Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/4YPbiAtEI4aIVwSYoOB9atG5l_o.roa
File: 4YPbiAtEI4aIVwSYoOB9atG5l_o.roa (raw, json)
Hash identifier: 5G9M3UH6Px38TdWKWNsZTcUTomaq2supA1BUuPBFOUo=
Subject key identifier: E1:83:DB:88:0B:44:23:86:88:57:04:98:A0:E0:7D:6A:D1:B9:97:FA
Certificate issuer: /CN=dc3844500731d55f8988dde98559cfed0b309ab6
Certificate serial: 01966BCEB2E0FB9DF7A7BCB39669F8232BCA
Authority key identifier: DC:38:44:50:07:31:D5:5F:89:88:DD:E9:85:59:CF:ED:0B:30:9A:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DhEUAcx1V-JiN3phVnP7QswmrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/4YPbiAtEI4aIVwSYoOB9atG5l_o.roa
Signing time: Fri 25 Apr 2025 07:17:10 +0000
ROA not before: Fri 25 Apr 2025 07:17:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209831
IP address blocks: 213.226.116.0/24 maxlen: 24
2a14:fd80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DhEUAcx1V-JiN3phVnP7QswmrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6b:ce:b2:e0:fb:9d:f7:a7:bc:b3:96:69:f8:23:2b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3844500731d55f8988dde98559cfed0b309ab6
Validity
Not Before: Apr 25 07:17:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e183db880b44238688570498a0e07d6ad1b997fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6a:ce:7b:39:ea:f2:eb:29:16:45:a5:ae:2f:
1b:61:12:46:64:e5:bb:d2:d0:2e:fa:5b:bb:35:c5:
ea:4a:df:e1:13:09:d7:0d:5a:5c:a2:36:75:28:0d:
c2:5b:58:bf:68:01:bf:30:07:b0:29:78:af:22:c4:
67:b7:56:2f:00:ae:ad:d0:66:19:a5:df:46:af:4e:
0f:38:3f:f2:7a:5e:c8:1b:8a:e7:d6:51:ee:29:18:
c6:49:85:3e:f6:df:72:32:55:44:32:36:1c:54:34:
4d:58:b5:e7:c5:4e:1c:f8:7d:22:93:94:1c:92:18:
71:01:34:fb:c9:c2:5e:3d:62:94:77:14:91:48:50:
df:fb:3b:93:aa:a1:d9:d1:66:99:84:7f:91:70:a8:
dc:79:f7:10:c7:63:2e:30:9d:09:1d:40:4f:ea:cf:
b6:63:d5:f5:48:84:2f:35:0a:d3:b2:61:5d:cf:de:
d8:85:4b:6e:87:cb:07:a9:09:0e:eb:ca:b1:83:d9:
2c:75:63:ea:6a:93:ed:50:74:60:d3:c2:85:91:f8:
0b:46:d0:9f:65:56:db:5b:38:50:a0:9b:19:b3:99:
d3:9e:8f:1b:30:88:79:68:08:29:c0:d6:19:12:fc:
03:4c:76:4c:99:74:03:d0:01:f2:d0:2b:08:c6:d4:
4b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:83:DB:88:0B:44:23:86:88:57:04:98:A0:E0:7D:6A:D1:B9:97:FA
X509v3 Authority Key Identifier:
keyid:DC:38:44:50:07:31:D5:5F:89:88:DD:E9:85:59:CF:ED:0B:30:9A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DhEUAcx1V-JiN3phVnP7QswmrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/4YPbiAtEI4aIVwSYoOB9atG5l_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.226.116.0/24
IPv6:
2a14:fd80::/48
Signature Algorithm: sha256WithRSAEncryption
0e:5a:6d:a1:cb:b2:07:11:5f:70:02:4c:ba:26:73:bf:c5:8f:
c2:fd:81:c0:2a:79:c2:25:72:f7:48:b1:41:dd:40:4c:72:ad:
03:5f:a3:95:04:ed:21:7d:bc:d5:54:63:26:cc:d6:78:62:0d:
fb:34:b7:67:ab:cd:a1:47:4c:87:a4:ab:6e:a5:47:f3:13:ec:
ba:56:3c:1a:85:57:25:5b:13:fd:d5:24:ed:c0:e4:ea:74:83:
72:d3:ed:03:b0:42:41:87:90:dc:36:1f:9e:1f:40:80:d3:c9:
34:31:6d:cc:13:49:87:90:1e:53:a0:a2:d5:70:c7:7e:fd:81:
0d:f7:ca:ab:96:52:52:f6:05:9c:30:33:6a:6b:a3:47:2e:72:
ce:a6:84:4a:c6:46:48:9f:03:87:97:44:7a:a1:3f:ad:09:0e:
37:6a:87:20:89:82:40:59:76:53:ac:58:d7:55:61:8b:9a:99:
06:9a:b3:7b:3c:df:11:5e:19:c1:01:5a:cd:97:7e:8d:1e:f1:
3a:44:18:32:ba:d4:e6:c0:7e:78:13:11:57:b1:36:b5:29:fa:
99:32:d1:af:15:a5:23:1b:b5:57:fd:1e:62:a6:10:5e:a9:f0:
03:3b:7a:a9:a8:18:69:2c:4f:ab:79:a0:f0:83:73:51:43:28:
57:a4:cf:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:58:53 2025 by rpki-client