Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/TdoQIASyikqUevYbZs5T-_NUhsA.roa
File: TdoQIASyikqUevYbZs5T-_NUhsA.roa (raw, json)
Hash identifier: GUpM54hhs9YZPF//jA+AK0p+Pcnyv2rBVFcTgqhcKTE=
Subject key identifier: 4D:DA:10:20:04:B2:8A:4A:94:7A:F6:1B:66:CE:53:FB:F3:54:86:C0
Certificate issuer: /CN=74198f7022b9560501db448af60301fa285e9236
Certificate serial: 0199565C06443ABB704E042379AC5D2F2BD2
Authority key identifier: 74:19:8F:70:22:B9:56:05:01:DB:44:8A:F6:03:01:FA:28:5E:92:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/TdoQIASyikqUevYbZs5T-_NUhsA.roa
Signing time: Wed 17 Sep 2025 06:28:15 +0000
ROA not before: Wed 17 Sep 2025 06:28:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3342
IP address blocks: 92.241.192.0/20 maxlen: 20
92.241.216.0/21 maxlen: 21
157.250.160.0/20 maxlen: 20
170.118.224.0/20 maxlen: 20
178.72.16.0/21 maxlen: 21
185.98.96.0/22 maxlen: 22
185.157.132.0/22 maxlen: 22
185.170.132.0/22 maxlen: 22
209.131.112.0/22 maxlen: 22
212.237.250.0/23 maxlen: 23
217.61.250.0/23 maxlen: 23
2a06:b00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:56:5c:06:44:3a:bb:70:4e:04:23:79:ac:5d:2f:2b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74198f7022b9560501db448af60301fa285e9236
Validity
Not Before: Sep 17 06:28:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4dda102004b28a4a947af61b66ce53fbf35486c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:18:b9:6c:c4:5f:01:26:e5:6f:17:c7:ae:56:
95:4c:58:82:2f:03:53:5c:54:b7:04:24:43:48:46:
9e:24:be:be:59:ef:b8:4c:cf:fe:e0:08:9c:7b:27:
11:c1:ae:20:8d:a4:78:ba:b3:6b:c2:69:87:b7:28:
11:2f:9a:54:e1:af:4b:ad:11:7f:f3:87:fc:1c:be:
98:41:36:f4:a7:ba:53:ae:75:1d:86:66:f4:54:9d:
e2:22:13:b1:5a:31:73:e3:0e:5c:d7:c7:bc:92:77:
da:06:01:49:bd:31:7f:05:4a:2c:95:95:c7:48:7e:
02:a7:4a:2f:ea:e1:db:bf:c7:c2:4e:b4:77:fe:6a:
ad:3d:fe:47:06:d5:32:79:45:32:65:5c:8a:ed:6d:
62:03:07:5f:9d:e4:3a:a9:a4:fd:46:af:74:75:f3:
d7:a5:e0:84:6d:ee:9f:fd:1d:6f:e3:c9:6d:93:41:
32:44:00:b8:ff:a4:d5:a8:ae:6c:0d:a6:ca:8e:63:
b7:c8:39:4e:bc:26:ff:00:fc:a3:3c:46:de:50:80:
87:b4:27:6f:a8:9a:54:b2:59:8f:c2:3f:f7:26:8a:
b0:c6:06:4b:1c:55:41:ec:d5:10:7b:35:0d:72:f3:
71:ee:13:50:76:6f:5e:dc:30:23:a9:13:33:d2:c4:
3a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:DA:10:20:04:B2:8A:4A:94:7A:F6:1B:66:CE:53:FB:F3:54:86:C0
X509v3 Authority Key Identifier:
keyid:74:19:8F:70:22:B9:56:05:01:DB:44:8A:F6:03:01:FA:28:5E:92:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/TdoQIASyikqUevYbZs5T-_NUhsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.241.192.0/20
92.241.216.0/21
157.250.160.0/20
170.118.224.0/20
178.72.16.0/21
185.98.96.0/22
185.157.132.0/22
185.170.132.0/22
209.131.112.0/22
212.237.250.0/23
217.61.250.0/23
IPv6:
2a06:b00::/29
Signature Algorithm: sha256WithRSAEncryption
1b:6d:6d:53:16:83:35:4d:d7:15:35:3b:ee:de:0d:47:f8:a1:
2b:1f:79:04:c8:95:3d:86:9b:61:17:07:09:ea:77:f0:bf:a3:
a5:a8:6a:b4:b1:c3:f8:25:dc:fd:5a:c8:d1:f8:51:e6:27:d8:
9c:d9:46:fc:c7:89:ae:09:64:b4:e1:1d:e2:1b:58:dc:b5:a0:
c1:1a:93:56:63:a4:88:4d:bd:98:45:ee:3a:25:e9:4e:86:3b:
eb:65:0d:45:a2:48:07:5b:c7:6f:51:ac:76:d7:1c:6a:b9:b3:
fa:6f:82:57:85:91:5f:b5:38:06:ee:ca:b9:1d:cd:f8:6b:2d:
0e:ea:ef:4d:a9:02:27:6a:72:f0:65:59:0d:e9:e7:c5:8d:5a:
66:01:47:1e:45:f6:c5:90:8a:b8:3c:a8:8c:a4:6b:45:49:0c:
97:a5:49:e7:62:ea:04:44:e6:d0:9b:dd:44:bf:8d:5e:56:74:
a6:42:e5:67:df:4c:b8:c7:ec:83:33:7a:66:81:a7:8d:52:a1:
2c:3b:4e:02:72:60:c8:67:1a:0c:74:88:29:f8:59:11:d6:63:
7c:34:95:d6:f5:7f:a3:36:d9:a1:63:79:a5:2d:89:cf:29:75:
3a:34:10:59:b4:3c:05:9a:0b:b3:5c:8e:25:52:77:10:9e:81:
f0:d2:5b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:25:36 2025 by rpki-client