Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/4ZMQK1yo85SqwRnmbMvJmHJ6l9k.roa
File: 4ZMQK1yo85SqwRnmbMvJmHJ6l9k.roa (raw, json)
Hash identifier: veZR3Vie7rvoqXPdy8nRQwMawGlHAqV5ht5SBBm2uZs=
Subject key identifier: E1:93:10:2B:5C:A8:F3:94:AA:C1:19:E6:6C:CB:C9:98:72:7A:97:D9
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 0197E1DB1BD732F8C380E9C7619E72863706
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/4ZMQK1yo85SqwRnmbMvJmHJ6l9k.roa
Signing time: Sun 06 Jul 2025 22:28:42 +0000
ROA not before: Sun 06 Jul 2025 22:28:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208413
IP address blocks: 45.138.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e1:db:1b:d7:32:f8:c3:80:e9:c7:61:9e:72:86:37:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Jul 6 22:28:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e193102b5ca8f394aac119e66ccbc998727a97d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1b:f4:5a:fb:ad:1b:64:39:f3:5a:70:1f:44:
0f:52:cc:ac:4d:be:8a:d8:3b:13:c3:7f:10:ac:42:
d9:28:1e:c6:c6:a1:cd:b0:e6:3d:1f:47:a5:3d:30:
18:e8:3b:de:4b:f0:06:ae:46:62:06:07:55:23:38:
8a:d4:c7:f8:05:c5:dc:04:78:1b:fb:7d:de:11:b9:
69:56:22:83:bb:fa:e7:30:88:37:58:e2:f7:5a:b1:
e6:35:17:c4:b4:29:9b:70:4a:aa:9a:07:6b:a0:c8:
3d:c9:18:3b:dc:47:f3:d0:a9:46:dd:9c:bb:dd:d9:
7d:5d:88:f8:55:93:e5:40:b8:df:96:13:d2:72:a0:
3d:43:f9:b4:1c:29:ea:ed:13:85:9b:a5:ff:41:b0:
bd:f4:b7:c5:1f:7e:9b:45:27:97:b4:4f:13:c7:53:
d9:77:1d:85:a0:00:48:1f:e0:9b:5b:ae:59:bf:5c:
37:f9:56:31:25:c0:08:85:3e:98:4e:f7:b7:2d:df:
67:40:b8:e7:08:37:13:fa:44:7e:f1:2f:88:d0:c1:
e4:95:c9:6e:b5:5e:e6:b5:81:ee:61:40:22:9a:2c:
f3:d4:fc:e7:66:80:e4:fa:06:1a:7e:0d:0d:c5:15:
41:0a:e2:80:79:23:dc:55:ff:b6:7f:59:f8:c9:3a:
73:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:93:10:2B:5C:A8:F3:94:AA:C1:19:E6:6C:CB:C9:98:72:7A:97:D9
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/4ZMQK1yo85SqwRnmbMvJmHJ6l9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.75.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:0f:23:df:e1:b3:af:7b:5c:ab:01:1d:96:de:be:d9:b3:3b:
97:e6:72:2f:9d:d3:57:ee:e4:89:79:74:b5:6c:56:9f:80:b6:
75:db:b0:24:9e:43:55:54:cb:bf:13:0d:b5:e5:7f:8b:c8:2a:
e3:1e:e7:11:b0:b7:81:ef:49:04:8f:e0:80:e5:b4:be:8e:83:
d6:3e:cf:13:f0:91:d1:7a:41:ac:f3:30:5f:6d:5d:fc:c2:b6:
f4:be:a8:36:06:4e:83:d8:af:72:48:82:0e:05:33:f7:18:20:
2f:d3:73:81:04:29:5b:f4:32:4f:22:f5:45:81:55:9f:e0:12:
90:21:9b:58:43:23:bc:00:f4:c6:bb:20:ba:87:72:44:6f:d6:
12:64:62:43:33:52:7d:36:d9:83:49:70:96:ca:f9:22:fe:e5:
58:ed:3c:80:26:b4:ba:db:6c:02:74:5a:43:c7:0a:ad:e2:46:
6b:87:73:60:33:57:8e:41:23:8b:69:cd:28:c9:05:33:ce:8b:
f1:b5:f4:b1:7e:97:61:98:57:38:ff:a4:27:7a:4c:90:07:bb:
c8:3f:73:ea:63:f6:c3:ce:97:b6:9f:f6:35:29:03:b1:a7:0d:
db:64:c2:9e:9e:a1:23:58:7e:29:c7:23:87:7c:db:1b:04:13:
5c:b1:fb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:20:49 2025 by rpki-client