Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/r4atOptdC6a6FHG1kXkjFGQ5-EY.roa
File: r4atOptdC6a6FHG1kXkjFGQ5-EY.roa (raw, json)
Hash identifier: GbuO6d9xteQLfWqVWtWpVZS3uLnvkgQXk9dxLy6mvT4=
Subject key identifier: AF:86:AD:3A:9B:5D:0B:A6:BA:14:71:B5:91:79:23:14:64:39:F8:46
Certificate issuer: /CN=ef678469574acc03d782e63281ff44faaab3f847
Certificate serial: 0197D4E711E08FC62E9BD8A6C69721373545
Authority key identifier: EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/r4atOptdC6a6FHG1kXkjFGQ5-EY.roa
Signing time: Fri 04 Jul 2025 10:06:42 +0000
ROA not before: Fri 04 Jul 2025 10:06:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209231
IP address blocks: 2.56.140.0/22 maxlen: 24
86.110.204.0/22 maxlen: 24
185.161.236.0/22 maxlen: 24
2a09:c540::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d4:e7:11:e0:8f:c6:2e:9b:d8:a6:c6:97:21:37:35:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef678469574acc03d782e63281ff44faaab3f847
Validity
Not Before: Jul 4 10:06:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af86ad3a9b5d0ba6ba1471b5917923146439f846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ce:f4:a3:82:52:2e:1f:8c:e7:0c:9e:73:43:
d0:68:c6:04:87:7a:6f:d0:02:1c:e7:3c:c3:a8:cf:
a3:52:52:13:01:36:d5:aa:21:d5:74:08:f1:0a:27:
b3:cd:06:1c:93:03:08:da:63:21:78:bd:01:31:29:
3c:3c:21:d7:c1:26:a4:98:ef:7f:2e:3b:49:ea:08:
b2:24:6d:4a:40:89:17:84:66:1e:4d:b2:43:d2:fd:
23:eb:61:9e:0a:aa:24:ed:93:26:51:36:6e:4f:7b:
a9:91:ae:3d:00:14:10:ef:c1:e6:9b:8a:43:79:ce:
28:d6:50:8b:c5:03:ab:2e:e4:26:3b:64:e2:10:d4:
53:e1:da:d3:d0:2e:84:3a:d2:9f:22:54:6f:cc:3a:
1d:e7:d3:0a:b9:0f:29:00:69:71:d6:1a:b6:3a:50:
03:02:6d:62:e7:fe:0d:e2:c9:d8:94:7c:f0:3a:e7:
3b:79:15:2a:52:54:58:27:2f:8b:3e:14:a3:35:1f:
9c:e5:b8:c3:3a:90:39:e6:15:dc:96:7e:e7:80:45:
c1:07:99:64:7e:6b:4b:85:30:82:b6:17:45:b9:d9:
4a:26:8f:dd:99:e3:fc:46:f9:02:a4:d2:2c:ec:5e:
6a:ce:7b:fe:8e:7e:a8:d1:0f:e8:f2:4f:b3:28:07:
bd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:86:AD:3A:9B:5D:0B:A6:BA:14:71:B5:91:79:23:14:64:39:F8:46
X509v3 Authority Key Identifier:
keyid:EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/r4atOptdC6a6FHG1kXkjFGQ5-EY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.140.0/22
86.110.204.0/22
185.161.236.0/22
IPv6:
2a09:c540::/32
Signature Algorithm: sha256WithRSAEncryption
22:5a:fa:9b:8c:c1:84:f5:a1:e7:6c:00:ef:4b:a8:34:11:b7:
9f:1c:0f:92:b7:0a:66:9d:21:1e:4a:c2:a5:41:27:89:01:bb:
b2:5a:f9:a4:70:51:d7:a3:6b:bc:6c:45:6a:d5:e1:a2:64:da:
ac:17:27:c4:21:be:64:bc:eb:db:eb:2e:d6:06:72:c3:24:3a:
b7:1c:2c:7e:63:ab:11:51:fc:d3:66:a8:6d:ff:13:b6:e9:b8:
c2:e6:a1:08:a8:c3:37:b0:8a:f5:0c:37:af:02:35:bb:77:fb:
57:3a:4b:b9:a5:fc:f4:90:30:19:75:93:89:3a:7f:76:84:40:
74:7d:f7:e2:5f:d4:c4:62:79:0b:ee:be:e9:81:2a:2f:49:bb:
ed:5a:bb:66:d7:68:9b:84:85:a7:53:14:99:4a:32:29:c0:62:
1e:48:52:a4:cf:fe:8b:80:3e:8a:96:d5:5c:4a:33:7c:a0:fb:
73:2f:74:c1:c9:a2:4a:32:93:85:cb:62:66:0e:23:c4:b0:27:
66:4b:60:74:66:83:61:c2:41:fe:8d:d0:e7:ab:4d:d3:7f:ea:
86:6a:b8:5a:5a:1f:c6:97:39:4f:c6:e0:23:95:98:66:5f:ad:
7b:5e:f7:c3:95:63:5a:df:eb:09:53:79:c6:94:fa:b4:31:30:
ae:a9:1f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:06:51 2025 by rpki-client