Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/Tl33p-h-oYWG4k1AAbZ0b7tAMuc.roa
File: Tl33p-h-oYWG4k1AAbZ0b7tAMuc.roa (raw, json)
Hash identifier: HuarYU0/JApAedHcUrTI8IFeZjSh+Z57prgHfyI1KYc=
Subject key identifier: 4E:5D:F7:A7:E8:7E:A1:85:86:E2:4D:40:01:B6:74:6F:BB:40:32:E7
Certificate issuer: /CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Certificate serial: 0198E616B4BA7969EB82908DC14CB66AEC3C
Authority key identifier: D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/Tl33p-h-oYWG4k1AAbZ0b7tAMuc.roa
Signing time: Tue 26 Aug 2025 11:15:04 +0000
ROA not before: Tue 26 Aug 2025 11:15:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197350
IP address blocks: 46.60.0.0/20 maxlen: 20
46.60.0.0/22 maxlen: 22
46.60.1.0/24 maxlen: 24
46.60.4.0/22 maxlen: 22
46.60.5.0/24 maxlen: 24
46.60.7.0/24 maxlen: 24
46.60.12.0/23 maxlen: 23
46.60.13.0/24 maxlen: 24
46.60.14.0/24 maxlen: 24
46.60.15.0/24 maxlen: 24
46.60.48.0/24 maxlen: 24
46.60.49.0/24 maxlen: 24
46.60.51.0/24 maxlen: 24
46.60.52.0/24 maxlen: 24
46.60.53.0/24 maxlen: 24
46.60.54.0/24 maxlen: 24
46.60.55.0/24 maxlen: 24
46.60.56.0/22 maxlen: 22
46.60.58.0/23 maxlen: 23
46.60.60.0/24 maxlen: 24
46.60.61.0/24 maxlen: 24
46.60.62.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e6:16:b4:ba:79:69:eb:82:90:8d:c1:4c:b6:6a:ec:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Validity
Not Before: Aug 26 11:15:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e5df7a7e87ea18586e24d4001b6746fbb4032e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d4:c5:8a:68:08:97:11:dc:5a:75:ee:93:0a:
40:c7:a5:a0:d1:5f:bb:57:40:86:f0:77:00:15:a3:
d1:54:65:6d:af:c2:b6:10:1e:8a:7a:d3:28:45:e5:
d7:3f:ec:e3:1c:2c:d0:00:e8:5a:98:5e:a4:11:05:
93:5c:39:dd:13:87:0c:e5:08:33:eb:f2:26:f9:c4:
73:19:14:4a:7f:90:80:b9:37:b1:c3:28:94:d1:f0:
ba:04:f8:0e:68:8c:45:dc:c0:04:08:d7:98:fe:ac:
ba:76:b4:c8:b0:55:fd:4f:17:21:e9:9f:cc:b5:27:
4f:93:36:13:d3:39:e8:c9:7f:c2:15:f0:e6:08:ea:
e8:63:fb:f4:96:60:e0:61:0b:59:27:ab:4e:82:c9:
76:dc:3b:d5:b8:7a:88:58:e0:19:66:c1:44:73:63:
c8:00:88:86:c4:1e:6d:af:33:05:ba:e4:cf:b9:bc:
3a:5e:a1:04:fd:85:e1:65:5a:e8:a7:da:a7:45:05:
08:b6:91:04:91:54:a7:1c:9d:48:aa:81:e2:16:6b:
c5:1a:19:06:3d:06:8a:18:78:f3:59:74:41:78:31:
49:7f:81:69:69:78:3d:ac:65:ad:c1:a1:9d:96:ef:
07:88:c4:44:50:02:0c:72:39:ef:e8:58:0d:e0:28:
c7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:5D:F7:A7:E8:7E:A1:85:86:E2:4D:40:01:B6:74:6F:BB:40:32:E7
X509v3 Authority Key Identifier:
keyid:D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/Tl33p-h-oYWG4k1AAbZ0b7tAMuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.60.0.0/20
46.60.48.0/23
46.60.51.0-46.60.63.255
Signature Algorithm: sha256WithRSAEncryption
75:7d:9f:63:c1:6d:1f:e3:5a:f6:4a:c2:c4:df:ad:02:3b:f9:
e5:24:0c:bd:f6:8f:b8:ed:5c:84:64:5d:09:86:ba:2d:44:77:
5d:2b:1e:66:55:87:c0:1a:55:33:eb:e3:a9:f9:fb:fb:35:e5:
c6:26:48:ad:8a:5d:68:53:eb:06:46:1e:e4:6d:b0:3f:fd:79:
63:7b:6f:4b:4a:3f:ec:e3:d1:6c:9f:09:a0:eb:31:1b:31:30:
0f:e5:05:ce:c3:55:46:bf:6e:4c:3d:86:83:18:e6:09:b5:d3:
be:e4:00:ca:98:48:5d:14:f6:8e:e0:2c:56:2c:bc:a9:16:88:
82:62:59:9d:e4:00:8f:1a:d3:88:11:c1:b2:2d:72:b6:f7:16:
4b:31:1f:a5:39:37:9d:2b:20:3d:27:a2:e8:24:c0:19:d0:d8:
55:d6:b8:6f:37:6f:79:84:7f:69:b7:9a:04:16:a2:61:36:69:
9f:63:da:e2:0e:3d:1f:ea:be:0a:55:1a:5c:20:53:e1:28:b5:
08:7a:69:97:23:db:ec:5d:1d:b8:f5:cc:da:e7:f2:2f:f9:10:
f1:22:c1:89:be:cf:46:cc:b7:db:06:4d:4d:25:3d:2a:d7:f7:
a6:80:08:1d:2f:90:37:8d:ad:d4:d6:b7:3a:0b:94:46:78:c6:
3e:39:45:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 03:02:54 2025 by rpki-client