Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/T1lDS3VAgHH_OYxBqNAmtT1FyIY.roa
File: T1lDS3VAgHH_OYxBqNAmtT1FyIY.roa (raw, json)
Hash identifier: UmymOGtQtN7xS1moQNoUAKTjXkigVXv6mJ510I8rfCA=
Subject key identifier: 4F:59:43:4B:75:40:80:71:FF:39:8C:41:A8:D0:26:B5:3D:45:C8:86
Certificate issuer: /CN=2450ca4aab2a3f8abc6c973aa7c0fa13f2571081
Certificate serial: 019850F0A5EDCA8A6DD0D06D2FE016AE4B19
Authority key identifier: 24:50:CA:4A:AB:2A:3F:8A:BC:6C:97:3A:A7:C0:FA:13:F2:57:10:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFDKSqsqP4q8bJc6p8D6E_JXEIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/T1lDS3VAgHH_OYxBqNAmtT1FyIY.roa
Signing time: Mon 28 Jul 2025 12:10:04 +0000
ROA not before: Mon 28 Jul 2025 12:10:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16190
IP address blocks: 2.56.206.0/24 maxlen: 24
91.195.254.0/23 maxlen: 24
91.195.254.0/24 maxlen: 24
91.195.255.0/24 maxlen: 24
91.198.108.0/23 maxlen: 23
91.198.108.0/24 maxlen: 24
91.198.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFDKSqsqP4q8bJc6p8D6E_JXEIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:50:f0:a5:ed:ca:8a:6d:d0:d0:6d:2f:e0:16:ae:4b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2450ca4aab2a3f8abc6c973aa7c0fa13f2571081
Validity
Not Before: Jul 28 12:10:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f59434b75408071ff398c41a8d026b53d45c886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bb:72:14:85:27:42:c0:d8:d8:55:b1:fc:71:
31:28:72:d2:3d:70:ac:ef:4e:2a:b5:94:62:c9:ad:
ce:f8:5b:66:7a:f3:27:c1:cc:1b:21:da:8f:00:56:
3e:3e:a7:ee:52:f0:3a:35:ac:97:ff:04:26:48:62:
ce:09:db:38:00:94:41:6b:32:3f:55:06:44:b5:63:
5f:0f:10:9f:3a:66:26:42:04:30:54:22:b1:e2:c2:
73:f2:06:27:80:c2:53:dc:24:c6:48:97:63:7f:ff:
fb:da:37:3e:4a:3f:6d:cd:54:64:47:41:96:6b:6a:
dd:90:40:87:89:5c:81:da:f7:31:17:29:b5:87:94:
d6:e3:1e:df:c0:0a:e3:75:bc:01:74:d4:5f:58:5e:
89:0f:91:37:79:fa:f2:19:46:45:5d:60:f7:b3:56:
99:b0:6f:e7:49:90:7c:67:ba:42:77:76:27:fd:ab:
79:a4:82:ce:aa:62:e2:72:fa:5d:6d:91:98:21:b8:
02:7c:25:a0:ef:72:0e:d7:ad:03:39:bd:de:cf:77:
06:a8:6c:7f:b9:67:52:57:58:cf:40:e1:de:85:d1:
1a:a8:90:7d:ed:33:32:2c:40:95:74:e1:cc:5b:b1:
b8:26:f1:ea:3a:d0:10:33:43:80:80:ea:b6:ac:24:
01:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:59:43:4B:75:40:80:71:FF:39:8C:41:A8:D0:26:B5:3D:45:C8:86
X509v3 Authority Key Identifier:
keyid:24:50:CA:4A:AB:2A:3F:8A:BC:6C:97:3A:A7:C0:FA:13:F2:57:10:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFDKSqsqP4q8bJc6p8D6E_JXEIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/T1lDS3VAgHH_OYxBqNAmtT1FyIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.206.0/24
91.195.254.0/23
91.198.108.0/23
Signature Algorithm: sha256WithRSAEncryption
26:91:ee:2f:f1:8c:2c:1f:ee:94:c6:c1:14:0a:76:2d:ef:e9:
79:6f:00:70:59:1a:50:3c:90:5b:10:38:c1:aa:4f:2d:9e:f5:
53:a1:18:e3:c3:16:8b:8b:1a:44:e3:d6:e4:ba:cc:56:23:00:
48:b4:1e:eb:75:a5:ea:ed:ec:76:f1:3b:01:03:79:dd:83:4b:
02:6f:0d:e4:ee:10:09:07:4a:40:db:c1:36:af:a9:c0:07:b5:
e7:82:29:9d:9f:84:89:b0:27:b3:3f:64:f9:9b:f7:c9:81:c8:
37:a8:5e:ce:78:21:95:19:0a:f1:94:97:51:6c:bd:d3:df:d6:
db:89:9b:42:2b:66:4a:5a:1c:cd:b8:e9:26:07:91:2f:25:1f:
06:d8:37:64:66:b6:7a:3a:dc:71:69:12:8b:d7:66:f1:f7:1a:
81:53:e1:6c:e3:4d:8d:cc:06:0b:8c:85:f4:e6:5d:ba:ed:3c:
78:ee:78:eb:31:a0:ed:63:13:37:f4:8c:79:d6:49:0d:c5:d6:
45:73:20:02:5c:d6:b6:a9:c8:52:ef:e6:bb:f3:83:f0:59:c6:
94:a3:32:6b:a5:74:39:8e:b9:e3:0e:bb:87:b1:73:82:29:1a:
41:c1:f5:19:fe:c8:5a:2d:2d:5f:74:c7:a4:86:02:67:c8:ff:
13:ac:16:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:40:52 2025 by rpki-client