Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/TttOlAFGS-NHSoY7EIVow8UAuQE.roa
File: TttOlAFGS-NHSoY7EIVow8UAuQE.roa (raw, json)
Hash identifier: Nl7dKY+4zIp0tyZuEuFEeHx23jlkns3c3/S3nSCG3JI=
Subject key identifier: 4E:DB:4E:94:01:46:4B:E3:47:4A:86:3B:10:85:68:C3:C5:00:B9:01
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 0199DD086258DB1E14F63D886000AB48D9F6
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/TttOlAFGS-NHSoY7EIVow8UAuQE.roa
Signing time: Mon 13 Oct 2025 10:05:38 +0000
ROA not before: Mon 13 Oct 2025 10:05:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 89.23.96.0/24 maxlen: 24
89.23.97.0/24 maxlen: 24
89.23.98.0/24 maxlen: 24
89.23.99.0/24 maxlen: 24
89.23.100.0/24 maxlen: 24
89.23.101.0/24 maxlen: 24
89.23.102.0/24 maxlen: 24
89.23.112.0/24 maxlen: 24
89.23.115.0/24 maxlen: 24
89.23.116.0/24 maxlen: 24
89.23.117.0/24 maxlen: 24
89.23.118.0/24 maxlen: 24
185.39.206.0/24 maxlen: 24
212.67.17.0/24 maxlen: 24
2a09:6283::/32 maxlen: 32
2a12:1e80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:dd:08:62:58:db:1e:14:f6:3d:88:60:00:ab:48:d9:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Oct 13 10:05:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4edb4e9401464be3474a863b108568c3c500b901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3c:3b:da:3c:16:37:4c:c1:5f:01:8c:56:c9:
0a:e2:65:f2:14:a5:e4:dc:cd:44:f1:da:40:0f:f0:
ef:26:7c:d7:4f:d5:aa:89:5e:78:49:2f:d8:2d:4c:
4e:00:04:a5:94:9f:87:ed:b9:3a:b8:e4:1a:8a:2a:
f6:41:61:97:bd:59:0e:76:7c:76:7b:7f:42:4f:16:
64:25:30:4b:84:c7:76:b3:a0:44:62:91:ae:85:7a:
16:df:10:62:81:d4:a1:93:01:26:68:b5:8a:ac:71:
49:cc:80:c7:cd:b4:a4:b9:53:ae:4b:3a:86:ce:e9:
43:93:34:63:78:0a:22:3a:41:e6:b2:99:01:90:d9:
9e:c4:95:d4:7c:28:9c:0a:95:6f:1a:6e:44:7f:0b:
01:78:29:22:44:58:f2:00:01:07:a5:e3:b2:ac:ff:
b3:75:ea:db:1f:1a:ba:cc:43:7a:32:dd:04:8c:e8:
f2:0b:18:bf:2f:ed:72:90:dd:94:45:81:90:49:31:
44:9e:d6:c6:a2:c4:57:20:75:ae:08:d6:2a:81:9f:
d5:f8:c3:6f:fb:3f:84:71:83:f3:f8:eb:c9:77:a6:
70:cd:c9:fb:f8:30:36:6b:67:9b:05:15:8a:0e:bd:
6f:79:ef:4b:8d:75:f7:ca:b8:c6:67:d3:5e:84:36:
9f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DB:4E:94:01:46:4B:E3:47:4A:86:3B:10:85:68:C3:C5:00:B9:01
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/TttOlAFGS-NHSoY7EIVow8UAuQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.96.0-89.23.102.255
89.23.112.0/24
89.23.115.0-89.23.118.255
185.39.206.0/24
212.67.17.0/24
IPv6:
2a09:6283::/32
2a12:1e80::/29
Signature Algorithm: sha256WithRSAEncryption
53:f6:14:cf:5b:81:45:ac:3d:75:87:ca:82:f5:07:a2:8e:91:
89:b9:a2:ed:91:bd:23:c3:1a:3c:c0:6f:10:c3:37:e4:09:8a:
ea:81:e9:c7:d0:9e:13:a5:67:c3:8d:64:c7:d3:4b:4c:62:6e:
2c:41:dc:24:86:fd:72:b6:f9:fa:41:7e:63:36:13:02:fe:92:
a1:1b:5b:fa:d4:32:79:cb:18:7d:13:ad:c3:2c:c1:a9:ff:bf:
f4:51:30:86:dd:87:df:d8:ea:61:83:c4:bb:6f:59:1b:84:5d:
a8:49:2a:69:9e:02:ea:46:69:b5:c9:3c:d8:99:cd:31:84:75:
5a:e2:2e:4d:50:8f:44:28:fb:dc:5f:15:58:75:da:51:2a:ef:
0b:b2:0a:8c:b3:e3:ec:2b:2d:6b:75:8e:2a:a3:c9:af:d8:2f:
d3:e7:79:e7:13:17:df:d6:65:18:8c:ef:7d:7a:98:fe:e6:3c:
3e:de:4e:8d:45:04:0f:43:e6:8b:ff:54:e7:4d:43:3c:44:4f:
13:e6:77:b3:d8:27:12:28:53:8d:55:75:b1:69:e7:3c:5f:96:
2d:e7:c4:2d:9f:4c:f6:11:2d:57:ee:dc:1d:4e:a4:15:30:de:
f2:58:3e:b2:5c:f1:13:4e:a2:e4:de:ff:81:03:4f:ed:41:f6:
6f:be:f0:34
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:05:00 2025 by rpki-client