Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c0bfe8-9a3e-4000-adf8-ff287c062b61/1/TDwx2WmFrMdexoGeE59PEmpc9rM.roa
File: TDwx2WmFrMdexoGeE59PEmpc9rM.roa (raw, json)
Hash identifier: 28BE4l6J/5v8RjnKxtTkUCzhfcWaJj8sY8Y3wzlLglI=
Subject key identifier: 4C:3C:31:D9:69:85:AC:C7:5E:C6:81:9E:13:9F:4F:12:6A:5C:F6:B3
Certificate issuer: /CN=c45a6011c6b76158c0f6c5c272d82d8027f88fa3
Certificate serial: 019A6041120F389698BAFB62D072A17B6E8B
Authority key identifier: C4:5A:60:11:C6:B7:61:58:C0:F6:C5:C2:72:D8:2D:80:27:F8:8F:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFpgEca3YVjA9sXCctgtgCf4j6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0bfe8-9a3e-4000-adf8-ff287c062b61/1/TDwx2WmFrMdexoGeE59PEmpc9rM.roa
Signing time: Fri 07 Nov 2025 21:37:48 +0000
ROA not before: Fri 07 Nov 2025 21:37:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200125
IP address blocks: 89.39.168.0/22 maxlen: 22
185.35.196.0/22 maxlen: 22
185.238.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0bfe8-9a3e-4000-adf8-ff287c062b61/1/xFpgEca3YVjA9sXCctgtgCf4j6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/c0bfe8-9a3e-4000-adf8-ff287c062b61/1/xFpgEca3YVjA9sXCctgtgCf4j6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFpgEca3YVjA9sXCctgtgCf4j6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:60:41:12:0f:38:96:98:ba:fb:62:d0:72:a1:7b:6e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45a6011c6b76158c0f6c5c272d82d8027f88fa3
Validity
Not Before: Nov 7 21:37:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c3c31d96985acc75ec6819e139f4f126a5cf6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:30:ae:49:c6:06:79:7f:af:82:f1:99:79:e6:
c7:ea:db:39:31:94:6d:f3:99:9b:e3:2e:2b:53:43:
0c:41:0d:3c:93:8d:75:6e:f6:6c:e7:f4:52:fe:a3:
51:c4:e0:48:eb:fd:d3:38:1d:8f:30:b4:0d:d9:50:
f6:50:32:34:51:90:80:8c:87:60:be:a6:f7:07:ae:
19:70:3c:a1:4f:69:a8:ac:ce:de:94:84:80:89:41:
65:2e:77:95:66:6f:94:16:d2:57:7c:22:7e:1b:65:
be:24:37:f2:06:2b:5b:d0:c5:fc:80:44:77:fb:fa:
8f:a3:8c:ee:05:65:c8:0b:3d:2e:55:bc:0e:b6:16:
cf:ff:9c:64:9a:b3:f4:e0:38:dd:40:62:86:cf:7b:
be:9a:6a:cf:43:8b:da:07:54:ef:5c:9e:ee:46:20:
ba:65:cf:57:f0:b8:70:55:c4:b8:12:26:8d:40:89:
95:5e:2a:98:22:d2:4e:8c:ce:54:dc:ae:2d:57:f0:
4b:1f:18:67:90:ab:19:cf:8d:3b:49:71:13:95:d2:
a5:7f:ed:43:ee:ac:ab:41:da:36:9e:ea:22:9a:15:
d3:d2:19:a0:27:30:28:c8:dc:ca:c5:b0:88:ed:72:
7e:ba:b5:c9:78:a8:3d:cc:0e:dc:bd:40:a3:a9:6f:
d2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3C:31:D9:69:85:AC:C7:5E:C6:81:9E:13:9F:4F:12:6A:5C:F6:B3
X509v3 Authority Key Identifier:
keyid:C4:5A:60:11:C6:B7:61:58:C0:F6:C5:C2:72:D8:2D:80:27:F8:8F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFpgEca3YVjA9sXCctgtgCf4j6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0bfe8-9a3e-4000-adf8-ff287c062b61/1/TDwx2WmFrMdexoGeE59PEmpc9rM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0bfe8-9a3e-4000-adf8-ff287c062b61/1/xFpgEca3YVjA9sXCctgtgCf4j6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.168.0/22
185.35.196.0/22
185.238.64.0/22
Signature Algorithm: sha256WithRSAEncryption
83:4d:d2:7e:fb:fd:e3:c7:62:91:4e:ee:60:b8:ab:d8:55:1a:
a8:c5:36:da:c2:0d:10:b7:5a:cb:ab:08:f8:49:00:60:a0:53:
60:04:c2:af:59:8a:6c:5d:ff:ee:2b:7d:f9:df:98:bf:54:00:
80:94:4e:bc:ca:40:22:92:c8:6b:08:02:9e:e4:88:b6:e3:d1:
a0:60:98:6c:6e:78:fd:a3:f5:cd:64:e5:4d:2f:4e:22:88:a5:
c4:39:d8:5d:2d:41:66:f0:68:71:8d:e4:6d:7c:c9:35:db:d0:
57:d8:15:87:da:3b:ab:d1:4f:82:0d:67:e5:99:a9:f6:b3:d9:
28:bc:58:9b:83:b6:9f:fe:fb:7d:8d:ab:74:80:0f:c0:ae:5c:
cc:bc:8d:09:65:25:ea:55:b6:4e:f3:36:f9:ef:dc:da:54:5a:
3f:01:9f:82:3a:14:e0:ac:16:ce:1b:df:96:4c:d8:35:c7:88:
7d:27:d9:10:5b:d9:78:3d:71:26:4c:5a:f7:ab:7c:76:a9:26:
70:1d:f2:6d:bb:da:5c:c7:8f:80:8d:ba:e8:23:18:82:2a:d5:
7e:3b:dc:c3:92:15:a5:f6:da:82:ed:26:c8:b6:a2:57:85:0b:
9d:6a:da:1f:86:02:31:b9:ed:57:a0:22:52:ef:76:c6:14:65:
06:17:67:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:33 2025 by rpki-client