Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/TSChuoUoxhH4RDl93vItxLbWmjA.roa
File: TSChuoUoxhH4RDl93vItxLbWmjA.roa (raw, json)
Hash identifier: Yt5QjTI9IjJMsTBQGdHqIoHSZWBchoO0b+jSiGXzfpY=
Subject key identifier: 4D:20:A1:BA:85:28:C6:11:F8:44:39:7D:DE:F2:2D:C4:B6:D6:9A:30
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 01995B4F09CB0B3E53BE9FCFE506DEFAB71A
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/TSChuoUoxhH4RDl93vItxLbWmjA.roa
Signing time: Thu 18 Sep 2025 05:32:10 +0000
ROA not before: Thu 18 Sep 2025 05:32:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138217
IP address blocks: 95.173.53.0/24 maxlen: 24
95.173.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5b:4f:09:cb:0b:3e:53:be:9f:cf:e5:06:de:fa:b7:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Sep 18 05:32:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d20a1ba8528c611f844397ddef22dc4b6d69a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fc:ff:8b:cc:1a:7c:36:1c:36:30:b1:3b:f3:
45:84:10:6a:92:cf:eb:06:c9:56:ce:7e:b2:57:12:
73:00:49:39:f6:55:7c:db:85:3a:43:25:0a:a8:72:
e2:2e:70:2b:d9:74:34:1f:d5:30:67:d6:2d:a1:46:
6e:7f:4b:ca:ba:b3:4e:6b:e2:69:1e:57:59:52:3a:
c4:77:eb:0f:0f:f7:05:97:b1:dc:ce:a1:c5:b2:91:
79:63:b6:c7:d3:8e:0c:f1:ca:c6:e9:42:f0:c1:98:
82:b2:b8:44:11:ca:3f:ad:5d:ed:aa:06:f1:09:21:
c8:26:cf:76:fb:02:71:d6:b1:7f:f3:35:2a:1c:50:
13:2a:bf:b4:b0:d9:e5:ad:50:db:34:25:e0:e5:cf:
34:37:94:ad:02:5b:ee:38:24:65:06:52:4a:f6:ca:
76:05:cc:87:be:2f:80:8c:13:69:27:91:cd:3a:de:
be:ce:bb:6a:67:f2:7c:e7:d3:04:45:6c:cc:ff:e1:
be:b5:41:5d:6c:b3:2f:ac:41:c4:50:fd:b2:73:ee:
b9:1e:a8:5d:15:33:d4:b9:4d:6d:9e:54:06:aa:8a:
28:9b:19:5d:44:02:df:05:82:69:8d:5f:87:07:a8:
70:03:6c:74:78:56:19:9c:04:b2:a8:ab:17:52:1a:
c2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:20:A1:BA:85:28:C6:11:F8:44:39:7D:DE:F2:2D:C4:B6:D6:9A:30
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/TSChuoUoxhH4RDl93vItxLbWmjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.173.53.0/24
95.173.61.0/24
Signature Algorithm: sha256WithRSAEncryption
07:3d:3e:75:3a:90:fa:9f:24:24:c0:03:13:ad:49:22:cc:1f:
6b:8b:c3:79:91:54:de:e2:3a:9c:dc:01:24:f9:87:3e:a8:52:
0c:15:57:9c:34:aa:23:d4:b4:b3:3f:5b:a1:68:f8:92:1b:6d:
51:06:dd:38:17:be:76:90:c3:ea:11:06:e2:fd:c6:86:eb:3c:
d0:1a:b1:09:5f:e1:bc:a3:2b:94:7a:76:25:c9:ee:14:ac:f9:
74:10:3b:da:28:d0:0f:64:87:83:56:3d:a8:ec:98:01:e2:a4:
6d:cf:05:35:1d:42:7f:f1:be:56:84:6c:80:f5:b0:32:a8:24:
4c:26:aa:7e:00:b5:ca:f3:04:c8:48:a5:0a:f7:33:c4:1a:bd:
56:ac:53:b3:64:de:19:8f:1c:cb:24:5a:05:9f:34:5e:8c:49:
d3:1b:73:0b:3a:68:84:e5:ae:8b:6f:22:7d:e6:44:30:87:48:
3a:71:af:df:48:5b:30:64:ea:5b:6e:92:5f:d9:9d:ea:e5:aa:
af:60:ce:54:6d:67:ee:bb:55:67:a6:49:6c:83:09:0b:c8:83:
60:fb:e8:e5:54:81:85:c0:68:f3:fa:cc:0a:36:86:42:e0:b5:
c7:fe:4f:19:26:49:9d:ba:1a:c4:94:9a:dd:67:cd:0e:55:0f:
b7:77:b1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:36:48 2025 by rpki-client