Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tfSN1wzT9Nv_E7C_Runb5aLYzis.roa
File: tfSN1wzT9Nv_E7C_Runb5aLYzis.roa (raw, json)
Hash identifier: iuUiQBN6QhnyXJIRkq7CHgpo5lXGeZyzTvPoQdwoZaw=
Subject key identifier: B5:F4:8D:D7:0C:D3:F4:DB:FF:13:B0:BF:46:E9:DB:E5:A2:D8:CE:2B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019A584C402BB123BACD9278B2E168197BD5
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tfSN1wzT9Nv_E7C_Runb5aLYzis.roa
Signing time: Thu 06 Nov 2025 08:33:03 +0000
ROA not before: Thu 06 Nov 2025 08:33:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20911
IP address blocks: 45.90.90.0/23 maxlen: 24
84.21.174.0/23 maxlen: 24
87.120.118.0/23 maxlen: 24
87.120.118.0/24 maxlen: 24
87.120.119.0/24 maxlen: 24
87.120.122.0/23 maxlen: 24
87.120.122.0/24 maxlen: 24
87.120.123.0/24 maxlen: 24
87.120.124.0/24 maxlen: 24
87.121.70.0/23 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.26.0/23 maxlen: 24
94.156.162.0/23 maxlen: 24
95.214.27.0/24 maxlen: 24
193.42.34.0/23 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Nov 2025 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:58:4c:40:2b:b1:23:ba:cd:92:78:b2:e1:68:19:7b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 6 08:33:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5f48dd70cd3f4dbff13b0bf46e9dbe5a2d8ce2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:45:40:eb:ac:c8:fb:03:b3:c9:3c:b6:33:64:
64:75:54:ab:65:c4:90:ae:bf:2b:4b:2d:57:4e:65:
f9:96:7e:4d:13:4d:4d:40:92:44:09:e2:02:f4:0e:
22:9d:c8:57:48:61:7c:2f:e3:41:f6:e1:25:64:d0:
58:de:9d:14:36:52:87:1d:f8:44:88:40:a0:02:3b:
57:72:69:5a:3c:86:f6:f4:ab:71:22:92:7d:02:9f:
5e:f1:c7:60:c7:0f:ac:cd:48:0b:d0:df:03:6e:53:
25:a8:91:a9:22:aa:3a:34:be:9f:3d:93:e1:3e:52:
30:86:9d:99:80:28:d4:08:89:6b:bd:34:c2:83:41:
e9:03:6c:7e:5a:5d:9d:d8:2e:18:51:25:9f:f5:5b:
a2:6c:76:45:8a:ed:9b:44:ef:29:f6:0e:b9:bb:19:
26:67:0b:8e:93:e2:ae:bb:a9:e3:2e:7b:1a:3a:28:
87:68:a4:5d:b1:bb:42:38:e7:94:f6:c1:8a:61:0d:
78:4d:19:46:0c:f2:0e:de:7a:bd:5d:3d:39:0a:90:
f9:09:e6:ce:c5:0b:c4:59:10:42:d3:c6:01:aa:b2:
35:47:39:f4:98:dc:3e:7f:1e:19:5f:c3:44:91:52:
d7:62:73:b2:b3:5f:b0:04:a8:cb:69:c7:07:f1:f1:
02:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F4:8D:D7:0C:D3:F4:DB:FF:13:B0:BF:46:E9:DB:E5:A2:D8:CE:2B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tfSN1wzT9Nv_E7C_Runb5aLYzis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.90.0/23
84.21.174.0/23
87.120.118.0/23
87.120.122.0-87.120.124.255
87.121.70.0/23
92.249.50.0/24
93.123.26.0/23
94.156.162.0/23
95.214.27.0/24
193.42.34.0/23
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:05:ac:ea:5d:18:ad:9c:a5:1f:67:fc:95:e2:6d:50:65:1e:
9c:7c:8e:08:51:44:21:36:08:a4:1e:10:96:f3:24:58:2b:b5:
0e:72:17:1e:3d:8d:47:d0:64:b3:d3:56:20:7d:0b:17:47:33:
3c:95:14:a2:dd:a9:4c:13:00:c8:4a:9c:a5:ab:ea:50:b3:57:
a6:ff:f3:3c:74:94:2c:4e:cc:54:f0:c3:00:0e:66:28:34:0e:
00:73:27:80:3e:e5:7f:83:59:de:84:26:4a:71:97:f8:00:93:
6c:2d:56:7b:07:cc:52:96:2a:07:00:e6:6e:99:6f:0e:bd:16:
89:06:fa:22:d5:6e:b5:24:19:a2:a7:f3:30:62:ec:48:23:3f:
94:07:ad:3e:d7:38:f4:9a:63:bc:3b:6e:78:50:89:67:fd:5c:
0c:96:dc:bd:ef:e3:4b:3d:12:6f:85:1a:9c:80:3f:ea:72:b9:
7a:98:93:4e:42:15:33:c3:7d:9b:b6:2f:52:04:f0:92:92:8a:
85:34:eb:bf:b8:27:3c:72:7b:81:dd:7d:a6:ea:2e:89:1a:f7:
61:ae:38:03:36:41:82:34:41:12:e7:7c:06:ba:47:31:4b:7c:
d3:fa:4f:86:8d:64:3f:36:82:85:a9:97:88:ad:15:76:34:9e:
ea:05:2e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 10 11:38:38 2025 by rpki-client