Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/4MIdrmqKM4P4glnhZbyg-l-x_u8.roa
File: 4MIdrmqKM4P4glnhZbyg-l-x_u8.roa (raw, json)
Hash identifier: GEv2Wvt9c6UqjQz2lv7KaKd8mvDOmEzMIMxEyUYP+bc=
Subject key identifier: E0:C2:1D:AE:6A:8A:33:83:F8:82:59:E1:65:BC:A0:FA:5F:B1:FE:EF
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 01995236EDCF58A62602B5D23674FD34D41C
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/4MIdrmqKM4P4glnhZbyg-l-x_u8.roa
Signing time: Tue 16 Sep 2025 11:09:15 +0000
ROA not before: Tue 16 Sep 2025 11:09:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 178.211.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:52:36:ed:cf:58:a6:26:02:b5:d2:36:74:fd:34:d4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Sep 16 11:09:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0c21dae6a8a3383f88259e165bca0fa5fb1feef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b2:55:30:a7:e0:ae:e4:da:4f:1a:fd:9f:98:
bd:e4:1a:59:ce:e6:33:89:b8:d2:1d:7d:9a:e8:f6:
c1:7a:09:10:ed:3f:5b:0d:cb:8a:57:4f:f4:2c:e1:
45:27:5f:4b:c6:2e:c2:cd:21:99:d0:d1:a1:d8:66:
aa:f5:2f:7c:ea:a1:44:3c:6c:7b:2b:a1:e4:19:24:
df:b3:82:1e:c9:01:9f:08:2e:1c:fc:15:e3:03:1f:
94:7d:08:47:a1:12:d1:5c:5e:d8:66:11:80:86:17:
bd:94:61:dc:51:49:c1:a8:51:ea:e0:3f:bc:7c:61:
23:1e:6e:6b:63:a3:3c:8c:5b:d9:d5:de:e0:14:e6:
bc:b4:ed:ee:30:3e:e8:fb:c4:e4:a3:13:ac:9b:53:
a6:b2:c4:ee:7d:ae:3c:64:79:fe:57:6e:53:f6:29:
42:86:01:05:4b:18:d2:12:a7:51:46:13:a4:28:4a:
12:63:12:88:e8:f7:e1:aa:fd:a1:ee:24:92:80:0f:
55:02:0c:c1:c7:f2:6e:36:91:5d:96:cd:70:24:03:
40:8b:9a:d3:1b:19:cf:f8:b3:e3:b7:51:38:f6:08:
b9:e1:a4:12:ee:19:05:70:d8:72:83:8b:d8:05:e7:
25:8f:26:dc:8b:5e:c2:22:13:49:e1:59:58:04:e8:
12:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C2:1D:AE:6A:8A:33:83:F8:82:59:E1:65:BC:A0:FA:5F:B1:FE:EF
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/4MIdrmqKM4P4glnhZbyg-l-x_u8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.159.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:b3:97:8a:ca:7b:59:2a:72:25:4e:2d:b6:a7:b1:77:fb:a7:
63:2e:c9:a0:93:10:14:d7:8e:c9:4e:1d:85:3e:4f:4d:59:5f:
8a:46:27:76:23:7a:62:93:24:f5:7a:7d:80:e4:69:3d:04:49:
cf:a6:a4:55:fd:51:17:c9:59:4b:cc:64:f3:bd:8d:c6:e5:f0:
58:d6:9a:7d:a8:46:10:fa:46:e0:6d:e3:87:be:d9:1f:71:d4:
67:3d:00:82:50:7a:6f:7f:c5:94:ac:ee:86:0d:1b:8b:88:34:
f6:fa:b2:41:14:38:f3:f1:6a:ce:b9:b4:47:cf:55:fe:03:fd:
7c:78:21:d2:c9:6c:8e:40:d3:6f:81:07:d1:e4:dd:57:2c:74:
8a:f1:bb:7d:ce:7a:eb:78:6a:f0:76:ee:15:b5:7e:00:5a:c5:
5f:5b:af:02:61:c2:e2:65:2b:0e:ba:74:1a:40:69:d1:d3:c4:
ba:bd:44:36:19:20:20:57:b7:8d:86:5e:7c:01:52:b3:30:cf:
b0:2d:81:df:8d:45:e1:72:fa:c1:a0:11:ae:71:bf:16:3f:ab:
6f:5e:b6:e6:fe:b4:70:be:01:69:8d:bc:6c:46:ee:28:bf:72:
20:96:db:c3:ac:a0:46:ef:de:99:93:e8:3e:4f:40:5e:a4:1a:
d7:45:09:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 12:01:35 2025 by rpki-client