Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4M3KSX7S0hFAtbUDOJxjTf3hn3s.roa
File: 4M3KSX7S0hFAtbUDOJxjTf3hn3s.roa (raw, json)
Hash identifier: 9EaNF3VLTv7HpLhXoc2Bb2Qi5bvhu8v4jxAAe4nac7M=
Subject key identifier: E0:CD:CA:49:7E:D2:D2:11:40:B5:B5:03:38:9C:63:4D:FD:E1:9F:7B
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01982C9C1EE7150250B0519DA4ED46BAF10D
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4M3KSX7S0hFAtbUDOJxjTf3hn3s.roa
Signing time: Mon 21 Jul 2025 10:51:25 +0000
ROA not before: Mon 21 Jul 2025 10:51:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 206.245.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 14:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2c:9c:1e:e7:15:02:50:b0:51:9d:a4:ed:46:ba:f1:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 21 10:51:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0cdca497ed2d21140b5b503389c634dfde19f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:88:b7:da:19:e6:a2:75:1a:e5:bc:33:9b:40:
3b:48:50:f9:bf:09:11:64:67:e0:ce:a0:7b:71:41:
de:db:90:60:07:45:0e:ff:8b:ed:30:35:c6:ed:1d:
db:f4:fc:68:d2:fe:e0:9a:47:30:a9:62:5e:ca:15:
64:b7:ef:78:b4:77:34:ba:3c:42:e8:18:57:a2:17:
31:e5:32:29:81:70:2b:ca:61:7d:df:68:db:33:67:
84:00:c4:ed:54:96:33:10:61:77:72:e3:8b:58:61:
43:b2:3a:8e:71:9e:51:c0:6a:fc:08:c0:8d:fe:28:
a1:e3:6e:ca:84:52:5a:5c:da:06:57:1f:59:a5:53:
bb:77:a0:9f:69:1d:5a:a6:6e:ff:42:f9:84:de:50:
0c:ec:b2:7b:32:4a:60:e9:56:58:b5:d9:6b:84:17:
26:39:d6:f9:41:fa:03:2f:25:43:cd:04:c8:6a:08:
79:06:56:a1:2b:79:e5:60:65:d0:3d:31:5b:81:fe:
a5:b4:69:0d:f0:77:e0:2f:4c:b4:66:e1:2e:0e:6d:
be:ec:1d:68:d2:be:e8:21:7f:84:df:33:94:24:30:
84:1a:d1:d7:45:ad:a0:07:5c:25:0a:d6:04:92:3d:
68:f6:b6:72:2c:47:0a:bb:74:18:23:3c:db:49:f6:
fc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CD:CA:49:7E:D2:D2:11:40:B5:B5:03:38:9C:63:4D:FD:E1:9F:7B
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4M3KSX7S0hFAtbUDOJxjTf3hn3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.245.158.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:f6:94:ce:b4:5a:3e:c6:93:32:89:b7:ff:bf:f4:48:63:01:
28:86:7d:9c:ec:6b:db:1f:be:e7:b0:9a:22:1e:4a:a1:a6:a2:
b6:06:91:dd:3c:66:17:a8:ab:ce:c8:bf:47:f9:e2:ec:1c:aa:
96:c4:cd:78:c4:3a:c5:a0:68:a6:1a:db:c1:22:33:03:06:b1:
97:ba:fc:35:4c:b9:6d:ab:09:7f:04:da:6d:89:e8:79:f3:3d:
74:75:f7:ea:9f:0d:01:de:ec:84:06:5c:0d:92:68:e2:56:03:
60:22:c4:ec:3e:dc:e3:ef:ac:e9:45:48:aa:ab:0d:d0:75:cb:
87:b5:1e:7a:bc:76:2f:ec:1e:08:74:68:9d:82:fc:b5:69:b2:
ca:d3:21:7a:e4:ac:63:ba:7e:a2:4e:9d:84:33:b7:cd:0c:32:
28:51:4f:0b:e1:5b:71:0f:1e:2e:d5:ee:8f:6e:ba:15:84:ea:
79:43:54:74:7f:5f:92:22:1e:64:99:c0:8b:54:1a:69:85:cf:
74:d0:0d:db:33:22:5c:72:87:a8:32:92:ea:0d:56:93:f0:e6:
7f:0c:9d:b6:f7:67:3e:d4:d9:4e:ac:93:59:fc:2a:3c:d1:71:
b4:2a:37:7c:d8:8b:ff:fe:e2:88:e5:9d:34:42:7f:2a:43:7f:
c3:0c:34:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:24:27 2025 by rpki-client