Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/IRSQE14-Tz7sBccAsgZYt7JbvIs.roa
File: IRSQE14-Tz7sBccAsgZYt7JbvIs.roa (raw, json)
Hash identifier: HHWOf34cKB/cnxnIC3HjVQrTDRzDkhRKh2V00sDdnHA=
Subject key identifier: 21:14:90:13:5E:3E:4F:3E:EC:05:C7:00:B2:06:58:B7:B2:5B:BC:8B
Certificate issuer: /CN=beb12ce6a91030e27d5abad146df27bc2880652b
Certificate serial: 0199A496141078C26A52CC4287CF7F3CC6DC
Authority key identifier: BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/IRSQE14-Tz7sBccAsgZYt7JbvIs.roa
Signing time: Thu 02 Oct 2025 11:02:02 +0000
ROA not before: Thu 02 Oct 2025 11:02:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207734
IP address blocks: 193.186.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a4:96:14:10:78:c2:6a:52:cc:42:87:cf:7f:3c:c6:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb12ce6a91030e27d5abad146df27bc2880652b
Validity
Not Before: Oct 2 11:02:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=211490135e3e4f3eec05c700b20658b7b25bbc8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:44:f0:eb:98:28:0c:3a:e4:d1:c2:61:f6:ba:
e3:c0:32:75:ec:80:16:ab:05:4d:58:ae:80:81:b5:
fb:a7:9a:4b:1d:d0:ed:61:96:33:14:ed:7d:8e:f2:
5c:82:27:06:72:cb:bb:d3:ee:bb:e6:95:1a:c4:d4:
dc:6c:07:51:47:22:27:1b:ea:09:cf:73:6d:97:b3:
06:d1:22:3e:f5:c2:65:5c:a1:99:4c:22:1e:7e:b0:
41:23:ad:18:00:d3:e7:f2:4b:3e:c1:ef:42:7f:6a:
fa:fc:37:24:fa:d3:70:fd:54:0f:68:98:4a:db:f2:
e1:98:2b:24:b7:13:ec:2b:29:b5:48:09:b4:ab:7a:
a2:ab:5c:83:9d:01:33:a7:c8:69:62:20:08:89:4d:
77:e9:63:d3:85:64:05:53:a4:f3:18:c0:20:df:bd:
54:50:ab:35:a2:a0:db:9b:39:e4:79:07:d8:83:f2:
fe:84:81:2b:f3:1d:95:f4:fa:48:dc:e7:5b:f5:64:
1b:5a:8c:29:cf:80:19:c3:ce:07:01:7d:14:35:af:
96:a9:2d:28:07:eb:21:1b:95:06:14:3d:5f:48:e2:
00:ac:d1:15:29:cc:9b:7a:60:ff:a8:36:9e:e5:38:
ab:ab:be:30:0f:0d:bf:1e:2a:26:6e:31:d0:06:b9:
96:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:14:90:13:5E:3E:4F:3E:EC:05:C7:00:B2:06:58:B7:B2:5B:BC:8B
X509v3 Authority Key Identifier:
keyid:BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/IRSQE14-Tz7sBccAsgZYt7JbvIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.186.199.0/24
Signature Algorithm: sha256WithRSAEncryption
61:b5:9d:ef:31:02:3f:38:7d:55:43:32:d5:0f:88:38:de:0e:
e8:78:6b:11:41:c8:a4:71:4f:d8:a2:5c:c5:12:cc:ae:26:e1:
8b:ec:34:29:fc:33:52:c3:ca:c3:18:fb:96:ce:97:0a:15:28:
26:aa:a3:eb:c8:f1:4d:3a:2a:3f:fc:91:94:50:8a:75:38:96:
7c:f1:cf:19:3c:b0:2e:77:91:32:b6:43:33:d0:16:09:71:c6:
32:8f:ab:61:63:f9:df:3e:dc:a7:bb:cd:6a:b8:60:65:db:db:
95:d6:25:d9:64:83:48:02:f1:fd:59:27:32:ac:ec:9a:4c:66:
e0:88:a6:18:29:65:44:97:ab:17:53:b8:34:08:97:ba:c1:2a:
50:04:a1:3c:4a:73:56:de:55:d8:f0:df:12:e0:41:df:7e:12:
79:07:b2:23:b0:2e:a9:f3:a6:51:f1:d2:08:c7:89:e6:1c:5e:
55:95:3a:08:07:94:08:07:4f:82:b2:16:47:06:7b:97:6f:d9:
9f:7a:c6:ce:c5:dc:b2:37:d5:bc:66:cd:fe:ee:3b:f2:e6:16:
22:0a:0d:e0:d9:b0:0c:e1:dc:48:f4:98:f6:54:33:95:a0:ae:
ac:65:4c:b7:9c:56:e4:56:99:da:c7:91:c7:7e:87:b0:1e:ad:
b0:2e:9b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:09:26 2025 by rpki-client