Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tv_LpTjVdkOhxlfeuzFPoPWWUv4.roa
File: tv_LpTjVdkOhxlfeuzFPoPWWUv4.roa (raw, json)
Hash identifier: QNG096QPYpRoVJvupIgxkgkNSEyHqBxrsbfMXo9fLXs=
Subject key identifier: B6:FF:CB:A5:38:D5:76:43:A1:C6:57:DE:BB:31:4F:A0:F5:96:52:FE
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019975AC83D3BF671508E10C1ACECD96D67A
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tv_LpTjVdkOhxlfeuzFPoPWWUv4.roa
Signing time: Tue 23 Sep 2025 08:24:24 +0000
ROA not before: Tue 23 Sep 2025 08:24:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213200
IP address blocks: 89.213.131.0/24 maxlen: 24
109.176.202.0/24 maxlen: 24
217.144.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:75:ac:83:d3:bf:67:15:08:e1:0c:1a:ce:cd:96:d6:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 23 08:24:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6ffcba538d57643a1c657debb314fa0f59652fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3a:4b:cc:84:0f:95:e0:72:41:79:a5:81:61:
04:2b:6b:06:7f:02:9f:d5:3d:06:14:4c:3b:69:07:
e7:75:01:11:01:0c:39:53:ba:7b:cc:c5:a0:ef:17:
95:a6:71:f7:8c:80:55:9f:a3:67:6d:b9:13:f6:5e:
00:e7:69:d8:27:da:8b:92:ba:47:55:b3:a3:24:c2:
3a:b8:f8:e3:73:59:0c:bd:2f:a4:00:f0:25:5e:76:
8b:c8:54:75:c5:dc:5f:4b:67:ae:f7:fe:b1:14:82:
7f:78:32:d1:f9:79:a0:5e:8f:8e:13:eb:b2:56:6c:
e9:a1:44:2d:f6:de:33:53:62:e2:7c:57:13:62:7d:
b9:c0:22:f4:d1:6d:7d:3f:ec:a3:f2:ee:40:03:e4:
c5:3c:c4:3a:53:ac:20:d2:02:6a:ef:5c:bc:f0:ca:
37:c7:29:cf:3f:7a:30:c9:6b:e2:05:08:b2:a5:2e:
f3:79:b6:9b:08:83:5b:0d:b5:22:bc:19:d7:49:07:
09:e1:62:30:ae:e7:ed:28:5d:83:41:9e:ae:7f:6c:
af:4e:28:7f:b7:4a:7b:10:33:0f:56:ce:fc:9b:ba:
cf:76:62:f8:f0:fb:6c:a4:38:8a:2c:56:7b:9f:db:
84:c4:0b:ed:69:6a:36:fd:b2:34:98:dd:b7:62:09:
c4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FF:CB:A5:38:D5:76:43:A1:C6:57:DE:BB:31:4F:A0:F5:96:52:FE
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tv_LpTjVdkOhxlfeuzFPoPWWUv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.131.0/24
109.176.202.0/24
217.144.154.0/24
Signature Algorithm: sha256WithRSAEncryption
57:41:14:da:ee:0e:f8:c4:5b:6d:fd:c9:f4:98:f8:27:3e:f7:
39:2a:ea:37:2b:c5:20:71:39:e9:e0:04:1e:43:77:a8:da:48:
54:c1:2f:98:24:74:53:04:21:ba:3c:5d:db:82:ce:86:cf:a4:
97:dc:c0:9a:1d:ed:51:18:5c:50:05:a9:b8:7d:c9:76:f4:f7:
95:87:ff:f3:0d:9a:63:2e:1a:41:6d:ae:46:5e:d5:85:99:d4:
3e:e4:ef:96:77:03:60:dc:0b:60:f5:2e:f6:7f:f4:67:1e:1b:
a1:ec:9d:a1:29:f2:0b:9f:2c:e8:c0:89:12:95:6b:65:6d:ff:
c6:f6:79:59:d1:e1:48:93:f3:58:bd:1a:52:6b:7a:8b:b0:ea:
62:61:84:c3:d9:97:59:f0:4e:e6:08:5d:da:f3:e8:c6:d3:f6:
f8:af:57:48:5d:98:dc:e7:64:19:58:0e:45:a8:1c:e3:5c:5f:
66:b3:a0:ef:db:85:d4:43:fe:f1:31:23:dc:3b:df:fa:1b:00:
63:5f:d7:82:49:71:fd:f1:54:3f:4f:75:e9:fd:08:b6:b9:55:
c7:a2:b8:93:21:5a:9d:bf:b2:40:7f:1e:8c:a6:bd:0a:ef:0e:
cf:93:7c:28:e1:c2:77:54:d1:2f:a1:02:7a:b6:96:84:37:8a:
b1:54:2a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:27:59 2025 by rpki-client