Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/TPMoZhT7pBe3VYwD0yOkrDwG6DI.roa
File: TPMoZhT7pBe3VYwD0yOkrDwG6DI.roa (raw, json)
Hash identifier: OH5WytZuz33ouqi8MQK3P99lvzQJRdnWAM/P6DB5FRw=
Subject key identifier: 4C:F3:28:66:14:FB:A4:17:B7:55:8C:03:D3:23:A4:AC:3C:06:E8:32
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 01995C82DBECCBE8818FDCD9B41DFBE9547F
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/TPMoZhT7pBe3VYwD0yOkrDwG6DI.roa
Signing time: Thu 18 Sep 2025 11:08:23 +0000
ROA not before: Thu 18 Sep 2025 11:08:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 212.81.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5c:82:db:ec:cb:e8:81:8f:dc:d9:b4:1d:fb:e9:54:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Sep 18 11:08:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4cf3286614fba417b7558c03d323a4ac3c06e832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:02:74:1e:c2:c5:ea:e7:7f:79:c2:0c:29:ce:
1c:e7:2d:0d:b5:88:30:11:16:00:da:20:05:77:5e:
31:21:8e:53:28:1d:56:ac:17:8f:40:66:39:7e:0c:
40:05:b9:06:72:6a:b2:9c:fb:fc:66:ca:6c:c3:e1:
26:30:d2:23:89:c7:ba:ad:df:97:18:36:69:27:a0:
0b:9f:67:01:13:5c:da:ac:d1:2e:5b:17:18:48:dd:
e5:7f:81:ca:38:b4:55:13:c5:ef:f0:00:14:11:53:
15:44:89:15:f7:d8:af:ed:72:a4:b9:b7:25:4b:b2:
a0:00:ea:f6:35:6e:5a:fb:11:99:12:9a:3a:79:bb:
07:18:63:73:2d:49:60:c4:d9:34:0d:92:cc:d6:b7:
7b:17:e7:25:e3:60:5c:a3:cc:27:40:82:71:c8:80:
a8:f1:da:38:a5:92:39:90:c4:3d:a0:a6:30:36:f5:
fa:26:27:43:33:73:9d:41:e7:96:5c:65:c0:15:da:
e8:04:1e:c6:9f:46:97:fd:cd:37:a7:3e:21:bb:72:
02:4f:61:25:3e:12:94:c2:a7:78:93:49:5f:93:19:
8d:e5:a7:a1:a0:ef:aa:f9:78:92:8d:81:37:7e:21:
95:c2:9a:a7:c5:62:8c:5c:19:18:a7:c1:79:e4:40:
cb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F3:28:66:14:FB:A4:17:B7:55:8C:03:D3:23:A4:AC:3C:06:E8:32
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/TPMoZhT7pBe3VYwD0yOkrDwG6DI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.81.44.0/24
Signature Algorithm: sha256WithRSAEncryption
72:19:e9:b1:27:8e:05:ee:7b:60:b2:10:d6:42:66:44:ad:74:
73:ae:75:51:61:c3:da:e4:ee:7f:91:92:b8:dc:4a:2d:d3:cd:
d5:aa:aa:41:80:59:5b:95:4d:88:0d:7e:83:11:79:1b:9f:10:
a3:3d:c7:2e:f8:b1:22:6d:17:bc:bd:09:74:b7:f7:5b:37:e3:
bb:07:06:0c:0c:77:19:2a:24:aa:e7:9e:48:5d:85:60:3f:3d:
82:ef:6a:12:ad:a4:20:1e:63:f9:0a:a1:58:36:16:f3:a8:9f:
c5:68:e6:77:68:41:ef:71:54:20:13:73:5f:f6:18:d4:ba:12:
60:b8:85:11:31:a5:99:69:a9:af:78:e4:60:89:4d:f9:6e:ce:
69:dd:c9:cd:0a:34:6c:fc:aa:4d:b6:b2:6b:0c:df:3b:e6:1b:
a6:7e:04:09:93:b7:36:61:f6:73:bc:f9:8b:53:64:ff:53:47:
19:e6:10:9f:3d:24:92:39:f7:5d:44:ea:ac:c3:0f:34:cb:f8:
6c:f3:81:8b:ab:00:2b:77:75:99:f3:64:e3:85:86:ec:d2:c8:
c6:fe:e0:30:d7:0f:17:2b:b2:6b:84:55:66:16:24:58:91:90:
2a:6f:df:bf:80:03:e8:54:71:04:21:16:1f:3d:b2:17:6d:07:
2f:4b:85:8b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZlcgtvsy+iBj9zZtB376VR/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMzY2ODYyOGYwZGY3OWQwNDdlY2EwZDlhZGNmYzBiNjY5
M2UzMDkwHhcNMjUwOTE4MTEwODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2YzMjg2NjE0ZmJhNDE3Yjc1NThjMDNkMzIzYTRhYzNjMDZlODMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwJ0HsLF6ud/ecIMKc4c5y0NtYgw
ERYA2iAFd14xIY5TKB1WrBePQGY5fgxABbkGcmqynPv8Zspsw+EmMNIjice6rd+X
GDZpJ6ALn2cBE1zarNEuWxcYSN3lf4HKOLRVE8Xv8AAUEVMVRIkV99iv7XKkubcl
S7KgAOr2NW5a+xGZEpo6ebsHGGNzLUlgxNk0DZLM1rd7F+cl42Bco8wnQIJxyICo
8do4pZI5kMQ9oKYwNvX6JidDM3OdQeeWXGXAFdroBB7Gn0aX/c03pz4hu3ICT2El
PhKUwqd4k0lfkxmN5aehoO+q+XiSjYE3fiGVwpqnxWKMXBkYp8F55EDLGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEzzKGYU+6QXt1WMA9MjpKw8BugyMB8GA1UdIwQY
MBaAFL02aGKPDfedBH7KDZrc/Atmk+MJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMt
ZTZiZjMxNmM5NGExLzEvVFBNb1poVDdwQmUzVll3RDB5T2tyRHdHNkRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMtZTZiZjMxNmM5NGEx
LzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1FEsMA0G
CSqGSIb3DQEBCwUAA4IBAQByGemxJ44F7ntgshDWQmZErXRzrnVRYcPa5O5/kZK4
3Eot083VqqpBgFlblU2IDX6DEXkbnxCjPccu+LEibRe8vQl0t/dbN+O7BwYMDHcZ
KiSq555IXYVgPz2C72oSraQgHmP5CqFYNhbzqJ/FaOZ3aEHvcVQgE3Nf9hjUuhJg
uIURMaWZaamveORgiU35bs5p3cnNCjRs/KpNtrJrDN875humfgQJk7c2YfZzvPmL
U2T/U0cZ5hCfPSSSOfddROqsww80y/hs84GLqwArd3WZ82TjhYbs0sjG/uAw1w8X
K7JrhFVmFiRYkZAqb9+/gAPoVHEEIRYfPbIXbQcvS4WL
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:57:18 2025 by rpki-client