Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/Tg5Eip16OiivA4_zKye1REwFA00.roa
File: Tg5Eip16OiivA4_zKye1REwFA00.roa (raw, json)
Hash identifier: Gd1niBs91vG5rW4xFPormFpiCgQUUugy0jDW22UcbYo=
Subject key identifier: 4E:0E:44:8A:9D:7A:3A:28:AF:03:8F:F3:2B:27:B5:44:4C:05:03:4D
Certificate issuer: /CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Certificate serial: 0197368681B9A28308F54E4039AE71469918
Authority key identifier: 06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/Tg5Eip16OiivA4_zKye1REwFA00.roa
Signing time: Tue 03 Jun 2025 16:01:14 +0000
ROA not before: Tue 03 Jun 2025 16:01:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12837
IP address blocks: 31.24.208.0/21 maxlen: 24
31.24.214.0/24 maxlen: 24
31.24.215.0/24 maxlen: 24
91.196.196.0/22 maxlen: 24
91.196.196.0/24 maxlen: 24
91.196.197.0/24 maxlen: 24
91.196.198.0/24 maxlen: 24
91.196.199.0/24 maxlen: 24
2a03:6306::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:36:86:81:b9:a2:83:08:f5:4e:40:39:ae:71:46:99:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Validity
Not Before: Jun 3 16:01:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e0e448a9d7a3a28af038ff32b27b5444c05034d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bd:8c:73:ec:5b:d3:e9:7d:b4:df:e3:ee:5d:
62:f0:95:61:45:ee:de:5e:2f:af:04:e8:d8:80:02:
74:d5:78:10:58:b4:34:8c:de:7b:f6:38:49:ed:7b:
21:80:5a:6d:0c:79:c7:f9:01:86:b1:d9:57:0a:14:
38:af:b9:97:83:3a:59:ea:01:0c:99:cc:e3:ed:5b:
13:97:eb:99:e1:c0:0f:3a:dd:40:fc:d3:ed:6d:29:
f8:e0:9b:88:45:2e:1b:5b:72:b8:25:dd:85:9f:e2:
63:25:2a:79:6b:cb:6d:81:9b:56:40:5a:4e:d7:2c:
86:4d:d0:24:08:86:d0:7d:f8:87:0b:d9:61:1f:8d:
08:52:f7:54:74:14:3f:85:67:ba:db:7a:32:7a:76:
a9:1a:96:57:60:9b:e4:f6:5d:a3:8b:3d:3f:fb:e1:
6c:71:85:de:97:82:87:98:f4:e9:8c:15:d5:ac:24:
da:34:59:fe:09:49:10:81:38:1f:08:1e:36:d7:64:
53:4e:0f:46:f6:85:29:da:65:c4:85:2e:09:7e:bf:
f5:fb:5d:e6:c2:d0:1d:55:84:37:9f:90:20:72:58:
6e:c5:81:13:25:84:24:09:b8:4b:41:82:4d:53:13:
2c:70:f8:67:1b:ec:72:01:a0:e1:be:6f:fb:00:5e:
cf:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0E:44:8A:9D:7A:3A:28:AF:03:8F:F3:2B:27:B5:44:4C:05:03:4D
X509v3 Authority Key Identifier:
keyid:06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/Tg5Eip16OiivA4_zKye1REwFA00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.208.0/21
91.196.196.0/22
IPv6:
2a03:6306::/32
Signature Algorithm: sha256WithRSAEncryption
25:1a:30:ad:1c:a4:72:8e:0a:a3:18:c5:1b:58:83:10:20:87:
be:2e:cc:4a:50:9c:fb:2f:ed:84:db:b1:a3:08:90:c2:ae:08:
25:92:4f:c7:56:89:56:7e:fd:e0:20:ea:ce:4c:58:77:b5:17:
e8:ec:bd:e5:9d:4f:49:1f:b0:79:96:b5:42:0f:b0:ac:bf:20:
b8:cb:ee:d0:78:20:b9:77:a8:07:64:bd:63:8f:74:59:f8:00:
1a:31:0a:29:79:46:7c:64:df:a0:db:9e:b4:2c:a5:2f:2a:77:
53:27:f1:0e:88:f7:10:e4:2b:44:6a:bd:c9:30:78:5c:37:6d:
33:8d:b3:55:86:93:45:a9:72:06:26:04:44:eb:83:f7:f9:34:
19:d1:08:52:04:e0:28:39:db:4c:ce:f7:bc:9d:f8:ce:1a:54:
ba:8c:f8:d4:4a:44:af:44:f8:03:67:fe:ca:c0:fb:0e:c2:3b:
2a:cc:eb:1d:0b:98:04:d5:8c:16:93:70:53:00:6d:98:91:0a:
b3:9a:e8:fb:c6:85:97:e9:b0:2a:be:11:66:9b:84:ff:50:84:
0e:de:c7:2a:2f:3d:4e:e5:f5:93:78:5a:c8:25:9a:34:a6:c6:
f0:4d:2d:56:df:14:dd:7e:c8:65:ae:2b:2c:79:e0:a1:da:1d:
4d:2b:bc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:30:58 2025 by rpki-client