Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tKETEjRQ2E18Nbg2USNcpfd7bHA.roa
File: tKETEjRQ2E18Nbg2USNcpfd7bHA.roa (raw, json)
Hash identifier: 5UnS5dOtQIXlSXNzZIFH4y5W61ndfsY9qfnd32wHgiA=
Subject key identifier: B4:A1:13:12:34:50:D8:4D:7C:35:B8:36:51:23:5C:A5:F7:7B:6C:70
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01983C1461F844CE9DC9F05B9A408299F9B3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tKETEjRQ2E18Nbg2USNcpfd7bHA.roa
Signing time: Thu 24 Jul 2025 10:57:05 +0000
ROA not before: Thu 24 Jul 2025 10:57:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206443
IP address blocks: 217.60.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3c:14:61:f8:44:ce:9d:c9:f0:5b:9a:40:82:99:f9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 24 10:57:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4a113123450d84d7c35b83651235ca5f77b6c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:31:be:b0:49:54:ce:b4:6b:11:d6:71:d7:42:
ce:fe:89:15:0d:7e:c4:04:d3:44:95:e8:a4:49:70:
a1:e3:cd:c3:af:7d:46:f1:b3:bd:4e:5d:6b:06:bb:
d1:2f:01:38:e5:06:26:10:93:77:48:5b:1a:dd:67:
c2:6a:da:41:f5:60:6c:5a:d8:95:ef:98:3f:38:f4:
58:99:0b:cf:5f:7f:ac:05:71:79:9c:e0:d9:9a:67:
9d:3a:cd:c7:7c:9d:5f:86:a8:ba:06:0a:a9:52:a5:
81:ac:eb:e0:06:41:a2:28:4a:1b:b1:6e:8d:0a:6d:
db:7c:6e:2b:f4:dd:c0:44:d0:f0:8d:a0:a2:50:0c:
8f:58:45:0a:91:2c:91:b1:f0:7b:0d:90:65:50:68:
8b:cb:34:73:91:6a:bf:91:f3:fb:d9:f6:9a:55:73:
dc:27:4b:89:df:c6:05:d4:29:0a:dc:87:b8:89:5a:
64:7d:02:6c:61:2f:d6:41:7f:d0:31:09:20:a9:2e:
e1:14:e8:8f:ff:8d:1e:56:47:2e:d1:85:1f:68:60:
81:67:7c:4b:ae:f4:26:a3:24:90:9c:1b:63:f2:99:
4c:22:df:af:06:14:80:09:3d:ea:45:60:da:e7:ca:
2e:00:cf:a3:52:e8:c3:67:3d:da:e1:2c:3d:5f:aa:
ca:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A1:13:12:34:50:D8:4D:7C:35:B8:36:51:23:5C:A5:F7:7B:6C:70
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tKETEjRQ2E18Nbg2USNcpfd7bHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.240.0/24
Signature Algorithm: sha256WithRSAEncryption
be:2e:7e:dd:2b:4a:87:1e:72:ad:d4:44:93:6e:ae:f5:74:8a:
92:a5:dc:6a:04:db:76:1a:a4:8c:d3:4c:51:b2:e4:9f:03:d5:
f3:f6:6d:62:95:da:72:7c:94:2b:6e:b0:5b:c2:30:a9:5e:8b:
09:25:31:93:2e:34:9e:b2:ba:d6:5b:b8:72:38:f5:b2:9a:96:
7c:fe:a9:9a:e3:c8:77:7e:2a:8c:ec:65:aa:b1:e7:ef:fb:d7:
6f:be:b7:f6:11:3a:6a:b6:2e:86:af:83:6d:67:41:d3:b7:e0:
91:5b:69:df:b8:83:0d:a4:9f:01:06:27:2e:00:21:a2:d3:8e:
0b:26:ad:6c:8f:6a:82:c5:7b:50:db:f1:32:df:6e:b1:a0:d2:
58:ef:58:4b:2e:aa:e5:56:94:b0:31:07:94:6b:f0:0e:6d:f8:
40:05:d5:7c:95:e9:b4:08:7d:d2:09:db:e9:a2:95:28:b7:2c:
8e:4d:88:b6:ba:54:ef:4f:15:32:f6:eb:71:4c:03:2c:57:53:
28:de:53:68:a5:ce:25:fd:33:98:72:e7:f6:86:05:8c:19:b2:
7a:ab:13:aa:da:a1:b6:d2:58:f3:15:49:02:ce:82:10:6c:78:
73:6a:e1:7e:f8:96:13:ee:f7:dc:81:c4:f9:1a:cc:71:4f:cb:
79:4c:29:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:35:35 2025 by rpki-client