Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/Tpzepq58z_aU3I05rjgHZjdSF4A.roa
File: Tpzepq58z_aU3I05rjgHZjdSF4A.roa (raw, json)
Hash identifier: TQoun3PaU74elifnUAi84oWKWkBYuJXkGa74wDgLRTc=
Subject key identifier: 4E:9C:DE:A6:AE:7C:CF:F6:94:DC:8D:39:AE:38:07:66:37:52:17:80
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 01987A45C42CA3B7455EFF27BB7E6C0F9FF6
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/Tpzepq58z_aU3I05rjgHZjdSF4A.roa
Signing time: Tue 05 Aug 2025 12:47:29 +0000
ROA not before: Tue 05 Aug 2025 12:47:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210058
IP address blocks: 93.175.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:45:c4:2c:a3:b7:45:5e:ff:27:bb:7e:6c:0f:9f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Aug 5 12:47:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e9cdea6ae7ccff694dc8d39ae38076637521780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6e:8a:c3:cb:32:bf:59:b2:8c:04:94:93:e6:
ae:0c:d8:2a:3a:70:31:95:25:6a:ef:17:7c:e9:25:
88:4b:87:ff:c3:4b:81:96:94:ec:30:a2:e2:4a:80:
35:58:5c:07:8d:84:f4:4e:ae:9e:fa:34:83:f9:38:
8b:05:06:a5:d0:93:48:8a:9f:cb:ff:42:a1:cd:c4:
f2:64:4e:55:12:4c:a0:75:a8:8a:7e:b3:71:81:a3:
cc:a2:57:f9:db:01:5b:95:34:c8:3a:f9:0f:67:2c:
0b:02:00:90:df:0a:c5:c9:8d:21:c8:7b:54:25:30:
5c:b4:a2:99:bb:93:0a:83:8b:29:80:a1:15:c9:97:
a9:5b:47:04:3c:27:13:92:6e:57:62:2c:f2:7c:7c:
78:79:00:19:c6:8a:60:06:4d:1f:01:4c:ad:7b:a5:
80:d2:ea:52:8b:fd:4d:61:7d:a1:07:dd:b6:81:a9:
fc:43:b0:0a:96:e2:1b:e4:c3:3f:1d:c3:d2:e0:fa:
eb:2d:5d:1c:1f:b9:1c:20:8a:cf:5b:1d:e7:a7:5c:
de:b1:31:ca:02:97:27:5f:d7:b1:69:ec:0c:06:ff:
6e:6e:bb:b1:82:ed:66:f4:24:b1:0f:8d:e8:77:46:
49:96:4d:2f:e6:75:35:0d:9a:e8:51:8c:b4:a8:dc:
b4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9C:DE:A6:AE:7C:CF:F6:94:DC:8D:39:AE:38:07:66:37:52:17:80
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/Tpzepq58z_aU3I05rjgHZjdSF4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.175.247.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:1b:39:ab:12:2f:19:9e:b6:5a:2d:12:2b:a8:e3:53:b1:0b:
dd:cd:5e:03:ed:81:4e:7a:42:73:03:e9:58:fa:ed:41:71:09:
a5:90:d3:c9:4a:00:ec:d7:b7:3a:59:a8:f6:56:8a:30:b1:09:
9b:fc:8f:72:51:65:57:e1:eb:b4:a2:01:09:b3:71:91:62:4b:
19:98:5c:11:33:6b:0b:fb:d8:ad:11:03:72:0c:4c:33:47:75:
d7:81:69:83:51:ec:4e:4c:da:69:d8:5c:ad:d1:36:35:d0:91:
89:04:34:63:5a:1a:7b:19:9d:4c:cc:76:fd:7f:32:ea:e2:cd:
f7:93:2c:65:60:13:f6:30:f9:c8:fa:a8:96:94:b2:dd:78:8f:
74:55:8b:1c:80:ab:d3:c6:10:14:88:86:68:51:71:20:e4:59:
ec:58:ff:de:65:68:e4:da:19:eb:60:2c:b0:bd:e9:90:75:81:
10:0c:78:02:5b:22:ea:cc:ef:54:3e:99:bd:d9:fb:37:f5:9a:
c0:56:b3:cb:63:72:1c:de:11:7d:6c:c9:3b:60:68:a4:65:47:
9d:49:b9:31:d6:30:e4:b1:d5:9d:ae:50:4a:90:38:96:36:f3:
16:fb:fb:a2:48:53:82:92:2d:ed:80:4c:51:ea:4a:fb:56:bd:
fe:93:fa:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 11:03:43 2025 by rpki-client