Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/TejsNzlv7GKxiII-bvE87-We43E.roa
File: TejsNzlv7GKxiII-bvE87-We43E.roa (raw, json)
Hash identifier: mLnGXICbVXamBVxV9Y72sSIwMnc1cAfg9GvoIhGlM1Q=
Subject key identifier: 4D:E8:EC:37:39:6F:EC:62:B1:88:82:3E:6E:F1:3C:EF:E5:9E:E3:71
Certificate issuer: /CN=4e78b6d00614f5565d9d8af8247cc72ea9b8833d
Certificate serial: 0196A4AD69D2D08EADA414C43EB5B83E8CA8
Authority key identifier: 4E:78:B6:D0:06:14:F5:56:5D:9D:8A:F8:24:7C:C7:2E:A9:B8:83:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/TejsNzlv7GKxiII-bvE87-We43E.roa
Signing time: Tue 06 May 2025 08:19:10 +0000
ROA not before: Tue 06 May 2025 08:19:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212734
IP address blocks: 80.92.200.0/24 maxlen: 24
80.92.201.0/24 maxlen: 24
80.92.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:ad:69:d2:d0:8e:ad:a4:14:c4:3e:b5:b8:3e:8c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e78b6d00614f5565d9d8af8247cc72ea9b8833d
Validity
Not Before: May 6 08:19:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4de8ec37396fec62b188823e6ef13cefe59ee371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c6:d9:f1:97:30:bf:d0:f7:3c:a5:22:2f:54:
cd:e2:ab:f2:ad:80:e9:63:b0:8f:33:93:1c:9e:b0:
01:65:90:dd:57:7b:03:a4:90:41:6d:19:a1:b4:96:
9b:a5:1a:3e:38:1f:cc:66:0d:33:bc:07:00:cb:a6:
eb:ba:f9:9e:65:06:41:81:c6:5c:89:d0:4d:73:f4:
fe:00:ea:30:32:d4:ee:d3:33:fb:5d:45:8a:df:bb:
e7:5d:aa:57:3e:68:5f:92:33:b5:5d:20:b4:19:89:
14:64:55:5e:17:6e:9b:a5:df:30:b2:ff:7e:29:e1:
1d:be:8e:ec:da:94:01:e1:4c:33:51:b5:6f:20:a0:
dd:61:8b:20:25:bf:c6:3f:a0:b0:61:f0:5b:f0:ff:
73:52:7d:38:43:2b:d8:b2:73:2b:9b:8c:cb:f3:ea:
6c:93:b1:32:c3:f3:1e:89:2a:f2:d4:4a:8d:f4:45:
bd:e3:fd:e2:86:da:46:d9:6b:57:d2:6c:36:6d:15:
49:36:98:95:04:81:ac:9b:cf:66:34:5c:8b:4f:1a:
ca:72:63:a7:e7:d8:a1:3b:a0:0f:b0:44:d0:c2:10:
a9:79:11:5d:81:d4:f3:3c:e9:6f:82:07:48:87:50:
55:cb:da:ec:17:03:75:7f:db:d0:24:e9:3c:ba:83:
16:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E8:EC:37:39:6F:EC:62:B1:88:82:3E:6E:F1:3C:EF:E5:9E:E3:71
X509v3 Authority Key Identifier:
keyid:4E:78:B6:D0:06:14:F5:56:5D:9D:8A:F8:24:7C:C7:2E:A9:B8:83:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/TejsNzlv7GKxiII-bvE87-We43E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.92.200.0/23
80.92.203.0/24
Signature Algorithm: sha256WithRSAEncryption
74:4b:a9:06:cb:83:38:06:68:c6:64:23:9a:cb:3b:36:6b:cb:
ec:fb:3a:d5:6f:8f:29:18:d4:70:3a:4f:83:87:09:0e:c0:61:
95:b7:9b:a3:43:80:82:b9:f4:ab:ae:63:81:97:82:29:bc:7a:
68:ac:63:b7:b5:b3:e6:6f:58:22:36:f1:cc:43:29:ad:36:5c:
3d:cb:ea:74:ba:03:db:c4:08:eb:fd:51:02:fb:34:9a:d2:42:
6f:4e:97:92:ed:2c:df:e2:9b:af:44:ba:30:24:34:ba:c4:d4:
1e:6c:9c:45:e7:f2:68:db:92:bb:cf:27:e3:b5:17:80:cd:34:
d8:e8:af:df:5b:8b:ff:fe:75:e3:b1:82:bf:cb:18:58:68:49:
16:54:77:49:40:4a:26:40:47:76:f8:7f:c8:83:3a:82:7e:c3:
ef:57:3e:82:a1:bf:da:20:ee:fc:8c:f2:de:9b:dd:4c:4d:43:
98:3a:d8:0f:00:1e:56:5b:d9:b6:bc:a4:af:41:4c:ed:bf:7a:
9f:20:9b:92:e4:4d:9f:47:e6:18:9a:50:bf:75:38:f2:e7:fc:
69:dc:c1:e9:4f:cb:d6:38:b2:97:18:0a:13:a0:25:44:d2:a0:
55:48:13:75:13:3a:9b:ec:be:af:da:09:26:d4:9d:17:fc:d5:
5a:ff:7f:f9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZakrWnS0I6tpBTEPrW4PoyoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNzhiNmQwMDYxNGY1NTY1ZDlkOGFmODI0N2NjNzJlYTli
ODgzM2QwHhcNMjUwNTA2MDgxOTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGU4ZWMzNzM5NmZlYzYyYjE4ODgyM2U2ZWYxM2NlZmU1OWVlMzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcbZ8Zcwv9D3PKUiL1TN4qvyrYDp
Y7CPM5McnrABZZDdV3sDpJBBbRmhtJabpRo+OB/MZg0zvAcAy6bruvmeZQZBgcZc
idBNc/T+AOowMtTu0zP7XUWK37vnXapXPmhfkjO1XSC0GYkUZFVeF26bpd8wsv9+
KeEdvo7s2pQB4UwzUbVvIKDdYYsgJb/GP6CwYfBb8P9zUn04QyvYsnMrm4zL8+ps
k7Eyw/MeiSry1EqN9EW94/3ihtpG2WtX0mw2bRVJNpiVBIGsm89mNFyLTxrKcmOn
59ihO6APsETQwhCpeRFdgdTzPOlvggdIh1BVy9rsFwN1f9vQJOk8uoMWHQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFE3o7Dc5b+xisYiCPm7xPO/lnuNxMB8GA1UdIwQY
MBaAFE54ttAGFPVWXZ2K+CR8xy6puIM9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG5pMjBBWVU5VlpkbllyNEpIekhMcW00Z3owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9jYjgyNjUtYzYzMi00ODEzLWI4NTgt
ZGVmMzg2NzQzZjMyLzEvVGVqc056bHY3R0t4aUlJLWJ2RTg3LVdlNDNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9jYjgyNjUtYzYzMi00ODEzLWI4NTgtZGVmMzg2NzQzZjMy
LzEvVG5pMjBBWVU5VlpkbllyNEpIekhMcW00Z3owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBUFzIAwQA
UFzLMA0GCSqGSIb3DQEBCwUAA4IBAQB0S6kGy4M4BmjGZCOayzs2a8vs+zrVb48p
GNRwOk+DhwkOwGGVt5ujQ4CCufSrrmOBl4IpvHporGO3tbPmb1giNvHMQymtNlw9
y+p0ugPbxAjr/VEC+zSa0kJvTpeS7Szf4puvRLowJDS6xNQebJxF5/Jo25K7zyfj
tReAzTTY6K/fW4v//nXjsYK/yxhYaEkWVHdJQEomQEd2+H/IgzqCfsPvVz6Cob/a
IO78jPLem91MTUOYOtgPAB5WW9m2vKSvQUztv3qfIJuS5E2fR+YYmlC/dTjy5/xp
3MHpT8vWOLKXGAoToCVE0qBVSBN1Ezqb7L6v2gkm1J0X/NVa/3/5
-----END CERTIFICATE-----
Generated at Tue May 13 13:33:21 2025 by rpki-client