Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/TJJQIxFkBPcclxKSiBSE29OWp44.roa
File: TJJQIxFkBPcclxKSiBSE29OWp44.roa (raw, json)
Hash identifier: o//SaNRJoAMIebEbxmORe+ZFOyk3uvF1gz9qkdqBZAw=
Subject key identifier: 4C:92:50:23:11:64:04:F7:1C:97:12:92:88:14:84:DB:D3:96:A7:8E
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 0199A93984006D3F8C8AC42C98C57D2FCBA0
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/TJJQIxFkBPcclxKSiBSE29OWp44.roa
Signing time: Fri 03 Oct 2025 08:39:02 +0000
ROA not before: Fri 03 Oct 2025 08:39:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51395
IP address blocks: 79.132.141.0/24 maxlen: 24
199.68.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a9:39:84:00:6d:3f:8c:8a:c4:2c:98:c5:7d:2f:cb:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: Oct 3 08:39:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c925023116404f71c971292881484dbd396a78e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:65:e4:0d:46:7d:81:99:43:34:42:4a:59:bd:
4a:47:89:e0:78:41:f8:29:1a:d1:b7:e7:92:a6:ac:
9a:0c:67:48:98:5f:de:f3:92:dd:50:03:06:c7:29:
8f:66:aa:0f:1e:2e:68:01:4a:86:89:16:a0:f5:63:
a4:83:bb:e3:eb:df:90:b2:7a:e6:a9:6b:33:70:c8:
74:26:81:bc:38:75:ac:82:1f:fd:e9:bc:e1:55:14:
d8:d2:a5:18:c5:5d:69:12:1f:b5:95:1f:35:95:d9:
be:62:52:22:39:91:c3:18:b5:de:2b:93:b2:49:9f:
97:e9:c6:cb:e3:c8:8a:c6:99:9b:51:56:28:fb:5a:
e1:47:2b:3b:41:a0:b1:72:d7:67:93:ed:94:1c:31:
63:e3:bb:e5:ef:26:c0:65:08:ae:b5:85:1f:94:ba:
c0:36:14:37:75:9f:ed:e4:2b:4e:fa:7c:fe:34:ff:
97:e7:b8:7c:52:fb:a1:fb:4c:0b:ff:4f:2e:4f:98:
77:c5:3c:5a:25:ab:c7:1f:08:b9:e2:ac:c7:41:b3:
e7:e5:fe:8e:db:bb:c0:4d:49:7b:3a:05:20:49:15:
c9:00:74:4f:9b:c7:3a:93:12:05:c7:1c:0b:0a:2b:
4b:d2:5e:d7:7f:54:f9:e6:3c:d2:01:c3:65:c5:30:
54:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:92:50:23:11:64:04:F7:1C:97:12:92:88:14:84:DB:D3:96:A7:8E
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/TJJQIxFkBPcclxKSiBSE29OWp44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.141.0/24
199.68.196.0/24
Signature Algorithm: sha256WithRSAEncryption
33:5a:da:a4:35:2b:82:60:29:12:70:77:8b:9d:a3:bf:01:fd:
15:60:b5:06:3f:a8:f6:e5:df:0e:6e:08:d1:e8:72:f3:76:1b:
8f:fb:55:b5:c1:24:32:d5:a8:81:0b:bf:ad:fb:17:fd:4c:72:
e8:80:d9:50:e5:bf:56:d0:45:d4:e5:4c:1b:cd:84:85:af:51:
75:20:92:b0:9a:ed:27:33:91:20:dd:2b:58:cb:7b:8b:89:7a:
bf:c8:c4:a4:9c:61:54:5c:0b:8c:d7:9e:58:7d:d7:c1:57:a3:
30:a9:4d:77:a7:27:44:e7:b4:ab:e0:67:e2:56:00:b5:81:82:
ec:8b:26:60:13:50:c0:7b:91:b5:67:72:84:6c:33:1d:9c:60:
f4:4f:14:e8:2a:0c:45:a0:6e:4c:fb:ea:a2:39:8f:77:9a:56:
01:f0:80:61:92:3d:d2:df:75:9e:a0:44:ff:28:f6:dc:73:ed:
5d:91:de:4a:3c:e5:8b:b0:90:a5:ee:8c:33:9f:d6:57:7e:a7:
a5:69:d3:6d:3c:1c:cc:c3:98:0d:a0:3c:9b:d1:1a:5c:e9:85:
69:6d:5c:70:aa:46:e2:eb:fc:41:08:8e:3d:bb:22:7c:09:2f:
d0:03:97:ba:28:e4:54:28:8a:96:6e:08:e3:d8:e7:01:53:78:
4d:6f:64:00
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZmpOYQAbT+MisQsmMV9L8ugMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZTViMzAyNzJlNDMwNTMyMDg5NzhkYmU0NGJmZWUxMGE1
ZDAwN2UwHhcNMjUxMDAzMDgzOTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzkyNTAyMzExNjQwNGY3MWM5NzEyOTI4ODE0ODRkYmQzOTZhNzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2XkDUZ9gZlDNEJKWb1KR4ngeEH4
KRrRt+eSpqyaDGdImF/e85LdUAMGxymPZqoPHi5oAUqGiRag9WOkg7vj69+Qsnrm
qWszcMh0JoG8OHWsgh/96bzhVRTY0qUYxV1pEh+1lR81ldm+YlIiOZHDGLXeK5Oy
SZ+X6cbL48iKxpmbUVYo+1rhRys7QaCxctdnk+2UHDFj47vl7ybAZQiutYUflLrA
NhQ3dZ/t5CtO+nz+NP+X57h8Uvuh+0wL/08uT5h3xTxaJavHHwi54qzHQbPn5f6O
27vATUl7OgUgSRXJAHRPm8c6kxIFxxwLCitL0l7Xf1T55jzSAcNlxTBU1QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEySUCMRZAT3HJcSkogUhNvTlqeOMB8GA1UdIwQY
MBaAFHDlswJy5DBTIIl42+RL/uEKXQB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEt
MWZiYzY0MWI1MGIxLzEvVEpKUUl4RmtCUGNjbHhLU2lCU0UyOU9XcDQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEtMWZiYzY0MWI1MGIx
LzEvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAT4SNAwQA
x0TEMA0GCSqGSIb3DQEBCwUAA4IBAQAzWtqkNSuCYCkScHeLnaO/Af0VYLUGP6j2
5d8ObgjR6HLzdhuP+1W1wSQy1aiBC7+t+xf9THLogNlQ5b9W0EXU5UwbzYSFr1F1
IJKwmu0nM5Eg3StYy3uLiXq/yMSknGFUXAuM155YfdfBV6MwqU13pydE57Sr4Gfi
VgC1gYLsiyZgE1DAe5G1Z3KEbDMdnGD0TxToKgxFoG5M++qiOY93mlYB8IBhkj3S
33WeoET/KPbcc+1dkd5KPOWLsJCl7owzn9ZXfqeladNtPBzMw5gNoDyb0Rpc6YVp
bVxwqkbi6/xBCI49uyJ8CS/QA5e6KORUKIqWbgjj2OcBU3hNb2QA
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:51 2025 by rpki-client