Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/TFo1gtP034QimxoONKR9cO3Rea0.roa
File: TFo1gtP034QimxoONKR9cO3Rea0.roa (raw, json)
Hash identifier: ZbKyuz+8pa9I1RSPWJwZNU5a7S31Y7QOYHmJtNh9TXA=
Subject key identifier: 4C:5A:35:82:D3:F4:DF:84:22:9B:1A:0E:34:A4:7D:70:ED:D1:79:AD
Certificate issuer: /CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Certificate serial: 019A30D391F037D861B1DF846560A65B4E31
Authority key identifier: 52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/TFo1gtP034QimxoONKR9cO3Rea0.roa
Signing time: Wed 29 Oct 2025 16:36:03 +0000
ROA not before: Wed 29 Oct 2025 16:36:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29605
IP address blocks: 212.67.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:d3:91:f0:37:d8:61:b1:df:84:65:60:a6:5b:4e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Validity
Not Before: Oct 29 16:36:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c5a3582d3f4df84229b1a0e34a47d70edd179ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8d:f3:d6:73:99:07:0c:7b:f6:32:d9:08:7e:
4b:07:fa:51:f5:2f:75:88:2b:a0:9f:7d:a9:79:9c:
eb:51:be:5b:66:b1:30:af:5f:97:54:9d:da:43:2a:
8a:06:04:82:8d:a7:7b:10:ec:32:65:4a:0f:e6:71:
2a:90:77:45:a8:77:6a:81:f8:5c:1a:23:59:1e:02:
c5:21:42:9a:1e:d8:15:eb:5b:89:c2:93:33:1c:94:
d8:70:1e:21:a4:cb:4c:3c:16:1a:29:1d:a2:ff:c1:
83:3b:a4:f0:6d:5d:68:d9:87:5b:08:9a:7a:8e:fe:
b2:eb:22:43:91:26:25:4d:dd:46:70:70:d2:1f:88:
1f:2b:14:bf:94:ca:b5:4a:7a:f6:cc:d1:9c:a9:f2:
1d:86:b8:2c:eb:b6:30:e2:b9:c7:7b:54:c9:e2:b9:
fc:02:c5:d0:99:ec:9e:a7:4e:f2:14:3d:f4:24:cf:
eb:3d:ad:1e:43:96:35:5c:db:58:ea:b0:56:71:1d:
05:95:fb:57:21:48:88:7e:4d:c3:0d:84:e6:f1:1d:
3c:df:1e:94:3d:93:5a:88:59:94:bd:3c:bf:c1:7f:
2a:3b:4d:ed:ad:e0:9e:10:6c:b7:02:33:a6:ee:a1:
0d:ab:de:e0:ff:5f:b7:74:22:5d:af:24:e0:82:9a:
47:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5A:35:82:D3:F4:DF:84:22:9B:1A:0E:34:A4:7D:70:ED:D1:79:AD
X509v3 Authority Key Identifier:
keyid:52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/TFo1gtP034QimxoONKR9cO3Rea0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.67.39.0/24
Signature Algorithm: sha256WithRSAEncryption
65:d3:3b:2b:2c:78:9a:c3:10:45:ec:db:a1:87:79:df:d4:01:
38:9d:83:47:59:8c:84:49:0c:09:2d:0d:9a:da:e2:47:7b:2d:
e6:b2:27:bd:ec:2e:83:a2:93:2b:d4:39:de:c8:bb:58:23:fb:
81:b9:d2:16:b4:38:09:65:62:b2:16:e9:86:6a:9c:c5:75:50:
a5:57:ef:0b:f1:c0:f1:cf:8f:d4:fc:66:f4:9b:dd:67:d8:b1:
26:11:a7:a7:40:f0:d3:aa:fc:82:7e:23:2c:c3:d6:cb:11:a1:
4f:16:48:e0:c2:9e:e8:ba:ca:35:a7:e7:4a:39:b3:81:4b:b1:
5f:2f:43:1b:a3:32:49:63:af:cd:91:91:38:2f:5d:1b:31:f2:
84:97:3c:69:74:c2:09:b3:52:c3:be:7f:e9:40:85:28:11:c6:
75:9c:41:dd:d1:25:3f:ea:9d:2c:1d:7e:e1:63:a7:dc:f9:67:
47:6a:cc:99:80:34:dc:7c:2b:18:e0:4c:8d:5c:c4:02:f4:0b:
53:5b:5f:83:39:f5:9f:42:c0:a8:1f:c4:70:d1:c6:60:b2:76:
9f:e9:6d:25:61:7b:1f:27:fa:5f:5c:84:1b:34:5f:58:d8:66:
c6:a6:33:ca:3d:d5:69:0e:1d:72:75:f5:bd:2f:ef:db:3e:67:
69:c8:ba:e3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZow05HwN9hhsd+EZWCmW04xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMzBiNjVkNjExNmQ0YjYwZDM2ZmRmN2I2YzZkNWU1Yjk1
NDYzOWUwHhcNMjUxMDI5MTYzNjAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzVhMzU4MmQzZjRkZjg0MjI5YjFhMGUzNGE0N2Q3MGVkZDE3OWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0I3z1nOZBwx79jLZCH5LB/pR9S91
iCugn32peZzrUb5bZrEwr1+XVJ3aQyqKBgSCjad7EOwyZUoP5nEqkHdFqHdqgfhc
GiNZHgLFIUKaHtgV61uJwpMzHJTYcB4hpMtMPBYaKR2i/8GDO6TwbV1o2YdbCJp6
jv6y6yJDkSYlTd1GcHDSH4gfKxS/lMq1Snr2zNGcqfIdhrgs67Yw4rnHe1TJ4rn8
AsXQmeyep07yFD30JM/rPa0eQ5Y1XNtY6rBWcR0FlftXIUiIfk3DDYTm8R083x6U
PZNaiFmUvTy/wX8qO03treCeEGy3AjOm7qENq97g/1+3dCJdryTggppH6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFExaNYLT9N+EIpsaDjSkfXDt0XmtMB8GA1UdIwQY
MBaAFFIwtl1hFtS2DTb997bG1eW5VGOeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWpDMlhXRVcxTFlOTnYzM3RzYlY1YmxVWTU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9mYWRmZjYtNWNjMC00Njk0LTljNjIt
MTM1OGMyYjVkNTQxLzEvVEZvMWd0UDAzNFFpbXhvT05LUjljTzNSZWEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9mYWRmZjYtNWNjMC00Njk0LTljNjItMTM1OGMyYjVkNTQx
LzEvVWpDMlhXRVcxTFlOTnYzM3RzYlY1YmxVWTU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1EMnMA0G
CSqGSIb3DQEBCwUAA4IBAQBl0zsrLHiawxBF7Nuhh3nf1AE4nYNHWYyESQwJLQ2a
2uJHey3msie97C6DopMr1DneyLtYI/uBudIWtDgJZWKyFumGapzFdVClV+8L8cDx
z4/U/Gb0m91n2LEmEaenQPDTqvyCfiMsw9bLEaFPFkjgwp7ouso1p+dKObOBS7Ff
L0MbozJJY6/NkZE4L10bMfKElzxpdMIJs1LDvn/pQIUoEcZ1nEHd0SU/6p0sHX7h
Y6fc+WdHasyZgDTcfCsY4EyNXMQC9AtTW1+DOfWfQsCoH8Rw0cZgsnaf6W0lYXsf
J/pfXIQbNF9Y2GbGpjPKPdVpDh1ydfW9L+/bPmdpyLrj
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:37:05 2025 by rpki-client