Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/4hNbsxby_DEwB1zM7EvZdxVg5p0.roa
File: 4hNbsxby_DEwB1zM7EvZdxVg5p0.roa (raw, json)
Hash identifier: 6kWN3vCZM/X6uklJknv4uo3gdNCuivLuY/Qu0tCkSVQ=
Subject key identifier: E2:13:5B:B3:16:F2:FC:31:30:07:5C:CC:EC:4B:D9:77:15:60:E6:9D
Certificate issuer: /CN=a205537395a8a40303877e69d389033fe37a64f0
Certificate serial: 01982BEF16F6862AAFF11382FF3FDA18A74F
Authority key identifier: A2:05:53:73:95:A8:A4:03:03:87:7E:69:D3:89:03:3F:E3:7A:64:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogVTc5WopAMDh35p04kDP-N6ZPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/4hNbsxby_DEwB1zM7EvZdxVg5p0.roa
Signing time: Mon 21 Jul 2025 07:42:25 +0000
ROA not before: Mon 21 Jul 2025 07:42:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50628
IP address blocks: 45.144.92.0/22 maxlen: 22
193.35.98.0/24 maxlen: 24
193.35.101.0/24 maxlen: 24
193.35.145.0/24 maxlen: 24
193.35.156.0/24 maxlen: 24
2a0e:ebc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogVTc5WopAMDh35p04kDP-N6ZPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2b:ef:16:f6:86:2a:af:f1:13:82:ff:3f:da:18:a7:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a205537395a8a40303877e69d389033fe37a64f0
Validity
Not Before: Jul 21 07:42:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2135bb316f2fc3130075cccec4bd9771560e69d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f8:4c:20:5e:35:76:fe:a7:b2:59:c5:3f:db:
ab:ec:b4:aa:22:14:34:3c:9f:9f:87:b4:37:ae:23:
ae:25:31:c9:a4:2a:31:b5:96:39:c9:f4:80:93:a4:
89:b8:ad:51:f2:e5:6f:a3:d4:aa:fa:e8:28:23:9c:
0b:09:c1:d7:c5:c9:e6:3d:f4:44:6d:ba:61:9f:ed:
27:ff:2b:1a:f7:1e:c0:c6:8a:cc:de:5b:77:20:65:
30:d7:9b:3d:26:7a:7f:c7:47:d8:c7:e9:ea:0e:3f:
4e:13:45:07:1e:51:6b:d4:a6:22:75:e3:78:08:33:
d0:84:07:43:ad:5a:8d:a1:88:24:f7:97:ee:af:41:
b9:38:0c:63:67:67:8d:54:2e:34:94:a3:f4:2e:b6:
84:a1:ce:f9:11:52:85:c0:80:02:4f:4e:de:9c:db:
bf:77:0c:be:76:f8:16:4a:ca:85:c0:9a:3c:cb:d7:
a8:3f:96:31:b2:92:e7:b7:2c:03:b4:25:ef:78:b3:
d1:2d:bd:78:d9:82:da:a5:57:f1:ab:99:17:05:79:
d6:89:c6:60:e7:6b:8f:79:f1:f0:08:0a:ef:f6:c4:
64:4e:d0:ae:ba:de:3c:fa:7f:12:04:cb:ae:4e:58:
ff:16:53:4e:92:9b:41:1c:6f:b8:dd:37:78:79:2b:
71:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:13:5B:B3:16:F2:FC:31:30:07:5C:CC:EC:4B:D9:77:15:60:E6:9D
X509v3 Authority Key Identifier:
keyid:A2:05:53:73:95:A8:A4:03:03:87:7E:69:D3:89:03:3F:E3:7A:64:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogVTc5WopAMDh35p04kDP-N6ZPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/4hNbsxby_DEwB1zM7EvZdxVg5p0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ac74cc-a896-4326-a021-6c75bcbfb4a6/1/ogVTc5WopAMDh35p04kDP-N6ZPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.92.0/22
193.35.98.0/24
193.35.101.0/24
193.35.145.0/24
193.35.156.0/24
IPv6:
2a0e:ebc0::/29
Signature Algorithm: sha256WithRSAEncryption
8c:5f:e9:a1:c6:f2:82:13:2c:79:fd:3d:d5:ff:d2:bd:75:07:
d5:ff:27:4f:44:fe:2b:62:b0:ce:80:e3:37:cd:4d:bf:36:e5:
45:1c:77:3d:20:9a:ab:8c:62:3a:b7:a2:4d:89:ee:f1:72:f1:
31:c5:dc:2d:38:dd:e0:77:5c:32:ec:58:7c:3d:b5:f7:49:bf:
6d:00:36:7b:26:c9:38:c7:58:b3:74:5d:b2:aa:27:f8:c2:6a:
77:68:ff:53:d9:f8:bd:38:50:29:f2:2e:9a:5e:7f:a7:0b:cf:
22:a8:1e:f7:9a:ac:d3:ff:4a:0b:b5:73:d2:6f:fc:a7:18:9d:
f7:0a:f8:c4:0c:b0:4f:55:c9:c7:d4:de:05:d4:8d:74:84:ca:
5c:7f:7f:a0:fb:42:b0:19:ac:ed:d0:47:a1:b7:b8:6f:30:ff:
98:72:79:f1:71:de:19:4f:d4:9f:98:a6:2c:55:97:a0:97:7a:
d9:ac:34:32:54:93:8a:26:39:f7:86:37:be:e8:48:ef:d0:fa:
24:24:31:2d:ab:2a:bd:74:bc:c4:30:dd:36:08:e0:79:bd:b2:
85:3c:7e:b5:90:30:8c:d2:60:ba:d2:c0:5e:c3:d0:96:fd:e7:
26:02:e9:3e:35:23:95:86:58:20:66:3e:4d:2c:2d:1d:5b:36:
01:9d:31:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:52:34 2025 by rpki-client