Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/TZE3CcuhV_eRH7c46sacBILbNRs.roa
File: TZE3CcuhV_eRH7c46sacBILbNRs.roa (raw, json)
Hash identifier: FP+9LximzW/Bx9J8LiGVmv0L0NS33jFMV8852HdHLnM=
Subject key identifier: 4D:91:37:09:CB:A1:57:F7:91:1F:B7:38:EA:C6:9C:04:82:DB:35:1B
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0196ED327B0A49580CBE65129CBB2C3385F7
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/TZE3CcuhV_eRH7c46sacBILbNRs.roa
Signing time: Tue 20 May 2025 10:17:10 +0000
ROA not before: Tue 20 May 2025 10:17:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206505
IP address blocks: 79.110.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:32:7b:0a:49:58:0c:be:65:12:9c:bb:2c:33:85:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: May 20 10:17:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d913709cba157f7911fb738eac69c0482db351b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0b:41:34:00:33:de:b5:94:8b:93:35:9f:c9:
5b:0c:16:3c:f5:78:36:c2:1e:b0:5a:71:48:2e:7e:
3a:c8:1b:a7:54:13:1a:e1:1c:50:eb:7b:b0:e3:85:
79:16:9e:dc:3b:ae:71:c1:5a:26:77:3f:82:17:26:
80:1c:39:cc:81:f7:c4:67:0e:e3:82:88:80:07:ee:
4b:ae:b7:32:43:3f:c5:cf:4d:ee:70:1f:18:e1:73:
71:69:c2:8a:ad:58:3a:aa:43:48:94:f7:d2:ba:f5:
f8:3d:5c:d6:fd:e1:83:cb:da:a5:a7:d8:b3:2c:e1:
78:77:22:0f:5b:ff:79:ea:6e:7a:71:c5:66:6d:18:
5f:29:f1:13:14:7b:1e:9e:77:1f:e7:1c:76:e6:23:
30:73:2e:d9:b3:75:56:0b:55:96:ef:9f:2c:cb:19:
08:8b:4d:74:92:8e:87:22:92:9e:d7:f0:ab:1c:a8:
77:40:0c:80:15:f9:6c:1c:d7:44:1d:58:e8:c6:0f:
ad:fb:c7:41:05:0a:d0:e8:45:79:13:ed:63:df:da:
76:1d:33:fe:97:e8:f7:e9:25:5a:7d:2b:6b:01:48:
5c:4b:8e:ff:17:ea:fe:a1:e5:c3:cf:2b:7a:29:21:
9b:d3:0c:99:8e:da:30:f7:60:4c:4e:f5:76:0a:b1:
88:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:91:37:09:CB:A1:57:F7:91:1F:B7:38:EA:C6:9C:04:82:DB:35:1B
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/TZE3CcuhV_eRH7c46sacBILbNRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.232.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:29:28:19:0f:4f:e1:94:97:b4:d5:d4:a8:30:96:3b:4f:06:
b3:5d:9b:93:21:c5:fa:d9:90:27:ef:9b:7a:d9:27:d3:5d:bc:
a2:5d:30:32:7e:b8:a5:3f:9c:00:df:fc:b9:28:45:bf:8d:de:
31:0c:79:63:a9:45:18:8a:bd:59:18:5d:72:b5:2a:0f:7a:57:
45:d8:80:ea:86:cc:fb:12:df:a9:39:4f:5a:23:a4:fa:87:24:
96:06:ba:b1:e6:e0:73:f6:41:7c:7e:e2:fa:c0:56:f6:ff:d9:
63:77:bc:33:ee:13:16:cf:59:e4:bc:b0:c7:33:1f:8a:58:1a:
06:38:04:20:94:7e:61:67:d0:71:db:4e:db:b9:02:28:d4:e1:
f7:99:8a:ed:0e:d3:cd:70:04:c2:3a:02:8c:ae:53:60:fc:d1:
ef:ac:d2:8c:d5:75:2f:d0:01:b6:5e:42:57:c9:f1:aa:72:84:
b0:2f:fa:46:9c:63:c2:ed:c1:8f:37:06:25:a7:e9:48:5d:1c:
66:dd:4b:60:0d:50:ec:ab:2a:86:74:e0:3f:2e:19:dc:74:25:
d8:31:e8:7c:a5:af:78:48:fb:72:85:ac:9b:8c:05:a8:01:a0:
94:49:5d:55:18:14:95:aa:50:b5:22:47:57:cb:2f:34:7e:c7:
64:0e:3e:ba
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZbtMnsKSVgMvmUSnLssM4X3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi
YmFhZTIwHhcNMjUwNTIwMTAxNzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDkxMzcwOWNiYTE1N2Y3OTExZmI3MzhlYWM2OWMwNDgyZGIzNTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQtBNAAz3rWUi5M1n8lbDBY89Xg2
wh6wWnFILn46yBunVBMa4RxQ63uw44V5Fp7cO65xwVomdz+CFyaAHDnMgffEZw7j
goiAB+5LrrcyQz/Fz03ucB8Y4XNxacKKrVg6qkNIlPfSuvX4PVzW/eGDy9qlp9iz
LOF4dyIPW/956m56ccVmbRhfKfETFHsenncf5xx25iMwcy7Zs3VWC1WW758syxkI
i010ko6HIpKe1/CrHKh3QAyAFflsHNdEHVjoxg+t+8dBBQrQ6EV5E+1j39p2HTP+
l+j36SVafStrAUhcS47/F+r+oeXDzyt6KSGb0wyZjtow92BMTvV2CrGI8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE2RNwnLoVf3kR+3OOrGnASC2zUbMB8GA1UdIwQY
MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt
MjU0YWNkOTJiNGUxLzEvVFpFM0NjdWhWX2VSSDdjNDZzYWNCSUxiTlJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx
LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT27oMA0G
CSqGSIb3DQEBCwUAA4IBAQBsKSgZD0/hlJe01dSoMJY7TwazXZuTIcX62ZAn75t6
2SfTXbyiXTAyfrilP5wA3/y5KEW/jd4xDHljqUUYir1ZGF1ytSoPeldF2IDqhsz7
Et+pOU9aI6T6hySWBrqx5uBz9kF8fuL6wFb2/9ljd7wz7hMWz1nkvLDHMx+KWBoG
OAQglH5hZ9Bx207buQIo1OH3mYrtDtPNcATCOgKMrlNg/NHvrNKM1XUv0AG2XkJX
yfGqcoSwL/pGnGPC7cGPNwYlp+lIXRxm3UtgDVDsqyqGdOA/LhncdCXYMeh8pa94
SPtyhaybjAWoAaCUSV1VGBSVqlC1IkdXyy80fsdkDj66
-----END CERTIFICATE-----
Generated at Fri Jun 6 16:51:21 2025 by rpki-client