Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tW0oTyc8RKX3Yp59Tb1PLgRlSUo.roa
File: tW0oTyc8RKX3Yp59Tb1PLgRlSUo.roa (raw, json)
Hash identifier: dGDEbC5G1M2Qj/rb+aj9wdGwZxxspZycVGA7e6IBUTs=
Subject key identifier: B5:6D:28:4F:27:3C:44:A5:F7:62:9E:7D:4D:BD:4F:2E:04:65:49:4A
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019A011363DEF9E96A6074EFF7214D4D31B8
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tW0oTyc8RKX3Yp59Tb1PLgRlSUo.roa
Signing time: Mon 20 Oct 2025 10:03:59 +0000
ROA not before: Mon 20 Oct 2025 10:03:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29256
IP address blocks: 92.253.224.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:13:63:de:f9:e9:6a:60:74:ef:f7:21:4d:4d:31:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Oct 20 10:03:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b56d284f273c44a5f7629e7d4dbd4f2e0465494a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:50:c8:3d:90:8f:1a:5f:40:18:ec:5c:11:ca:
65:ff:c5:6f:2e:43:ed:03:37:f5:33:0a:88:23:82:
75:7e:b1:d3:fb:1b:ae:ad:08:d4:72:d0:17:87:02:
c1:97:81:06:07:0e:f0:62:d0:68:9a:f4:5c:46:c1:
eb:a2:a7:8e:7b:71:56:70:c8:75:4b:d0:80:8b:4f:
68:6d:e9:56:85:94:9d:96:a9:9a:ef:e3:f6:09:ec:
a5:7d:c7:5b:aa:75:a7:f7:d6:79:29:63:c4:8a:b9:
28:26:36:4d:c5:34:ac:ef:d3:28:aa:09:c8:7b:74:
17:ab:43:64:48:8a:c9:a5:7e:40:f7:55:6e:f9:8e:
55:de:87:d2:57:98:67:84:7a:c6:e6:db:82:67:5c:
4b:36:b6:49:87:c6:87:87:7b:3c:a6:46:ab:56:82:
b2:a3:34:ae:a9:08:51:fd:2a:63:ae:d3:cb:ad:6b:
9b:13:4e:82:78:61:16:ad:80:6c:5d:9b:4e:11:fb:
32:dc:ea:4a:03:1f:32:67:2b:1e:60:41:de:be:f1:
75:5d:8c:4e:ac:bb:a7:f4:cc:25:80:39:ea:93:0a:
01:30:e2:b8:0d:a3:35:02:e4:0a:91:8d:e6:d4:e3:
44:a6:3c:7d:5b:0e:8c:d6:75:37:18:c4:7d:17:76:
d8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6D:28:4F:27:3C:44:A5:F7:62:9E:7D:4D:BD:4F:2E:04:65:49:4A
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tW0oTyc8RKX3Yp59Tb1PLgRlSUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.253.224.0/21
Signature Algorithm: sha256WithRSAEncryption
46:5f:1a:4d:c6:cf:e6:3e:5b:12:70:2a:1b:3b:1d:99:f5:1e:
3f:03:be:5a:82:0b:e7:4e:b7:27:4f:17:86:db:78:81:86:e7:
02:2e:8f:24:a2:68:29:30:d5:79:db:35:0b:4b:87:e7:86:98:
69:6c:58:97:39:10:bb:2c:fd:78:d9:77:10:79:23:ba:fb:ae:
f2:d3:d7:3b:d6:d2:1d:97:17:d5:a3:60:cb:78:aa:d5:fe:d6:
92:23:5a:04:4f:36:0c:34:91:a2:e6:e2:f8:1b:dd:f5:e6:fc:
57:15:e4:00:79:b1:6b:d3:ce:1e:ed:d0:d9:c8:d4:a0:a1:f8:
8f:31:c3:26:fa:00:0a:df:14:7a:30:ec:89:db:5d:ef:02:f3:
58:71:8a:04:ba:8d:02:f5:df:db:ad:2a:d6:96:a0:b9:6d:a6:
4c:a8:2d:eb:9d:22:6b:f0:98:bf:cd:6c:fb:50:77:2f:28:af:
ce:b7:46:6d:0b:61:9c:69:46:3a:ea:d3:43:ff:a0:ae:3f:b9:
98:40:f3:3c:2f:ec:48:02:c0:57:f3:d1:44:41:1e:24:f4:21:
90:c3:34:a0:42:6f:70:de:83:0f:6d:35:53:fe:91:35:ff:ff:
ae:63:8b:89:6e:06:75:42:37:43:5f:55:6d:1d:77:a6:3a:67:
e2:3f:29:03
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZoBE2Pe+elqYHTv9yFNTTG4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjUxMDIwMTAwMzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTZkMjg0ZjI3M2M0NGE1Zjc2MjllN2Q0ZGJkNGYyZTA0NjU0OTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVDIPZCPGl9AGOxcEcpl/8VvLkPt
Azf1MwqII4J1frHT+xuurQjUctAXhwLBl4EGBw7wYtBomvRcRsHroqeOe3FWcMh1
S9CAi09obelWhZSdlqma7+P2CeylfcdbqnWn99Z5KWPEirkoJjZNxTSs79MoqgnI
e3QXq0NkSIrJpX5A91Vu+Y5V3ofSV5hnhHrG5tuCZ1xLNrZJh8aHh3s8pkarVoKy
ozSuqQhR/SpjrtPLrWubE06CeGEWrYBsXZtOEfsy3OpKAx8yZyseYEHevvF1XYxO
rLun9MwlgDnqkwoBMOK4DaM1AuQKkY3m1ONEpjx9Ww6M1nU3GMR9F3bYuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLVtKE8nPESl92KefU29Ty4EZUlKMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvdFcwb1R5YzhSS1gzWXA1OVRiMVBMZ1JsU1VvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXP3gMA0G
CSqGSIb3DQEBCwUAA4IBAQBGXxpNxs/mPlsScCobOx2Z9R4/A75aggvnTrcnTxeG
23iBhucCLo8komgpMNV52zULS4fnhphpbFiXORC7LP142XcQeSO6+67y09c71tId
lxfVo2DLeKrV/taSI1oETzYMNJGi5uL4G9315vxXFeQAebFr084e7dDZyNSgofiP
McMm+gAK3xR6MOyJ213vAvNYcYoEuo0C9d/brSrWlqC5baZMqC3rnSJr8Ji/zWz7
UHcvKK/Ot0ZtC2GcaUY66tND/6CuP7mYQPM8L+xIAsBX89FEQR4k9CGQwzSgQm9w
3oMPbTVT/pE1//+uY4uJbgZ1QjdDX1VtHXemOmfiPykD
-----END CERTIFICATE-----
Generated at Wed Oct 22 22:01:26 2025 by rpki-client