Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/tli9a4MFilhc6bhiwfcm0_eUZQk.roa
File: tli9a4MFilhc6bhiwfcm0_eUZQk.roa (raw, json)
Hash identifier: idJeUEpDv8hc3pPAuSjLkqMBrYsymPccKUeBDJM0BiA=
Subject key identifier: B6:58:BD:6B:83:05:8A:58:5C:E9:B8:62:C1:F7:26:D3:F7:94:65:09
Certificate issuer: /CN=aca1f4713024804c445403af63fa644b2a935d24
Certificate serial: 0198E5B4BE8012EC16DF28ABD731C26416EA
Authority key identifier: AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/tli9a4MFilhc6bhiwfcm0_eUZQk.roa
Signing time: Tue 26 Aug 2025 09:28:04 +0000
ROA not before: Tue 26 Aug 2025 09:28:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216092
IP address blocks: 194.180.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e5:b4:be:80:12:ec:16:df:28:ab:d7:31:c2:64:16:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca1f4713024804c445403af63fa644b2a935d24
Validity
Not Before: Aug 26 09:28:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b658bd6b83058a585ce9b862c1f726d3f7946509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fd:cc:57:18:b5:47:0c:09:d7:62:0e:fe:ff:
27:aa:8b:5d:38:18:61:9a:2d:56:38:cf:ce:e2:65:
6a:d3:86:a8:65:21:06:a4:93:c0:c5:24:4c:f7:9f:
f5:7a:3a:72:60:52:3f:d6:7a:5b:10:5d:6a:bc:2f:
f1:e0:8b:1c:0b:fa:9e:5d:6a:c9:93:33:a7:0e:b4:
39:2f:07:1e:23:dc:f3:2e:50:0b:50:54:62:9e:3c:
0a:60:e0:d7:72:0f:0f:a5:e7:80:01:23:81:c8:c6:
12:db:39:d2:5a:e6:2f:8d:22:22:cd:2e:ae:9b:5a:
0c:2b:69:29:5c:7e:97:57:51:d9:23:b3:d7:9e:07:
a2:f6:4c:04:07:3a:00:66:e1:91:4d:cb:6e:e1:9a:
00:7f:1c:56:b8:57:ca:aa:a3:65:b0:7a:84:f9:5c:
a0:df:1f:87:bf:7a:e3:87:7d:b7:8a:2a:65:15:b8:
2c:c0:ca:62:15:eb:57:00:9e:78:1e:3b:50:98:b7:
e6:50:b4:da:de:87:55:a2:be:47:95:dd:f9:25:a0:
69:99:60:5d:83:28:0b:41:d0:2d:bd:59:33:bd:79:
d0:fa:27:40:29:d3:a0:43:40:a2:3a:4a:bf:ce:6b:
79:a4:2e:25:0c:f2:6a:c9:97:16:ab:af:82:cc:51:
c0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:58:BD:6B:83:05:8A:58:5C:E9:B8:62:C1:F7:26:D3:F7:94:65:09
X509v3 Authority Key Identifier:
keyid:AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/tli9a4MFilhc6bhiwfcm0_eUZQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.216.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:f2:3b:c2:27:b3:5a:ac:88:7a:ab:dd:7b:1c:98:54:43:8c:
22:2d:b1:f6:2c:93:6b:f9:8d:47:19:41:51:6b:09:fe:f8:8b:
53:08:48:ed:59:24:1e:33:d6:2a:fe:b3:25:84:2b:ee:ff:77:
b8:c4:a8:84:db:04:6a:b1:b1:5b:2f:5b:a1:48:82:ea:97:df:
d2:e4:ca:6a:23:27:95:ff:e4:2f:0b:7b:f7:44:87:c9:72:2d:
5d:88:da:e7:dd:38:57:dc:c5:3f:7e:b5:90:1d:08:a1:a4:ab:
02:c7:52:d4:52:a4:3a:17:c3:88:f6:65:a8:77:37:97:55:1d:
02:f4:82:b4:f4:ee:ac:58:d6:fe:2f:4f:b0:21:e9:28:33:20:
37:af:97:24:6e:3b:68:e5:6e:ed:b2:6d:49:f4:56:db:e8:f6:
47:66:d6:b7:6e:d6:83:1e:a6:2c:d7:69:11:b1:4b:a6:be:8c:
d6:69:33:1e:8b:75:9e:e8:e5:34:a6:11:f0:b5:fd:4c:d4:1a:
55:ae:e3:29:b0:34:72:5a:54:29:cc:a8:0f:a5:ad:66:53:78:
58:aa:09:01:a3:c5:0b:d3:4a:8d:3b:ea:dc:8d:3c:b7:ed:fa:
de:53:d8:a1:6a:4b:4b:0a:14:56:6c:34:2f:58:dd:52:a9:11:
7e:4d:df:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 06:14:42 2025 by rpki-client