Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TszCQmolODwKTvgtm0SE3GCJr9k.roa
File: TszCQmolODwKTvgtm0SE3GCJr9k.roa (raw, json)
Hash identifier: p5PmtoM07GHoWYZPakVmwRvVJ3jD2b+VH5Ew18yS4Xk=
Subject key identifier: 4E:CC:C2:42:6A:25:38:3C:0A:4E:F8:2D:9B:44:84:DC:60:89:AF:D9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0199CDEF08102738CFCDD3260E5D4626CE50
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TszCQmolODwKTvgtm0SE3GCJr9k.roa
Signing time: Fri 10 Oct 2025 11:43:38 +0000
ROA not before: Fri 10 Oct 2025 11:43:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 87.120.68.0/24 maxlen: 24
93.123.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cd:ef:08:10:27:38:cf:cd:d3:26:0e:5d:46:26:ce:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 10 11:43:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4eccc2426a25383c0a4ef82d9b4484dc6089afd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2e:4b:4a:1f:27:42:45:4d:d1:c0:f3:3c:b1:
fd:a6:97:19:27:38:66:0f:38:c0:85:0c:8c:19:36:
48:cf:b7:53:b6:8c:35:b1:67:5d:85:f5:a7:76:f5:
42:f8:c9:af:9e:ce:4e:d0:bc:e6:83:70:13:ab:2d:
7f:75:f9:24:6d:18:9e:04:88:33:ac:78:87:84:16:
68:5d:d9:7d:28:c5:b5:f3:1c:5b:2b:97:33:7b:8c:
98:e4:6c:11:07:91:69:21:5c:96:d6:64:e1:b0:c9:
ca:97:b1:f4:4b:da:65:5d:2d:e1:57:8c:0c:f2:66:
31:6e:7c:1f:02:95:50:53:a0:72:23:de:0d:5e:ed:
ff:6c:31:cf:88:eb:fb:7d:6c:86:70:ea:30:11:38:
ac:3d:d3:e0:a0:1a:38:e4:7f:b9:41:98:48:15:67:
36:5d:b2:45:96:aa:6f:a4:18:e5:0b:4e:98:1a:37:
d3:0c:ad:b2:a3:32:7c:2a:aa:b8:f7:ea:7b:42:04:
83:0d:47:70:b3:77:21:25:4e:7f:27:bc:da:51:96:
1d:7e:e7:71:54:12:cd:71:98:a3:b3:7a:44:3d:25:
e4:ad:15:a3:bc:cc:b4:99:0b:e3:d0:65:9d:0b:8c:
5f:09:06:6e:f9:14:fd:fc:91:df:1f:02:4d:b9:e3:
bd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CC:C2:42:6A:25:38:3C:0A:4E:F8:2D:9B:44:84:DC:60:89:AF:D9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TszCQmolODwKTvgtm0SE3GCJr9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/24
93.123.113.0/24
Signature Algorithm: sha256WithRSAEncryption
94:1d:c7:3a:bb:4f:2c:8f:bd:5b:c1:fb:2a:ed:a1:46:ad:d1:
69:c7:ef:e2:ba:1e:a4:9c:54:d4:57:39:9b:31:e1:52:83:aa:
e2:11:65:b5:08:95:f1:08:aa:91:e2:64:31:d7:8e:0f:47:cf:
ed:71:87:a3:ea:9b:93:ad:ae:8c:9e:ee:3e:37:f9:28:1e:9b:
31:c3:7c:6e:dd:7f:be:30:dd:ae:07:0e:33:cb:4f:64:95:8b:
02:c3:d5:56:be:a8:52:01:4d:f3:22:c9:ad:f5:0a:cf:33:3b:
58:80:5f:f3:87:8b:d8:8e:c8:5e:ee:6d:9a:a6:fb:17:52:c2:
e6:f2:4e:f4:f3:ea:80:9f:11:63:12:09:4e:81:b7:6d:90:81:
74:56:60:2c:fa:74:aa:bd:7a:1f:36:f9:4e:b4:ee:45:04:22:
9c:60:d8:24:5e:6f:c3:8f:67:b1:a7:2c:fe:12:7b:48:48:d3:
9f:79:6a:d8:88:8f:8e:7f:15:00:e8:8e:54:f0:79:79:f8:2f:
e8:ba:bc:77:8e:41:8a:78:0b:e5:79:c9:12:0a:9c:f8:e5:23:
7c:d4:d3:50:a2:c9:cf:d1:bb:55:cb:fc:b5:c0:c1:19:96:19:
7e:c2:95:db:c2:cb:8c:f5:1a:aa:4c:2c:23:3a:62:9e:6d:8a:
51:7f:e5:09
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZnN7wgQJzjPzdMmDl1GJs5QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUxMDEwMTE0MzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZWNjYzI0MjZhMjUzODNjMGE0ZWY4MmQ5YjQ0ODRkYzYwODlhZmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtC5LSh8nQkVN0cDzPLH9ppcZJzhm
DzjAhQyMGTZIz7dTtow1sWddhfWndvVC+Mmvns5O0Lzmg3ATqy1/dfkkbRieBIgz
rHiHhBZoXdl9KMW18xxbK5cze4yY5GwRB5FpIVyW1mThsMnKl7H0S9plXS3hV4wM
8mYxbnwfApVQU6ByI94NXu3/bDHPiOv7fWyGcOowETisPdPgoBo45H+5QZhIFWc2
XbJFlqpvpBjlC06YGjfTDK2yozJ8Kqq49+p7QgSDDUdws3chJU5/J7zaUZYdfudx
VBLNcZijs3pEPSXkrRWjvMy0mQvj0GWdC4xfCQZu+RT9/JHfHwJNueO9UQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFE7MwkJqJTg8Ck74LZtEhNxgia/ZMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvVHN6Q1Ftb2xPRHdLVHZndG0wU0UzR0NKcjlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV3hEAwQA
XXtxMA0GCSqGSIb3DQEBCwUAA4IBAQCUHcc6u08sj71bwfsq7aFGrdFpx+/iuh6k
nFTUVzmbMeFSg6riEWW1CJXxCKqR4mQx144PR8/tcYej6puTra6Mnu4+N/koHpsx
w3xu3X++MN2uBw4zy09klYsCw9VWvqhSAU3zIsmt9QrPMztYgF/zh4vYjshe7m2a
pvsXUsLm8k708+qAnxFjEglOgbdtkIF0VmAs+nSqvXofNvlOtO5FBCKcYNgkXm/D
j2expyz+EntISNOfeWrYiI+OfxUA6I5U8Hl5+C/ourx3jkGKeAvleckSCpz45SN8
1NNQosnP0btVy/y1wMEZlhl+wpXbwsuM9RqqTCwjOmKebYpRf+UJ
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:26 2025 by rpki-client