Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/TfqPHIGR_PXu5W6IUSDZ720Qt5o.roa
File: TfqPHIGR_PXu5W6IUSDZ720Qt5o.roa (raw, json)
Hash identifier: AuSrQh/+OApvY8w7opM9PQazeNMmrI80Oz5ROVTKQ/M=
Subject key identifier: 4D:FA:8F:1C:81:91:FC:F5:EE:E5:6E:88:51:20:D9:EF:6D:10:B7:9A
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 01988B1103375C507FA57FECDCA752D0BD2D
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/TfqPHIGR_PXu5W6IUSDZ720Qt5o.roa
Signing time: Fri 08 Aug 2025 19:03:24 +0000
ROA not before: Fri 08 Aug 2025 19:03:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 109.122.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:11:03:37:5c:50:7f:a5:7f:ec:dc:a7:52:d0:bd:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Aug 8 19:03:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4dfa8f1c8191fcf5eee56e885120d9ef6d10b79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:05:c8:b0:0b:00:c0:c8:45:5a:49:30:f3:2d:
fa:fb:08:7d:7d:63:c1:b4:bc:03:a4:31:2f:08:d4:
41:6a:74:3a:aa:ee:64:d9:b5:69:50:d3:01:4d:d3:
69:91:d4:22:7a:67:b8:0d:a2:ce:95:80:1f:70:e4:
7c:12:e1:fc:97:f0:07:04:23:ca:bd:3a:4e:72:d3:
6f:e4:d9:b1:4c:60:99:c9:bf:d8:dd:7d:31:71:ee:
aa:1d:49:43:33:dd:83:a2:fa:1b:f1:65:c1:10:48:
e2:44:5f:26:ba:6e:2b:e9:b5:fc:57:3e:22:c0:bd:
51:05:55:ba:1f:ef:75:37:35:8b:cb:15:1b:39:4e:
57:f2:c4:14:00:27:d4:6a:cd:91:58:df:79:9d:2d:
c6:77:0c:f3:7a:c2:e4:df:54:96:73:7d:ec:3a:f9:
6f:54:dd:21:9b:d4:5e:ca:b0:24:6d:eb:82:c7:2c:
4f:cd:ce:b2:6f:20:04:50:9f:f7:51:06:69:a1:a9:
3f:80:3b:fe:d6:21:5b:d1:7c:52:4e:a1:e9:53:05:
6d:03:d2:9e:d3:18:51:59:2f:3a:72:fa:06:8b:91:
40:9a:da:22:d9:91:b5:5e:b7:db:64:58:b8:fa:3a:
6f:39:15:0b:8e:e1:a4:97:e8:81:e4:65:f0:30:8a:
9f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FA:8F:1C:81:91:FC:F5:EE:E5:6E:88:51:20:D9:EF:6D:10:B7:9A
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/TfqPHIGR_PXu5W6IUSDZ720Qt5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.61.0/24
Signature Algorithm: sha256WithRSAEncryption
11:3a:2e:da:35:e8:d3:7d:31:a7:98:4c:3c:e4:45:1f:e6:ab:
12:13:12:31:dc:d9:f5:58:74:48:fb:a9:ba:4e:17:3a:ab:64:
de:91:bd:88:09:a3:2a:5d:57:a5:5d:b1:10:dc:a4:5f:54:c5:
67:eb:b2:f7:61:10:1d:7d:61:1b:ea:45:c4:c7:ae:3a:ea:ae:
07:48:67:c0:5c:a5:c0:d6:86:ee:68:3e:89:4f:13:8e:f2:70:
de:88:be:66:4b:4b:69:1c:63:94:00:49:65:4a:e3:40:67:ab:
c6:55:b0:89:b0:29:eb:16:1b:57:f2:80:40:17:e6:40:99:83:
d2:b1:f3:ff:0a:e7:fb:f9:20:0a:23:32:d3:e2:82:08:b9:86:
49:5a:92:d0:14:95:35:98:f0:14:71:29:b0:e0:89:f9:10:a8:
d7:0f:cd:bc:bc:cd:20:4a:50:51:a4:06:60:3c:da:97:e5:80:
ce:0b:a2:bb:69:97:6a:d7:c9:cb:82:3c:7c:86:50:6b:f5:80:
d3:55:83:61:39:e0:e8:7e:22:ab:b8:ad:6b:99:0e:a3:e9:f8:
e3:72:3b:19:20:5d:15:2c:ea:94:0c:d9:ec:45:f3:65:f3:36:
5c:55:3e:32:53:90:d8:f6:cc:c7:4c:ff:af:1c:a4:83:8c:f6:
1a:47:b3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 21:12:42 2025 by rpki-client