Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4hOMIcD_Wu5PI68ev45NzfTX-_E.roa
File: 4hOMIcD_Wu5PI68ev45NzfTX-_E.roa (raw, json)
Hash identifier: rEgikJoPApH+kjU6zG6e7BwoM8LVXUNltm8WtKQadE8=
Subject key identifier: E2:13:8C:21:C0:FF:5A:EE:4F:23:AF:1E:BF:8E:4D:CD:F4:D7:FB:F1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01982B70BFC7B3384FE8005223C14103A376
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4hOMIcD_Wu5PI68ev45NzfTX-_E.roa
Signing time: Mon 21 Jul 2025 05:24:25 +0000
ROA not before: Mon 21 Jul 2025 05:24:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44382
IP address blocks: 79.110.50.0/24 maxlen: 24
82.115.211.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
212.115.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2b:70:bf:c7:b3:38:4f:e8:00:52:23:c1:41:03:a3:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 21 05:24:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2138c21c0ff5aee4f23af1ebf8e4dcdf4d7fbf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b0:2f:53:ca:d7:ed:1d:7f:51:3c:60:49:87:
8c:d8:42:fe:fa:b2:69:0e:8b:e3:de:f1:38:e9:ec:
44:15:19:02:69:be:14:8e:3d:a5:de:33:6f:ff:b0:
ef:45:6f:f7:69:55:79:92:31:ce:93:58:4f:35:69:
1b:45:f2:bc:74:d7:8b:f0:ce:e5:cd:91:ab:be:63:
eb:94:20:f2:a1:44:a0:e5:dd:e7:51:95:70:7d:3d:
e8:fd:fc:88:37:84:a3:d0:0e:6e:22:41:e1:29:e2:
02:d5:f1:af:ac:e2:78:22:9a:d9:be:4a:e1:09:df:
51:3e:54:94:bc:83:d3:e6:a8:75:05:4c:14:53:7d:
7f:c9:23:ba:fc:6e:4b:5a:4a:5f:f9:8b:43:af:ac:
e8:72:ed:d2:be:cc:5e:1d:9a:67:b1:16:19:99:b7:
33:4e:b8:b6:3c:ff:6b:5b:ce:b8:fd:a6:ad:e1:d5:
ec:67:5a:93:5c:02:85:2e:44:e9:e6:b6:f0:55:27:
0c:f9:04:ef:3c:c6:cf:8d:6b:45:64:bc:29:72:01:
21:3e:fd:88:4c:bf:b3:ef:b6:f1:21:e1:ab:4d:93:
08:72:16:f4:e9:2c:40:49:eb:cd:32:e0:5b:a3:91:
dc:f3:b7:96:6c:54:c4:f2:8a:e0:4a:d2:ca:78:86:
80:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:13:8C:21:C0:FF:5A:EE:4F:23:AF:1E:BF:8E:4D:CD:F4:D7:FB:F1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4hOMIcD_Wu5PI68ev45NzfTX-_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.50.0/24
82.115.211.0/24
185.222.160.0/24
212.115.41.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:b3:77:91:c9:6b:d4:44:d9:f3:e1:76:0b:78:c8:00:36:19:
6b:e4:3d:f6:5b:e8:6b:05:8e:56:9b:d1:25:45:c6:a5:8e:b9:
44:be:bf:40:43:d2:08:ef:b3:13:da:95:2d:45:42:77:f0:15:
48:43:6a:01:96:b3:b3:c8:04:bf:85:36:5a:5b:c0:cc:ce:32:
01:4e:e2:5a:a9:eb:d5:be:39:9c:db:95:38:10:9e:a8:a8:70:
db:df:9e:c2:23:db:86:78:94:98:a1:3a:f9:66:4e:b3:ac:0c:
09:ab:73:ec:97:53:e2:3b:c9:72:f3:3c:d6:82:ce:f1:aa:7f:
7d:d2:e0:9a:18:c5:c1:12:09:d3:56:fc:d7:33:ed:99:6c:db:
6e:ab:69:6b:cc:02:ba:ff:db:b6:7e:a5:f4:b5:d3:f0:00:5f:
fb:c2:eb:87:63:05:b9:d7:7d:4d:b3:e7:87:8e:4c:89:e8:8c:
31:a3:4f:38:fc:63:f8:e0:1a:60:96:f3:aa:ba:6d:84:d0:c5:
ec:cb:6e:c3:de:31:9f:03:dc:f0:ba:6b:fe:d7:a7:21:84:d7:
59:2d:d6:8c:47:cf:90:7a:17:3b:48:2e:cc:0f:e2:1b:f4:31:
61:1d:e1:bf:2f:9d:26:fe:4d:d5:94:43:a6:ee:60:12:69:a1:
30:56:64:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:44:05 2025 by rpki-client