
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/TzLZprRfeCh-Gvmzs5DuhB2A4E4.roa
File: TzLZprRfeCh-Gvmzs5DuhB2A4E4.roa (raw, json)
Hash identifier: yX71+JwnuGNFxVBhBEfM6BQUby7eWkoWKbcUG9ykDEE=
Subject key identifier: 4F:32:D9:A6:B4:5F:78:28:7E:1A:F9:B3:B3:90:EE:84:1D:80:E0:4E
Certificate issuer: /CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Certificate serial: 0199CF6CCC99C7CA6E33B5D0482ECCFEBC00
Authority key identifier: 2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/TzLZprRfeCh-Gvmzs5DuhB2A4E4.roa
Signing time: Fri 10 Oct 2025 18:40:37 +0000
ROA not before: Fri 10 Oct 2025 18:40:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216054
IP address blocks: 80.244.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cf:6c:cc:99:c7:ca:6e:33:b5:d0:48:2e:cc:fe:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Validity
Not Before: Oct 10 18:40:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f32d9a6b45f78287e1af9b3b390ee841d80e04e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ef:88:d1:09:9d:af:70:a3:6c:47:2d:15:ae:
24:89:db:c7:ab:0f:90:bb:71:f1:c1:65:a8:9d:f2:
3a:2e:73:cf:a4:8e:5a:b8:a9:bf:2c:c9:ad:2e:e1:
94:46:49:de:c4:42:19:66:89:5e:65:35:73:b5:d1:
bb:ff:6f:93:01:72:6e:16:9c:09:bd:df:c8:58:ab:
77:84:bf:ed:7e:cb:ed:bb:bc:7d:08:c1:19:8b:73:
24:fa:73:10:1e:c8:06:81:eb:2d:80:35:31:0b:74:
ba:e8:84:c6:4b:70:f0:72:8e:ba:14:ba:34:09:a6:
0b:83:39:da:58:e5:6f:43:55:9b:a1:8b:04:92:98:
c2:51:3e:a0:e1:5d:bb:ba:44:9e:ca:f3:8c:b1:ae:
4b:d2:0f:88:91:16:59:c7:67:47:8e:09:9b:f8:9d:
61:f5:fd:ec:ac:bf:e3:43:36:23:53:e8:f6:f7:86:
42:1f:42:e5:b0:47:92:6a:ec:60:e5:9d:1d:ea:94:
bb:dd:38:08:3e:09:0f:5f:68:a2:ad:ba:38:0c:6d:
53:5c:ea:14:5f:47:06:3c:b8:33:05:13:44:19:fe:
13:82:75:c2:4f:c3:f2:9f:ad:50:64:06:01:9c:e9:
b5:be:9e:63:b4:e9:0b:89:d7:68:9a:15:ae:f3:c2:
36:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:32:D9:A6:B4:5F:78:28:7E:1A:F9:B3:B3:90:EE:84:1D:80:E0:4E
X509v3 Authority Key Identifier:
keyid:2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/TzLZprRfeCh-Gvmzs5DuhB2A4E4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.11.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:c0:b8:ae:b7:ec:b8:c7:c4:7e:3f:10:24:63:cf:2d:0b:e5:
fb:81:91:64:39:4f:e0:f7:e2:94:1d:e1:c6:fc:cb:10:f0:d3:
31:e7:9d:cd:e4:97:8a:b0:e8:6e:5b:3d:15:de:9b:79:7f:61:
a3:14:c7:8d:72:c3:ed:e6:b6:39:7e:3d:42:77:8c:9a:b4:f0:
92:f1:5a:50:9e:21:4d:9c:90:e1:82:8a:d3:5b:a4:17:1c:32:
49:ef:b4:3a:11:83:a2:de:5a:21:cd:28:b4:25:eb:b9:62:88:
d1:74:ff:22:c7:7a:b8:cf:8c:1f:e2:f2:59:1d:67:cd:d2:a7:
d1:ed:6f:d4:43:f5:47:d6:63:04:05:3f:df:e4:39:0e:88:52:
26:6b:d0:c7:b5:cc:62:c5:95:b4:f3:b7:d6:ad:d5:2e:5d:71:
af:57:44:74:29:e9:87:cf:87:11:ee:ca:47:0d:f0:24:29:31:
29:14:3f:d8:fd:ee:d6:1b:b4:8e:32:bc:98:c6:87:72:b3:8c:
98:5b:b8:df:89:c7:14:0c:1a:25:47:7e:a8:5f:8b:15:65:8c:
fd:ae:a9:ee:c1:e1:8f:17:89:b0:2a:44:83:55:05:96:5f:6b:
85:f3:64:02:d7:5c:62:8a:4b:09:ed:00:76:43:57:4b:d8:cb:
40:9d:0a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:45:00 2025 by rpki-client