Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/tnv3-diJkQUdJyXR_flzLd_HA5Y.roa
File: tnv3-diJkQUdJyXR_flzLd_HA5Y.roa (raw, json)
Hash identifier: Uf/8gng4o6YbR3VFkmo1hJqLTfLAtxb6YspXrR0Enp4=
Subject key identifier: B6:7B:F7:F9:D8:89:91:05:1D:27:25:D1:FD:F9:73:2D:DF:C7:03:96
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 019A15EFB8C30F3467D6CF0A3AF758885A3F
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/tnv3-diJkQUdJyXR_flzLd_HA5Y.roa
Signing time: Fri 24 Oct 2025 11:17:03 +0000
ROA not before: Fri 24 Oct 2025 11:17:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 185.243.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 23:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:ef:b8:c3:0f:34:67:d6:cf:0a:3a:f7:58:88:5a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Oct 24 11:17:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b67bf7f9d88991051d2725d1fdf9732ddfc70396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5c:aa:9a:a5:04:ee:16:91:00:a5:2b:f7:95:
f9:68:6a:2a:8d:a6:18:60:7a:4b:4c:d1:fc:f9:74:
b6:b0:77:4f:44:f4:d7:7e:8a:c1:c6:8e:a8:0c:14:
3d:bd:b3:70:3d:96:d5:5a:bd:f5:e8:f4:aa:ff:4d:
40:ea:39:a3:8b:ec:1e:3d:d8:f7:eb:77:6b:ff:ca:
15:7a:4a:e7:87:5d:03:59:fd:06:ec:13:82:bd:e6:
42:0d:17:8b:e3:94:b8:2b:7e:04:d3:a8:8b:67:62:
43:d3:80:e8:8b:02:7e:6a:a6:fd:f8:52:d4:7b:28:
80:86:46:11:fc:fc:56:74:8d:fe:ef:73:b0:c1:4a:
1b:9f:4a:8c:76:21:ce:89:61:78:a8:6e:db:cd:e3:
0c:f9:d6:b6:ec:fa:16:f9:89:d6:6a:e9:f1:c6:2e:
03:3c:f8:32:39:b7:e0:9f:28:b2:13:d8:b5:6b:c7:
18:1a:1a:15:d5:c5:d4:88:1f:47:5d:07:9f:fe:38:
05:a4:3a:4c:0c:80:ed:5a:d5:bf:06:62:a2:fa:57:
8a:95:49:c9:5f:f9:cf:99:23:30:b4:b3:1d:3a:8c:
31:c5:32:59:8a:af:37:40:82:d9:eb:dc:a2:f9:cd:
27:8b:45:77:d6:76:1f:9c:55:f3:22:f1:10:76:31:
0f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7B:F7:F9:D8:89:91:05:1D:27:25:D1:FD:F9:73:2D:DF:C7:03:96
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/tnv3-diJkQUdJyXR_flzLd_HA5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.155.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:98:f6:9a:4e:e5:d2:0b:88:a5:98:a7:70:25:aa:6e:f3:6d:
0d:44:3c:94:f4:9d:7f:7a:74:f9:d8:54:02:19:22:43:b1:f4:
36:cc:ac:03:1c:8d:de:7a:6e:ab:94:2c:e5:89:2e:ac:84:27:
2b:6a:aa:76:42:cc:5f:08:5e:e9:e5:e0:e0:ee:6a:0e:19:8a:
ae:98:d0:c4:55:60:1b:2e:6c:35:da:12:1e:52:20:1a:04:bc:
00:73:7f:46:ce:12:4f:23:3b:ac:f6:87:f3:b0:94:de:c6:95:
fc:ea:bf:c6:0e:17:ce:f5:f4:a7:bd:cf:c3:35:9c:41:47:01:
d4:16:54:a1:88:45:a4:2e:28:25:46:6e:25:34:75:56:d5:ed:
98:1b:7b:2a:62:68:8d:8b:16:2e:2e:dd:ee:70:da:38:ec:0f:
71:cd:e1:46:72:27:6d:1c:c8:8a:53:26:68:6b:2d:75:66:e1:
3e:d6:cf:79:ba:4a:9f:22:95:59:61:dc:06:6b:a9:08:29:b3:
c7:83:3d:34:c7:cf:e0:f5:96:9f:b0:ad:37:77:9c:70:05:e6:
07:5d:49:85:46:51:de:47:f8:cd:66:7b:43:18:87:fe:b8:99:
5f:0f:09:64:ad:17:78:5d:ae:cb:bf:cc:12:9c:a4:8b:26:6f:
41:1b:39:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:01:15 2025 by rpki-client