Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/te33L0kieRQ75Zq_pFokfYZ-JqE.roa
File: te33L0kieRQ75Zq_pFokfYZ-JqE.roa (raw, json)
Hash identifier: V6RmxQticwwfeud47kIg383kbhZU2hu1aiRpTkwsy6I=
Subject key identifier: B5:ED:F7:2F:49:22:79:14:3B:E5:9A:BF:A4:5A:24:7D:86:7E:26:A1
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01994EC631C995122AA6322B395D55F70306
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/te33L0kieRQ75Zq_pFokfYZ-JqE.roa
Signing time: Mon 15 Sep 2025 19:07:15 +0000
ROA not before: Mon 15 Sep 2025 19:07:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 185.244.104.0/24 maxlen: 24
2a05:9a40::/29 maxlen: 29
2a06:5fc0::/29 maxlen: 29
2a0b:ac00::/29 maxlen: 29
2a10:3c80::/29 maxlen: 29
2a10:3f80::/29 maxlen: 29
2a10:77c0::/29 maxlen: 29
2a13:b4c1::/32 maxlen: 32
2a13:b9c0::/29 maxlen: 29
2a13:bb40::/29 maxlen: 29
2a13:c240::/29 maxlen: 29
2a13:c340::/29 maxlen: 29
2a14:1100::/32 maxlen: 32
2a14:1101::/32 maxlen: 32
2a14:1102::/32 maxlen: 32
2a14:1103::/32 maxlen: 32
2a14:1104::/32 maxlen: 32
2a14:1105::/32 maxlen: 32
2a14:1106::/32 maxlen: 32
2a14:1107::/32 maxlen: 32
2a14:42c0::/29 maxlen: 29
2a14:62c0::/29 maxlen: 29
2a14:6a40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 00:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4e:c6:31:c9:95:12:2a:a6:32:2b:39:5d:55:f7:03:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Sep 15 19:07:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5edf72f492279143be59abfa45a247d867e26a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1c:88:d2:0a:6b:7f:2e:c3:3c:34:69:7e:03:
af:68:fb:e6:e7:fa:a1:e1:25:b5:24:9b:a1:5c:2d:
20:8b:bf:c4:27:5c:eb:8e:5c:27:4c:e8:14:f8:ff:
fd:79:8b:e8:25:9c:af:83:67:5a:ef:f5:d1:0a:ac:
67:22:e6:a5:74:51:ea:9d:46:40:4c:b0:2b:dc:b9:
e0:9d:50:b3:00:38:7f:dd:c8:37:54:f8:15:1f:fb:
dd:14:1d:9e:2d:d2:8f:b4:66:ab:82:b7:ca:f0:4f:
af:ca:7b:7d:ae:db:40:47:f7:e7:94:e3:b8:7a:90:
14:f1:2a:a7:01:09:50:9d:c4:5b:aa:80:a5:b0:52:
90:17:96:14:29:af:b0:4d:76:17:6d:20:f2:7b:07:
fc:95:41:e0:2a:5e:df:69:c7:70:04:ba:53:93:68:
d9:9d:87:a8:2c:b5:b2:28:da:4e:99:1d:9b:e5:2d:
59:66:2c:35:0f:8d:6c:5f:95:01:f8:76:49:bd:80:
ab:5f:85:ef:4d:23:37:c8:23:8c:11:0d:63:a4:45:
6f:84:bd:89:ef:d7:60:9f:52:c9:7e:71:02:a1:e2:
8c:37:59:d9:2b:a3:44:a9:e0:af:2b:df:bd:11:42:
73:77:b9:a5:4c:8d:70:43:e0:cc:b2:44:2d:0c:3f:
a9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:ED:F7:2F:49:22:79:14:3B:E5:9A:BF:A4:5A:24:7D:86:7E:26:A1
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/te33L0kieRQ75Zq_pFokfYZ-JqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.104.0/24
IPv6:
2a05:9a40::/29
2a06:5fc0::/29
2a0b:ac00::/29
2a10:3c80::/29
2a10:3f80::/29
2a10:77c0::/29
2a13:b4c1::/32
2a13:b9c0::/29
2a13:bb40::/29
2a13:c240::/29
2a13:c340::/29
2a14:1100::/29
2a14:42c0::/29
2a14:62c0::/29
2a14:6a40::/32
Signature Algorithm: sha256WithRSAEncryption
09:7b:cb:d7:1a:b4:34:a4:af:d5:56:7c:46:06:e8:0c:73:a8:
b1:95:e3:92:6a:00:9c:3f:ec:08:73:ea:7e:4a:91:0c:23:cb:
72:f7:58:6c:5e:61:9d:32:68:e5:23:99:27:44:b5:38:97:ce:
3c:7f:51:11:8b:b7:5d:44:74:75:86:e0:ad:77:da:b1:31:a5:
56:6e:65:e5:49:cf:4c:1d:a5:98:f9:6c:dc:1c:3e:d3:10:01:
9e:00:bf:bc:c0:44:b5:86:53:b4:e7:c9:a2:1d:35:e2:80:ad:
3a:c4:52:3d:2c:90:58:4a:2d:1a:2d:c8:ec:bf:83:5d:55:14:
19:4f:12:73:32:f6:13:61:17:36:7c:a0:db:ce:81:d1:a4:05:
ea:8e:9c:b9:0f:81:8b:5f:36:c5:e4:61:ba:72:a5:7b:f0:98:
3e:58:16:e1:17:03:93:8e:e9:ea:48:c7:97:c3:5f:11:5a:6c:
dc:59:1a:1b:0c:c7:a3:b3:cd:26:ec:ed:37:49:39:25:53:85:
34:7b:15:9d:e5:3e:fa:bf:ff:1c:83:f9:ce:3f:1e:67:f1:60:
46:bc:b6:b7:c0:68:2f:61:e6:d6:b4:c5:33:57:5f:d2:95:58:
73:15:6d:00:41:a9:5f:c8:62:7b:6c:90:b8:01:e2:1d:cd:3f:
5c:e3:8b:17
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgISAZlOxjHJlRIqpjIrOV1V9wMGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjUwOTE1MTkwNzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNWVkZjcyZjQ5MjI3OTE0M2JlNTlhYmZhNDVhMjQ3ZDg2N2UyNmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hyI0gprfy7DPDRpfgOvaPvm5/qh
4SW1JJuhXC0gi7/EJ1zrjlwnTOgU+P/9eYvoJZyvg2da7/XRCqxnIualdFHqnUZA
TLAr3LngnVCzADh/3cg3VPgVH/vdFB2eLdKPtGargrfK8E+vynt9rttAR/fnlOO4
epAU8SqnAQlQncRbqoClsFKQF5YUKa+wTXYXbSDyewf8lUHgKl7facdwBLpTk2jZ
nYeoLLWyKNpOmR2b5S1ZZiw1D41sX5UB+HZJvYCrX4XvTSM3yCOMEQ1jpEVvhL2J
79dgn1LJfnECoeKMN1nZK6NEqeCvK9+9EUJzd7mlTI1wQ+DMskQtDD+pOwIDAQAB
o4ICfDCCAngwHQYDVR0OBBYEFLXt9y9JInkUO+Wav6RaJH2GfiahMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvdGUzM0wwa2llUlE3NVpxX3BGb2tmWVotSnFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGRBggrBgEFBQcBBwEB/wSBgTB/MAwEAgABMAYDBAC59Ggw
bwQCAAIwaQMFAyoFmkADBQMqBl/AAwUDKgusAAMFAyoQPIADBQMqED+AAwUDKhB3
wAMFACoTtMEDBQMqE7nAAwUDKhO7QAMFAyoTwkADBQMqE8NAAwUDKhQRAAMFAyoU
QsADBQMqFGLAAwUAKhRqQDANBgkqhkiG9w0BAQsFAAOCAQEACXvL1xq0NKSv1VZ8
RgboDHOosZXjkmoAnD/sCHPqfkqRDCPLcvdYbF5hnTJo5SOZJ0S1OJfOPH9REYu3
XUR0dYbgrXfasTGlVm5l5UnPTB2lmPls3Bw+0xABngC/vMBEtYZTtOfJoh014oCt
OsRSPSyQWEotGi3I7L+DXVUUGU8SczL2E2EXNnyg286B0aQF6o6cuQ+Bi182xeRh
unKle/CYPlgW4RcDk47p6kjHl8NfEVps3FkaGwzHo7PNJuztN0k5JVOFNHsVneU+
+r//HIP5zj8eZ/FgRry2t8BoL2Hm1rTFM1df0pVYcxVtAEGpX8hie2yQuAHiHc0/
XOOLFw==
-----END CERTIFICATE-----
Generated at Thu Sep 18 10:11:12 2025 by rpki-client