Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/TUiCM4KG56kUFHyQ4z62cK1w4aU.roa
File: TUiCM4KG56kUFHyQ4z62cK1w4aU.roa (raw, json)
Hash identifier: oeiYwDcvLf1IwsozoVBwiO3FZCf7r8vq2XpYtiKcyYc=
Subject key identifier: 4D:48:82:33:82:86:E7:A9:14:14:7C:90:E3:3E:B6:70:AD:70:E1:A5
Certificate issuer: /CN=c276a8ba874c3fbddad344d03258b3e2c04d7bcb
Certificate serial: 019977DA10A72C881DEAAFE4DBFFF7C564CE
Authority key identifier: C2:76:A8:BA:87:4C:3F:BD:DA:D3:44:D0:32:58:B3:E2:C0:4D:7B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnaouodMP73a00TQMliz4sBNe8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/TUiCM4KG56kUFHyQ4z62cK1w4aU.roa
Signing time: Tue 23 Sep 2025 18:33:23 +0000
ROA not before: Tue 23 Sep 2025 18:33:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206380
IP address blocks: 185.188.24.0/24 maxlen: 24
185.188.25.0/24 maxlen: 24
185.188.26.0/24 maxlen: 24
185.188.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnaouodMP73a00TQMliz4sBNe8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:77:da:10:a7:2c:88:1d:ea:af:e4:db:ff:f7:c5:64:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c276a8ba874c3fbddad344d03258b3e2c04d7bcb
Validity
Not Before: Sep 23 18:33:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d4882338286e7a914147c90e33eb670ad70e1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:77:d4:1d:0c:f0:a2:7c:86:b2:94:7e:34:13:
72:19:9c:fa:a2:28:56:62:11:ea:37:aa:39:a7:60:
ce:48:f0:46:0c:4d:05:46:b8:2a:75:64:56:ef:e9:
a6:2d:90:18:b0:2f:cc:d0:d2:a4:32:5a:44:9b:6c:
6e:06:20:34:ff:9a:54:e3:9c:d0:ad:06:20:20:16:
f4:0f:fd:ce:82:03:73:0f:3d:d1:bc:41:e2:16:d5:
b9:1f:c8:b7:c3:2f:53:8a:f0:bc:9e:6a:ff:04:39:
70:41:88:1a:1d:10:62:b9:34:75:a3:52:8d:ee:fb:
93:d9:a3:7d:36:ca:b7:be:bb:f8:e1:dc:1e:a2:b6:
8d:2f:fc:32:89:95:bb:73:51:c4:ed:14:8f:64:79:
82:8f:50:59:b9:b4:09:ca:ca:c7:d7:30:9f:2f:d8:
28:88:84:ff:eb:30:a8:a6:9b:56:88:2d:75:dd:05:
72:8d:c5:a8:87:2a:3f:2f:7c:45:ca:2a:c3:77:75:
66:42:b4:fb:ea:12:bd:d3:21:3a:33:55:08:eb:6b:
57:e5:9d:cb:d2:40:2b:8d:72:6b:ba:7c:95:55:9c:
96:38:d7:df:6d:b3:66:99:44:6c:74:b7:e2:d2:81:
3b:f2:14:94:0e:8b:6a:33:0b:6a:dc:24:b6:44:c7:
53:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:48:82:33:82:86:E7:A9:14:14:7C:90:E3:3E:B6:70:AD:70:E1:A5
X509v3 Authority Key Identifier:
keyid:C2:76:A8:BA:87:4C:3F:BD:DA:D3:44:D0:32:58:B3:E2:C0:4D:7B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnaouodMP73a00TQMliz4sBNe8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/TUiCM4KG56kUFHyQ4z62cK1w4aU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.24.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:d5:60:ef:61:86:65:13:6f:c8:2b:4b:c5:25:8a:b5:24:79:
86:b8:74:56:54:bf:6d:42:58:61:0b:d6:8e:e5:bb:ee:02:da:
64:94:2a:f7:83:0c:4a:e4:fe:8f:c1:55:09:32:ad:d2:97:97:
d9:4f:32:13:35:9d:3c:41:fb:13:34:d9:aa:68:c5:24:64:80:
7e:8e:77:0a:e7:cf:8d:1b:58:bc:64:c6:04:14:ce:82:da:21:
c9:02:b6:4b:ab:2a:a9:6c:8e:da:51:42:2c:0a:aa:9a:9e:77:
b7:99:fa:54:14:bc:1b:7d:79:91:c3:ed:29:42:05:27:8f:f2:
80:4e:42:5d:f3:2f:41:9a:56:48:d8:00:eb:2a:29:bc:7b:6c:
2a:90:0d:13:2c:07:74:77:a3:20:7e:ec:b8:a6:d1:dc:59:19:
fb:df:e3:ce:a3:23:2b:a4:ba:00:63:d8:1e:2c:54:35:6b:97:
5f:98:59:5d:fa:f1:c7:b3:05:71:21:5b:09:9b:25:fe:17:6c:
aa:b7:dc:c5:ba:bf:4c:c4:db:cd:1a:44:9e:1f:86:28:c7:07:
8b:ba:69:ca:50:b1:00:b1:c1:f0:2a:7c:3b:98:29:a7:6b:c7:
17:1c:68:98:1e:6c:20:51:80:08:6e:32:cf:27:a6:54:ff:3e:
9a:76:56:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:13 2025 by rpki-client