Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/4_Xm-FwaxW18eB6I_lWZLvV0NbU.roa
File: 4_Xm-FwaxW18eB6I_lWZLvV0NbU.roa (raw, json)
Hash identifier: j5XN84KyCXet7GlnPNGdyNtsnXeYr9PG2Qmp2UaeoZM=
Subject key identifier: E3:F5:E6:F8:5C:1A:C5:6D:7C:78:1E:88:FE:55:99:2E:F5:74:35:B5
Certificate issuer: /CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Certificate serial: 01983652B1CFC941A9F9247C21F15DCAE392
Authority key identifier: 5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/4_Xm-FwaxW18eB6I_lWZLvV0NbU.roa
Signing time: Wed 23 Jul 2025 08:07:25 +0000
ROA not before: Wed 23 Jul 2025 08:07:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8426
IP address blocks: 80.67.96.0/20 maxlen: 24
92.54.0.0/18 maxlen: 18
92.54.33.0/24 maxlen: 24
185.10.168.0/22 maxlen: 22
2a02:a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:52:b1:cf:c9:41:a9:f9:24:7c:21:f1:5d:ca:e3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Validity
Not Before: Jul 23 08:07:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3f5e6f85c1ac56d7c781e88fe55992ef57435b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7a:9a:23:32:8d:c1:e9:94:5b:0b:0a:ea:ed:
44:de:4e:ad:38:66:68:6f:aa:e8:69:ec:33:68:ed:
e2:f1:9e:7a:c0:f1:21:ad:02:10:aa:b9:0b:6c:c2:
cf:a5:1b:ef:ce:ab:bf:c0:45:be:b9:d1:01:30:3f:
86:8d:27:b7:d1:7a:dd:a8:25:2d:36:ce:31:f4:ff:
6a:40:e3:15:c5:33:74:3a:e9:82:39:1a:39:fc:3d:
89:33:3c:89:1b:10:cc:09:a4:f3:78:0a:d8:a1:fc:
3b:d2:07:50:f8:64:a8:f0:53:86:60:32:18:2a:d9:
7c:77:c4:bd:03:56:7a:29:1c:64:5b:b0:e6:ef:e0:
b0:33:d6:04:ca:7c:2d:89:3b:37:2c:46:94:73:55:
59:23:80:f2:f2:70:82:3c:97:e0:0b:e0:43:c5:c6:
6d:80:ee:b5:84:94:7c:f7:d0:97:86:42:59:58:92:
22:b1:50:11:9f:59:af:5b:08:3a:6c:d6:28:0f:27:
e4:bf:bf:05:c2:af:b5:a7:37:e8:44:ba:b2:98:42:
45:d2:aa:e9:3a:b6:0f:e3:83:0c:f9:6b:51:15:15:
e7:d0:82:fd:84:11:77:94:34:98:71:ed:da:91:63:
df:12:12:61:ed:17:fa:4d:98:33:52:7c:d5:9f:69:
fd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F5:E6:F8:5C:1A:C5:6D:7C:78:1E:88:FE:55:99:2E:F5:74:35:B5
X509v3 Authority Key Identifier:
keyid:5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/4_Xm-FwaxW18eB6I_lWZLvV0NbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.67.96.0/20
92.54.0.0/18
185.10.168.0/22
IPv6:
2a02:a0::/32
Signature Algorithm: sha256WithRSAEncryption
1e:3d:4e:88:be:c9:74:69:34:ec:8e:96:5a:32:4b:e0:e1:cf:
0f:a2:7c:94:62:d2:bc:c3:7a:f9:47:a2:bc:3f:50:d6:39:92:
46:a5:87:78:a3:91:89:90:6e:65:fa:6d:a2:b9:bd:9b:54:64:
02:f9:aa:8e:8a:36:50:2e:ed:b0:87:cf:7e:51:dd:62:23:3b:
e7:53:03:cd:45:75:43:8c:38:19:c0:c0:3c:d0:e3:cf:37:61:
d0:6f:0c:9c:df:f8:2d:1c:3e:a1:ae:10:05:e1:cc:67:fd:de:
9c:27:10:06:15:81:c2:4e:56:6d:97:b9:6f:71:38:f3:2b:41:
7f:d2:b0:ab:c8:df:73:14:31:75:b8:a8:17:cd:1e:22:d3:ab:
c2:a3:d9:b9:56:8f:19:aa:fa:49:f3:b9:1d:81:ba:9c:ff:95:
ed:f8:5c:4d:a6:ac:3d:b9:90:50:c8:59:31:97:17:04:6c:90:
05:0e:f5:38:13:34:f7:01:a5:98:90:d7:ed:fb:b3:b2:09:25:
af:64:a2:ab:92:24:55:f2:1a:ce:ea:2c:b7:9b:91:1d:b4:a9:
40:dc:4d:cf:e7:f4:65:40:eb:50:b3:df:79:b4:cd:30:a3:97:
05:49:41:3f:64:2d:9f:0d:6f:86:88:f3:ca:df:56:37:54:13:
c8:a1:dd:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:22:41 2025 by rpki-client