Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/884aae-2203-4f21-91a4-8f1ff3880102/1/dTqGBPJdhAtYfJdhKht0AshnDHA.roa
File: dTqGBPJdhAtYfJdhKht0AshnDHA.roa (raw, json)
Hash identifier: cv0gljmXyVFEUJxvPpTotnLGffpzplLUWeRT5xXyBkw=
Subject key identifier: 75:3A:86:04:F2:5D:84:0B:58:7C:97:61:2A:1B:74:02:C8:67:0C:70
Certificate issuer: /CN=4eedb8556a0cf1e82d8e7c79058f0efb50402ca6
Certificate serial: 019A164133434525353C14BC4B5AF416E978
Authority key identifier: 4E:ED:B8:55:6A:0C:F1:E8:2D:8E:7C:79:05:8F:0E:FB:50:40:2C:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu24VWoM8egtjnx5BY8O-1BALKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/884aae-2203-4f21-91a4-8f1ff3880102/1/dTqGBPJdhAtYfJdhKht0AshnDHA.roa
Signing time: Fri 24 Oct 2025 12:46:02 +0000
ROA not before: Fri 24 Oct 2025 12:46:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35706
IP address blocks: 217.10.96.0/19 maxlen: 19
2001:4db8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/884aae-2203-4f21-91a4-8f1ff3880102/1/Tu24VWoM8egtjnx5BY8O-1BALKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/884aae-2203-4f21-91a4-8f1ff3880102/1/Tu24VWoM8egtjnx5BY8O-1BALKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tu24VWoM8egtjnx5BY8O-1BALKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:16:41:33:43:45:25:35:3c:14:bc:4b:5a:f4:16:e9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eedb8556a0cf1e82d8e7c79058f0efb50402ca6
Validity
Not Before: Oct 24 12:46:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=753a8604f25d840b587c97612a1b7402c8670c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ea:2b:05:20:22:a6:af:24:cb:64:3d:ed:f2:
a7:d0:97:4f:3d:a9:86:df:cf:f4:07:f0:f5:f4:cd:
72:61:25:66:75:55:8d:88:55:a2:c2:46:41:84:19:
c4:1b:97:a5:8e:9f:38:10:f9:40:51:3c:0b:d3:68:
f8:78:bc:8e:ef:d9:a8:68:69:6f:68:ff:4f:3c:66:
b8:b3:1f:40:45:33:af:35:37:eb:52:5b:fa:da:38:
f7:84:00:9f:b0:6f:84:98:d8:c4:de:bc:34:24:1a:
36:ca:eb:c8:27:42:0b:71:f7:89:47:ca:df:1c:c8:
12:5f:70:e0:fe:a2:13:fb:15:17:9e:e8:6a:60:29:
f7:14:03:cb:8d:4f:44:ab:65:26:f1:fe:18:59:a4:
d0:58:56:7b:2b:bd:96:71:ac:a0:22:9a:07:1e:88:
5d:ef:24:81:0a:91:c8:33:d4:14:22:03:38:ce:12:
87:30:be:10:41:cc:35:75:ce:3f:ca:32:f9:d6:32:
2c:89:33:c9:8e:53:e4:a8:22:70:d3:dc:af:84:6e:
6d:de:0f:94:95:3b:88:a9:b8:75:0d:dc:db:74:1f:
50:f2:bc:e0:88:6b:12:b0:8d:70:50:f8:a1:69:f9:
28:b3:0c:fd:72:9f:38:a5:2e:5f:6f:14:46:1f:69:
42:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3A:86:04:F2:5D:84:0B:58:7C:97:61:2A:1B:74:02:C8:67:0C:70
X509v3 Authority Key Identifier:
keyid:4E:ED:B8:55:6A:0C:F1:E8:2D:8E:7C:79:05:8F:0E:FB:50:40:2C:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu24VWoM8egtjnx5BY8O-1BALKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/884aae-2203-4f21-91a4-8f1ff3880102/1/dTqGBPJdhAtYfJdhKht0AshnDHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/884aae-2203-4f21-91a4-8f1ff3880102/1/Tu24VWoM8egtjnx5BY8O-1BALKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.10.96.0/19
IPv6:
2001:4db8::/32
Signature Algorithm: sha256WithRSAEncryption
5f:1a:46:59:e5:32:63:25:0d:33:53:f7:9e:20:ab:73:c9:a7:
90:8a:f0:ef:ab:02:42:03:df:19:f0:5f:58:66:21:b1:49:66:
6a:1a:3e:5c:73:0c:ed:2c:9a:1e:32:8f:00:6d:b6:bb:b4:fb:
50:a0:43:94:13:91:4d:b4:3e:9c:4a:79:e6:c7:ee:f0:61:f6:
ee:df:3c:58:1c:dd:2d:60:b3:bf:40:96:ed:7c:3c:e4:e5:5f:
58:cd:9f:4c:a6:74:f4:d0:4b:74:98:bf:8c:cc:21:a8:d2:ab:
d1:66:fe:44:9c:bd:ce:2b:8c:45:bd:fb:41:39:2b:90:85:fc:
8b:0c:34:43:34:8e:2e:dd:51:c2:da:0e:4d:63:e2:0a:c6:fa:
45:ea:25:1f:ae:18:4b:79:3c:30:77:6a:d0:59:78:ac:c4:20:
3f:1d:55:7c:da:83:b0:e8:42:dd:13:29:3e:01:56:fa:62:8c:
17:90:cc:05:e5:7e:55:11:f2:6e:b4:4d:59:d9:bd:46:5f:ee:
4b:ea:d0:ab:b7:57:30:5e:ef:e5:2b:e7:2f:2d:25:11:e3:68:
b4:7c:e2:4c:f6:68:ac:90:4e:66:c4:38:92:39:7e:e2:df:86:
81:fb:49:e4:05:c3:4e:ea:9e:48:3b:4c:59:e0:71:20:1b:8c:
85:af:e0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:01:29 2025 by rpki-client