Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/4wDopbEXjk43Rw4mbcMJ6Q0c3jA.roa
File: 4wDopbEXjk43Rw4mbcMJ6Q0c3jA.roa (raw, json)
Hash identifier: VBD+7i2pGd2GcSGT6qMiuwjn3HP93susB4QpbZwY04c=
Subject key identifier: E3:00:E8:A5:B1:17:8E:4E:37:47:0E:26:6D:C3:09:E9:0D:1C:DE:30
Certificate issuer: /CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b
Certificate serial: 019A156AF7484791E56B77A5C2A5750C5A94
Authority key identifier: 36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/4wDopbEXjk43Rw4mbcMJ6Q0c3jA.roa
Signing time: Fri 24 Oct 2025 08:52:02 +0000
ROA not before: Fri 24 Oct 2025 08:52:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60341
IP address blocks: 185.211.210.0/23 maxlen: 23
185.211.210.0/24 maxlen: 24
185.211.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:6a:f7:48:47:91:e5:6b:77:a5:c2:a5:75:0c:5a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b
Validity
Not Before: Oct 24 08:52:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e300e8a5b1178e4e37470e266dc309e90d1cde30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7d:56:7e:1f:10:a2:d7:a9:64:ab:3e:b8:9e:
20:be:38:4b:0b:15:3a:f4:b6:bf:1f:cc:f4:4b:2b:
d6:70:08:45:2e:f2:b3:02:52:28:ee:ce:5c:c9:c6:
1c:2a:60:8a:3b:10:40:d1:35:74:ad:7e:d6:bd:20:
dd:38:57:12:2d:d1:cf:81:22:8a:e9:70:ae:f0:50:
92:d0:1b:70:54:ac:cf:8b:c2:69:d1:34:e9:28:cb:
e2:36:91:51:e1:e0:1e:a4:95:33:86:0e:31:c3:d4:
d2:ca:ca:7b:c8:71:37:31:7b:06:8c:8d:f9:60:71:
5d:56:c2:8d:e4:32:82:56:a7:b4:ec:33:c8:b0:d6:
e0:ac:8a:0b:de:54:3a:e5:4c:0f:c0:80:a5:0f:a7:
5e:d5:80:7e:3a:f1:57:f8:10:df:ae:f4:c0:64:e7:
5e:b3:29:4f:c3:49:98:52:e0:24:cb:89:89:b0:c3:
bc:85:e3:4f:cf:ca:f2:d7:e8:6b:96:ea:66:07:f9:
6e:c5:d7:03:30:41:34:b5:3d:28:c1:66:15:7c:7b:
7c:01:e0:49:94:92:35:3a:18:37:35:07:34:5d:ec:
89:57:84:04:52:bf:9c:35:37:47:7a:43:b1:77:4e:
0b:01:1c:a5:ad:5a:b7:84:6e:d8:06:e4:93:4f:51:
05:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:00:E8:A5:B1:17:8E:4E:37:47:0E:26:6D:C3:09:E9:0D:1C:DE:30
X509v3 Authority Key Identifier:
keyid:36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/4wDopbEXjk43Rw4mbcMJ6Q0c3jA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.210.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:9a:be:01:d8:16:3c:ae:5c:a8:a4:0f:14:cf:3e:e2:7e:fc:
8d:33:39:32:4a:e6:d0:13:75:ce:20:e7:b5:c9:06:a7:a1:70:
3e:00:cf:a1:83:f6:13:2b:df:d6:0b:2d:4a:65:1a:f6:07:d8:
06:37:bb:61:d6:de:db:5e:b4:02:ea:c1:4d:23:04:4a:e3:ab:
c1:c3:35:a3:e1:4b:bb:de:42:05:78:c5:cf:9a:82:46:d0:2c:
72:79:89:ef:72:8b:50:36:24:e0:1f:62:25:60:a3:90:14:30:
65:ed:1c:9d:cd:6d:3a:47:49:29:52:d2:0f:f4:50:ef:cf:f4:
4c:92:c7:f2:2a:c1:c3:8f:28:8a:d1:75:22:fa:49:7a:ff:75:
da:a7:79:ee:98:c1:20:21:a9:56:a3:9e:64:c0:02:b1:ed:30:
8b:c3:79:ab:ed:b4:01:27:46:b6:73:81:50:5b:2b:de:71:65:
f8:1f:8e:be:95:01:63:41:1d:d9:97:f5:3d:40:9c:81:07:08:
99:41:fc:2b:ad:3c:e0:be:29:35:88:cb:b1:46:e8:10:a5:b1:
ef:26:97:5e:b3:8b:08:66:8c:b9:c6:82:b8:25:45:c7:c1:29:
55:2c:58:7a:31:d8:10:f9:a3:81:3d:a8:3b:fd:8b:a6:44:5f:
f9:20:c6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 16:40:17 2025 by rpki-client