Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/tFiKkWQWOXDgoTGOVA0l7qnf-V4.roa
File: tFiKkWQWOXDgoTGOVA0l7qnf-V4.roa (raw, json)
Hash identifier: vfGBWpbBGNuFZSo/i0dqFBt+R/znX7x+5TGdm7vAwkE=
Subject key identifier: B4:58:8A:91:64:16:39:70:E0:A1:31:8E:54:0D:25:EE:A9:DF:F9:5E
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01982E65E347B3CE12A5A74A01FED07CE856
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/tFiKkWQWOXDgoTGOVA0l7qnf-V4.roa
Signing time: Mon 21 Jul 2025 19:11:25 +0000
ROA not before: Mon 21 Jul 2025 19:11:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60223
IP address blocks: 185.244.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2e:65:e3:47:b3:ce:12:a5:a7:4a:01:fe:d0:7c:e8:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jul 21 19:11:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4588a9164163970e0a1318e540d25eea9dff95e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c6:aa:6a:50:88:79:fe:e9:c1:7b:ed:89:f1:
3b:47:a0:a5:5e:83:64:20:7b:48:92:a6:81:89:96:
15:97:b0:7b:c0:16:0d:67:65:cd:c1:d8:88:2d:c9:
f9:c1:45:e7:cb:24:33:52:c7:9a:ab:1c:bc:9b:41:
18:eb:99:a5:6b:2a:b9:c0:38:5d:d8:53:24:2c:6e:
76:62:80:22:1c:dc:ac:fc:94:47:7a:b9:08:a4:b0:
b7:cd:19:22:cd:ec:20:3d:3a:73:91:49:6f:fb:db:
6d:fe:e8:a1:7e:6c:63:aa:0e:18:de:80:ee:0a:f7:
0a:5c:22:2f:3e:26:b6:ec:d8:92:8b:b1:2c:ab:0c:
fa:84:86:66:83:fa:54:26:9e:8f:be:d5:89:49:39:
95:66:c6:f9:6b:74:ff:21:22:8b:78:98:22:5b:ff:
ea:05:b5:18:97:85:a0:83:23:b8:e2:2a:89:e9:77:
c3:e8:45:36:b3:35:55:04:44:e5:62:c7:9f:00:71:
3e:41:19:41:e0:4e:8f:46:ed:7f:2c:29:5f:d6:2b:
b6:65:20:53:91:09:16:08:e5:ef:41:d2:10:d7:9d:
7c:8c:dd:f4:cb:29:22:d4:3d:08:97:ed:fd:14:35:
ed:ba:91:ef:b2:3f:ac:d1:76:7a:43:89:f4:d6:50:
55:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:58:8A:91:64:16:39:70:E0:A1:31:8E:54:0D:25:EE:A9:DF:F9:5E
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/tFiKkWQWOXDgoTGOVA0l7qnf-V4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.104.0/24
Signature Algorithm: sha256WithRSAEncryption
74:b5:ce:a2:65:fd:8e:5b:1d:47:82:f1:46:df:eb:30:ec:b9:
8e:3c:f4:b1:15:96:a2:61:e5:38:e4:05:56:a8:c0:ba:61:e5:
a4:33:af:c5:e0:5d:25:c1:a5:48:07:4c:c8:42:aa:97:83:73:
93:74:25:91:63:62:c8:13:13:dc:dd:f1:50:b6:eb:ee:de:e2:
ca:77:48:37:79:6b:2f:ee:bf:73:40:8b:25:41:11:14:02:d3:
33:d1:fa:7e:c6:4a:e6:ba:f2:af:0a:ab:35:d7:80:0d:cc:75:
f8:eb:c1:7b:36:3b:c9:b4:0a:c1:e8:bc:97:5a:d3:1d:62:4e:
f1:4f:db:e6:80:52:7f:f1:43:08:60:36:0c:70:5b:ff:dd:9d:
61:62:9d:03:e2:be:00:9a:3a:17:78:31:1e:f0:96:83:47:a0:
2a:49:f9:1e:0a:90:b3:0c:5f:1f:9e:26:83:dc:cf:b2:ce:a6:
e6:20:94:78:01:b7:8f:42:06:18:4b:ba:1c:d9:34:47:1e:6f:
00:73:fc:58:3e:3b:53:44:06:8c:e9:75:ab:d2:7d:af:b3:04:
f6:fe:b4:8c:07:d8:76:c4:5c:c6:b0:02:e7:d7:b8:40:c4:32:
b7:1e:27:75:3e:a0:4e:d4:89:37:6a:0c:12:d1:71:58:b7:2e:
ae:9c:b2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:20:48 2025 by rpki-client