Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/TrNpgEA5Yo4G8pYTiDEEM8RTN1Q.roa
File: TrNpgEA5Yo4G8pYTiDEEM8RTN1Q.roa (raw, json)
Hash identifier: B5zXgfACIl25xPnTSaAHMdsXteG31N7jakFIWo/jhH4=
Subject key identifier: 4E:B3:69:80:40:39:62:8E:06:F2:96:13:88:31:04:33:C4:53:37:54
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 019A2A3A6BEB6F73894F4A0817947B658E9A
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/TrNpgEA5Yo4G8pYTiDEEM8RTN1Q.roa
Signing time: Tue 28 Oct 2025 09:51:03 +0000
ROA not before: Tue 28 Oct 2025 09:51:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6736
IP address blocks: 94.184.0.0/16 maxlen: 24
185.62.232.0/22 maxlen: 22
193.104.212.0/24 maxlen: 24
194.225.0.0/16 maxlen: 24
2001:678:b0::/46 maxlen: 48
2001:14e8::/32 maxlen: 48
2001:14e8::/48 maxlen: 48
2001:14e8:0:405::405/128 maxlen: 128
2001:14e8:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:3a:6b:eb:6f:73:89:4f:4a:08:17:94:7b:65:8e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Oct 28 09:51:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4eb369804039628e06f2961388310433c4533754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5c:e4:99:f3:dc:fe:73:93:92:83:bb:7c:89:
38:6d:57:bd:fb:6e:b1:c8:41:56:66:e4:97:5b:e8:
30:05:e6:5c:08:f0:a1:2d:04:ae:e5:ea:7f:4b:f7:
9e:17:bd:3b:ab:c7:ff:e2:40:a5:dd:f4:0b:9c:44:
0c:b0:bb:37:94:8c:80:47:af:ea:55:29:38:b5:3d:
99:94:6c:8d:9d:ec:7c:34:ad:9c:c6:b4:e9:c1:8e:
d8:ec:a7:00:36:9b:84:6a:0c:2a:a6:41:b2:0d:91:
f7:a5:d9:0f:5c:68:c2:4d:69:ec:c4:30:80:fe:c6:
06:19:a9:c7:8b:59:b0:ea:15:ce:e4:69:59:95:b6:
ca:e3:b4:4c:de:20:41:30:21:0c:17:8a:65:ee:d5:
d3:86:fb:9f:49:0b:22:18:29:23:7c:66:a6:2f:01:
ce:dc:e8:24:17:b7:6a:36:54:c3:00:17:bc:f2:b8:
4d:6f:54:12:47:34:04:c1:30:6a:92:00:1c:79:cb:
73:2a:f7:db:ee:ce:5d:53:fd:ca:4e:24:a2:be:56:
bb:d5:cd:22:be:85:51:c5:f2:14:6f:f3:a3:d7:78:
49:bb:31:46:2b:c4:27:1e:b9:1b:2f:f0:b5:64:8f:
9a:02:c6:39:9f:21:b5:34:d5:6a:0b:3c:4d:dd:f1:
67:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B3:69:80:40:39:62:8E:06:F2:96:13:88:31:04:33:C4:53:37:54
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/TrNpgEA5Yo4G8pYTiDEEM8RTN1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.0.0/16
185.62.232.0/22
193.104.212.0/24
194.225.0.0/16
IPv6:
2001:678:b0::/46
2001:14e8::/32
Signature Algorithm: sha256WithRSAEncryption
09:20:f0:41:15:59:a5:af:01:71:84:02:64:fa:eb:1e:6b:fc:
fa:ae:61:da:20:0f:47:11:d0:33:7c:56:cb:da:7e:d4:1b:40:
28:a6:31:32:47:b1:ee:48:e8:12:45:7b:c4:88:2f:10:1a:1b:
30:83:0f:97:9f:70:7f:af:28:83:94:f6:ae:f6:9f:96:ff:56:
e4:5d:15:f5:96:22:e2:46:15:be:86:0c:1c:7e:10:d7:f6:68:
10:24:72:f4:e4:94:e6:da:bd:7d:1c:e6:8b:4c:25:0e:87:96:
e7:84:bc:17:a7:72:3a:24:5e:af:7b:97:f0:ab:4e:7c:b4:ab:
81:91:ea:43:30:33:28:18:44:c5:de:61:32:bc:e1:fa:e2:30:
00:5b:06:d7:6b:05:94:b4:b7:5c:fc:83:db:0b:d4:d6:a1:32:
74:42:f2:f7:ef:21:a2:97:e2:a6:94:2c:71:8a:5a:97:21:34:
05:76:02:ef:e5:4d:39:96:05:c7:72:ed:c6:ac:03:e7:36:68:
2b:56:12:be:5d:f6:8d:1f:f1:d2:ca:ff:2e:58:6c:53:61:ef:
f4:ab:34:46:d4:f0:4a:ac:0c:85:3f:da:bf:5d:c3:98:89:42:
2b:b3:77:7b:38:4c:27:4e:df:0d:4f:d4:b7:a2:3a:17:3a:6d:
f0:dd:9a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:38:23 2025 by rpki-client