Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/TN5asrP-O_svuOzye5lJGogWzMo.roa
File: TN5asrP-O_svuOzye5lJGogWzMo.roa (raw, json)
Hash identifier: rh9STD4IRIWTtIYMAcynIA4v5v5kpJ3eCDcSGZQerzs=
Subject key identifier: 4C:DE:5A:B2:B3:FE:3B:FB:2F:B8:EC:F2:7B:99:49:1A:88:16:CC:CA
Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial: 0198AA22CE41F13E7C967132FA010BBFDC6C
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/TN5asrP-O_svuOzye5lJGogWzMo.roa
Signing time: Thu 14 Aug 2025 19:51:04 +0000
ROA not before: Thu 14 Aug 2025 19:51:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55201
IP address blocks: 185.219.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:aa:22:ce:41:f1:3e:7c:96:71:32:fa:01:0b:bf:dc:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Validity
Not Before: Aug 14 19:51:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4cde5ab2b3fe3bfb2fb8ecf27b99491a8816ccca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f3:d5:48:1d:4e:d5:2c:54:53:ab:7c:84:be:
c5:3b:90:80:c7:f7:01:03:fd:c9:01:89:d1:ee:cf:
fe:f0:8a:34:70:e2:65:c9:d6:b4:6d:64:45:0c:29:
e4:b6:ce:8c:e9:c0:bb:a7:61:16:80:8f:7e:12:c0:
23:c9:82:58:df:36:81:1e:72:82:2c:a9:c8:36:67:
35:8e:42:ae:3c:87:e2:77:2e:8d:c2:19:4a:28:1c:
01:fb:9a:57:03:ce:a3:35:d4:f7:3a:a1:ed:b5:52:
a8:95:34:94:66:36:45:fb:2c:e1:15:71:b6:8d:82:
c2:3b:1a:4b:08:70:95:d8:68:13:bd:f4:ed:4e:ce:
76:cf:5c:94:b6:ac:cd:16:21:f0:8e:8f:2c:22:9d:
88:d5:98:45:31:e1:39:47:48:3b:7a:83:c4:1f:cc:
4e:73:c8:3c:89:75:ca:d9:d2:b2:cd:e8:53:29:dd:
ab:2e:79:9d:ec:f0:12:78:b6:2c:c5:4c:92:5e:0f:
ad:ed:ab:eb:cb:56:7c:a7:65:3e:45:f7:82:5e:55:
04:a0:47:68:e8:5a:be:32:b3:8c:1e:db:bf:18:77:
6d:3f:e1:46:ac:e0:24:67:7c:ad:65:14:81:4a:4f:
d3:34:fa:71:1a:b5:e0:b2:69:97:16:85:87:42:82:
c8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DE:5A:B2:B3:FE:3B:FB:2F:B8:EC:F2:7B:99:49:1A:88:16:CC:CA
X509v3 Authority Key Identifier:
keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/TN5asrP-O_svuOzye5lJGogWzMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.188.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:f7:0a:dc:15:92:2f:8b:77:9e:c3:ec:d6:bf:fc:24:62:d5:
ea:7c:3a:6c:fa:a4:09:5e:c3:1f:f0:16:62:4f:5c:9c:a3:9f:
f0:ba:df:df:03:03:0f:56:2b:08:04:76:74:ba:50:16:99:23:
1a:71:af:a0:69:a4:ff:2c:8c:ce:eb:10:fd:af:ad:75:74:01:
51:d8:7e:19:87:db:af:d4:26:12:20:f3:22:2e:e7:ec:3b:9b:
6b:91:36:23:ff:d7:e5:1d:ce:65:42:b8:6a:d4:2c:d3:cd:f1:
ed:4a:09:7a:8d:4a:81:2f:6f:c1:87:38:0d:c5:37:be:25:c1:
51:25:52:be:b0:eb:3e:fd:73:f8:f6:c7:49:12:d2:62:67:66:
82:4e:30:a8:fd:1c:b2:4b:29:0b:be:7a:14:37:39:fd:70:5a:
53:9b:48:e8:26:f1:94:22:7b:1c:d9:c9:3c:08:5e:0f:92:8c:
38:18:5c:d2:e9:36:c0:f0:6e:2a:ff:f1:24:38:25:2c:6d:8c:
f0:ed:30:54:79:99:87:b9:d8:bd:9a:09:5c:65:32:fd:28:e0:
66:e7:df:92:3a:fc:67:bf:de:60:ff:6b:46:1f:43:40:27:57:
2e:f9:76:5d:10:90:2f:9c:a0:c1:2a:88:5b:8e:72:6c:9e:68:
3a:e9:a8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:56:43 2025 by rpki-client