0:c8:6e:0a:24:fd:cf:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Sep 29 19:59:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c1b3ff1832f99d8898de9c01a1c300a370d1d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:50:55:fa:4a:92:e9:a3:64:49:03:ea:ba:1f:
be:c4:4a:89:3e:5e:01:07:45:89:e4:98:17:8d:2e:
8d:d5:25:73:d5:ce:f7:7c:e3:38:77:07:50:73:35:
ab:24:4e:14:44:90:5d:3e:77:08:47:6a:27:eb:4c:
b6:ab:f1:a3:9e:1e:2b:80:b0:8e:d6:68:c7:9f:60:
5d:d6:e9:98:60:ee:9f:18:f0:85:97:a3:9d:cd:16:
db:6a:9c:c7:a0:41:1e:b8:59:23:94:b1:bc:1d:a6:
6f:41:20:be:c0:56:49:eb:14:e7:16:8b:20:20:4e:
bd:98:b5:ac:f9:74:42:79:a7:8a:3d:5a:0f:3b:d4:
2f:bb:bd:ca:3d:8f:07:a8:db:19:15:46:d6:47:f7:
d4:f7:06:43:d5:76:9e:5b:82:bb:b9:0e:60:14:8e:
84:b1:fd:22:a2:80:a8:2f:78:ee:d8:08:0d:a3:ea:
ae:4e:ed:12:f4:9e:f7:07:50:4f:89:62:c6:0b:5a:
68:79:f9:75:12:ca:60:25:27:aa:be:23:5a:cd:23:
6b:52:51:11:40:c5:dc:6a:88:f1:b6:89:49:88:a0:
4a:9f:68:74:81:51:39:6d:ba:79:7c:c7:e0:dc:b2:
af:fd:63:2d:58:b6:68:fa:e0:1d:bb:98:92:cd:c1:
8f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1B:3F:F1:83:2F:99:D8:89:8D:E9:C0:1A:1C:30:0A:37:0D:1D:82
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/TBs_8YMvmdiJjenAGhwwCjcNHYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.169.0-92.118.170.255
185.58.115.0/24
185.68.184.0/24
185.68.246.0/23
185.88.36.0/24
185.113.139.0/24
193.221.203.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:14:42:89:c2:f5:3f:64:32:50:30:33:20:0a:94:67:2a:b7:
68:c7:e8:1a:fe:d0:43:0c:3a:ca:8f:a7:c0:67:4f:49:5b:03:
56:89:fa:41:dd:8e:a2:d5:87:21:48:5d:7d:a6:db:3f:26:3a:
8f:98:b5:cf:3c:c2:8f:5b:73:49:62:fa:da:c7:d2:1a:f1:79:
a6:3e:1e:b8:bb:cc:03:0f:47:8c:f7:29:09:ea:5a:d7:4f:01:
eb:b1:c1:28:3d:ba:00:63:6e:67:cc:db:ab:72:b3:bf:98:6c:
af:7f:e5:84:cd:b5:91:af:4c:d8:3e:7d:7f:e4:8e:81:75:15:
39:13:42:cd:77:c9:88:af:56:b8:18:df:1f:4c:d6:08:bb:31:
22:a3:64:1d:28:26:df:92:b6:f1:14:c7:9b:2a:90:7f:97:72:
d5:3d:76:83:43:63:03:0d:8e:f7:53:0c:5f:ca:b9:0b:7f:0a:
e3:b9:11:d7:98:64:c7:0b:9d:dc:28:c8:20:40:7b:de:40:2b:
6b:b4:7c:94:95:24:0e:0b:3f:b6:f5:88:05:2f:e9:aa:84:78:
2a:de:8b:8f:40:61:91:17:20:b6:d7:03:5d:bb:83:19:e9:94:
01:d9:87:d5:fc:8a:47:cc:7d:46:97:08:4f:71:e6:78:80:1a:
0f:09:44:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:27:26 2025 by rpki-client