Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/4a-oSYp3aib3yKMPfla0gmzArXQ.roa
File: 4a-oSYp3aib3yKMPfla0gmzArXQ.roa (raw, json)
Hash identifier: rpjplvXodVM2Oz/zMSiwY0kn/WwkyWdvI5KreKpNjp4=
Subject key identifier: E1:AF:A8:49:8A:77:6A:26:F7:C8:A3:0F:7E:56:B4:82:6C:C0:AD:74
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 01983E1D51520EC5C70A9FA3B811F6763999
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/4a-oSYp3aib3yKMPfla0gmzArXQ.roa
Signing time: Thu 24 Jul 2025 20:26:05 +0000
ROA not before: Thu 24 Jul 2025 20:26:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208185
IP address blocks: 89.43.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3e:1d:51:52:0e:c5:c7:0a:9f:a3:b8:11:f6:76:39:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jul 24 20:26:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1afa8498a776a26f7c8a30f7e56b4826cc0ad74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9f:c9:86:bd:62:a8:54:54:70:0b:e2:ee:1d:
e6:77:21:06:98:3a:76:a5:1d:64:dc:05:b4:ec:8b:
38:fd:df:1e:e3:27:84:f6:56:ef:41:c8:36:48:88:
f6:6c:8b:19:d5:bd:ce:98:93:86:51:5b:98:68:00:
c0:19:7f:18:01:3b:7d:ab:1a:7a:f1:fc:53:ba:18:
fe:6f:c6:2e:9d:d8:12:59:5d:63:ed:1f:19:73:5e:
6f:e4:bf:4d:74:94:3d:73:86:39:8d:f0:9f:71:2a:
f0:06:3c:41:31:20:d0:fd:02:98:84:65:a2:c6:9e:
72:c6:7b:43:c3:f0:a1:10:2b:82:67:f2:f0:5d:a7:
39:e5:55:9e:e6:2f:1a:bf:9d:95:b1:55:6b:42:39:
d4:27:82:14:f3:6d:f9:e2:41:9d:d6:cc:90:aa:6a:
fb:cd:3e:ce:8a:a0:53:f7:ee:56:f7:75:ea:d4:ba:
b4:21:9f:a2:22:a7:9b:2f:41:75:63:7f:3c:23:54:
05:60:bb:9b:57:7a:7f:4b:f0:0a:3f:58:e4:c4:70:
19:d6:67:3d:f6:be:8d:b1:fb:a2:43:3f:7f:cb:67:
e0:39:33:75:04:52:e8:d1:64:0e:7b:46:03:9f:ff:
a5:75:61:bf:d8:22:72:36:65:66:47:55:57:a9:0e:
78:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AF:A8:49:8A:77:6A:26:F7:C8:A3:0F:7E:56:B4:82:6C:C0:AD:74
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/4a-oSYp3aib3yKMPfla0gmzArXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.43.46.0/24
Signature Algorithm: sha256WithRSAEncryption
54:28:ac:e5:0a:c2:79:7c:8d:78:61:45:67:6e:61:1a:e9:f5:
36:19:c7:4a:b2:30:74:fe:3d:4c:b2:6a:7a:32:e9:bb:cd:bc:
5f:4f:92:bb:4b:fc:13:ba:51:b2:8a:49:53:e6:35:4a:ce:00:
58:33:97:6c:6c:15:e9:12:4c:23:58:d0:d3:03:29:ca:85:b0:
b0:5c:c7:2a:b8:ee:54:c5:20:f0:80:bb:08:ed:16:8f:db:ba:
e8:da:46:af:91:f5:4b:29:88:ea:db:04:09:37:a0:bd:83:16:
3b:67:56:47:7e:ad:cb:de:df:1a:75:09:0f:a0:bb:28:d2:87:
5e:df:88:51:46:b2:80:8b:c0:2b:b5:23:7a:cd:9f:68:18:86:
a3:d7:cd:8c:31:ba:f1:13:96:0e:ac:e5:c7:e4:31:16:31:d7:
64:18:01:5d:17:b8:1c:e9:32:da:07:87:9f:98:3c:19:57:2b:
d7:d7:02:01:04:ef:a8:14:90:34:82:be:83:14:d2:c3:7e:e7:
b7:25:29:6d:85:5c:42:f0:a6:44:ef:5f:ce:e9:d9:83:ed:03:
21:3a:61:67:b9:66:8c:3f:a8:46:30:a5:2d:d4:d7:7b:f7:91:
9d:b7:e7:13:47:0d:4b:f7:4f:64:cb:6a:7d:5e:86:a8:24:9b:
73:ff:20:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 05:54:21 2025 by rpki-client