
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/TULUVMZrZysTzt7hoApiqSwmwRw.roa
File: TULUVMZrZysTzt7hoApiqSwmwRw.roa (raw, json)
Hash identifier: PiDEwSsMKjWc6YRfQ141o36YSJI6+o5nV+d/eY8zxa4=
Subject key identifier: 4D:42:D4:54:C6:6B:67:2B:13:CE:DE:E1:A0:0A:62:A9:2C:26:C1:1C
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0198515BEB24CFC08F9F1A32B00A0D43F91E
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/TULUVMZrZysTzt7hoApiqSwmwRw.roa
Signing time: Mon 28 Jul 2025 14:07:15 +0000
ROA not before: Mon 28 Jul 2025 14:07:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23013
IP address blocks: 88.216.130.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 11:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:5b:eb:24:cf:c0:8f:9f:1a:32:b0:0a:0d:43:f9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 28 14:07:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d42d454c66b672b13cedee1a00a62a92c26c11c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1e:1a:0e:ed:79:4b:43:85:4c:c0:de:ed:11:
dc:12:60:a9:93:9c:01:7a:ee:19:6f:e5:65:33:67:
71:08:8e:83:a3:6e:91:c1:67:65:59:5f:f8:2d:61:
20:e6:58:6d:e5:e4:a0:3e:10:55:04:6b:ab:37:2d:
09:42:bc:19:63:61:eb:df:07:56:00:50:53:99:b3:
ef:b6:81:aa:d7:fe:f4:76:8e:19:e2:ee:33:b9:0b:
e2:e6:f2:64:5a:76:47:c9:5e:10:7c:ac:9e:2f:10:
6b:db:bc:9a:b6:7a:10:99:5c:de:01:6c:a3:85:fd:
a1:e8:fd:44:3e:f1:c0:61:3c:c0:ad:9f:07:35:84:
ed:9e:5f:f7:40:e5:e1:65:ce:8a:d5:b2:96:67:fb:
4d:ac:a3:d6:e5:be:aa:53:31:fd:4f:cc:f6:7b:46:
ad:7d:18:13:3f:52:e2:ea:74:4b:d0:b6:c6:b9:e0:
61:59:7a:ad:59:39:0e:2d:20:9f:39:6b:a0:84:9a:
b6:30:82:4a:e4:2d:18:9b:93:75:32:73:ce:31:b0:
be:6b:4b:cf:b5:66:2b:42:8f:07:0b:0b:77:3a:15:
27:de:0a:4a:cb:85:43:18:51:95:c2:42:46:c8:fe:
2d:9c:f0:e5:b0:77:84:12:8b:2f:06:eb:4f:a9:1d:
8d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:42:D4:54:C6:6B:67:2B:13:CE:DE:E1:A0:0A:62:A9:2C:26:C1:1C
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/TULUVMZrZysTzt7hoApiqSwmwRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.130.0/24
88.216.132.0/24
88.216.188.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:d1:f1:70:17:0f:ae:3b:9e:08:78:18:95:13:37:af:34:02:
4e:b6:72:0c:af:ac:7a:6f:3d:a2:34:44:4c:2d:4b:0b:dd:be:
cc:5a:f7:9b:aa:2b:6a:77:ec:9d:77:c7:8e:62:a9:ab:d1:eb:
4a:98:d0:23:58:9a:23:5c:64:6c:20:2a:74:52:b2:63:17:30:
fe:a1:9c:9c:ce:03:f9:df:03:7b:97:ba:74:7b:b1:d9:41:21:
99:68:20:29:8b:d5:89:f1:3c:c4:b2:eb:1e:1f:7a:86:e6:73:
86:06:e7:a9:6d:5c:8b:a9:1a:8f:66:c8:71:bc:9e:50:55:26:
ca:7a:ec:98:16:82:96:1e:16:83:62:8b:ee:8b:b1:53:39:18:
7c:63:87:93:24:e6:7d:0c:24:b5:ad:4e:24:d4:15:15:a6:7d:
6e:cc:4d:20:8a:25:27:c4:c2:c9:ce:c8:e7:65:2b:a4:1c:6e:
56:40:c3:37:36:03:a2:97:19:22:78:05:1d:ab:07:5d:c5:74:
6e:2b:d3:a3:8f:2b:00:89:e0:e9:75:d0:2c:a2:c5:d9:d2:93:
79:b8:46:1e:23:d8:f6:9c:dc:67:1f:19:93:25:59:1d:9b:62:
c9:fb:da:b6:08:34:d9:29:9d:31:ee:8d:24:25:57:22:2f:9b:
fa:70:ec:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:17:03 2025 by rpki-client