Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/4E0zAhDfu2F1TussOxZOe2exNbQ.roa
File: 4E0zAhDfu2F1TussOxZOe2exNbQ.roa (raw, json)
Hash identifier: OY6l7J7z6K3t4qPeFq2BfMuEYFps9apGFy884MmWR/Y=
Subject key identifier: E0:4D:33:02:10:DF:BB:61:75:4E:EB:2C:3B:16:4E:7B:67:B1:35:B4
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01973F9EC0E6755D5C9D256EB6CB1CBF6805
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/4E0zAhDfu2F1TussOxZOe2exNbQ.roa
Signing time: Thu 05 Jun 2025 10:24:18 +0000
ROA not before: Thu 05 Jun 2025 10:24:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60633
IP address blocks: 193.5.38.0/24 maxlen: 24
193.246.32.0/21 maxlen: 21
193.246.40.0/21 maxlen: 21
193.246.208.0/20 maxlen: 20
2a02:a90:c405::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3f:9e:c0:e6:75:5d:5c:9d:25:6e:b6:cb:1c:bf:68:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jun 5 10:24:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e04d330210dfbb61754eeb2c3b164e7b67b135b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e5:78:2c:c5:0f:45:27:e5:c0:e1:1c:29:48:
42:64:3f:cd:5f:e6:01:7e:57:f6:4a:cd:66:08:53:
77:84:a3:a0:7c:3d:51:e6:55:ea:f4:cc:fe:8a:43:
0c:37:39:32:db:28:3e:f1:f8:5c:f4:3b:f3:84:5b:
6b:08:6f:10:7a:d4:98:6c:96:cf:70:92:40:15:13:
6b:f8:d3:f6:56:05:5e:20:0a:a6:cd:ee:87:26:ab:
9b:74:54:29:43:b7:28:69:cb:ba:0d:27:e4:ec:e6:
4c:6e:7f:a4:18:df:fe:62:1a:c7:c2:1d:9e:10:bb:
be:cd:db:eb:c5:5c:15:13:81:f7:3d:84:f4:08:d8:
22:6d:ca:e5:61:11:02:83:9c:69:01:71:ed:f2:49:
79:1d:53:8c:e8:3c:23:d4:ad:90:7a:61:3a:d3:e7:
d0:fa:21:bf:c1:53:78:15:b1:24:40:86:3c:af:58:
08:08:eb:64:52:cd:f4:02:f9:d0:bc:10:74:74:51:
a8:2c:73:d2:f7:49:d2:93:83:53:be:af:68:22:24:
b7:6e:a5:4c:17:9b:f7:1d:cd:f4:f7:f3:18:c0:75:
88:2d:80:e4:28:a0:6b:1d:e1:6f:b5:3a:d0:8b:94:
ea:3f:0d:f7:57:df:89:ae:12:dd:44:f3:4a:fd:32:
ef:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:4D:33:02:10:DF:BB:61:75:4E:EB:2C:3B:16:4E:7B:67:B1:35:B4
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/4E0zAhDfu2F1TussOxZOe2exNbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.38.0/24
193.246.32.0/20
193.246.208.0/20
IPv6:
2a02:a90:c405::/48
Signature Algorithm: sha256WithRSAEncryption
81:bd:de:4a:30:8a:90:40:a6:4c:87:8a:45:9e:a6:01:02:e6:
e0:76:da:80:70:af:9d:5c:f5:48:0d:41:4c:01:0e:f3:74:72:
e6:fc:22:66:96:2c:8d:02:51:80:f4:7e:ce:1c:c3:9e:76:c6:
1d:55:ec:ed:47:bb:2d:b6:6a:65:b0:0e:e8:f3:62:a1:6b:c1:
ea:18:ec:10:15:aa:93:d3:99:12:01:a4:23:b0:b5:51:6d:0d:
93:da:a0:de:87:c4:b6:49:77:8d:a0:13:d9:03:32:96:dd:3f:
b9:a0:9f:73:ca:9c:81:58:70:c7:d9:07:f6:84:e8:f5:e1:58:
71:10:ca:c3:34:c1:ba:88:47:2d:0f:c5:34:88:9a:06:e4:34:
e4:b8:38:f7:47:51:da:31:92:66:57:a9:49:31:20:03:52:4d:
d0:5c:6e:35:e6:43:0d:c1:21:c1:9b:ba:91:ad:38:93:ba:3f:
4a:a0:f5:aa:19:1b:9f:af:1b:82:11:85:63:a8:79:ef:09:a1:
26:8b:14:26:e2:cd:89:d7:34:29:e5:31:9f:9c:fe:56:64:5c:
c7:ba:da:86:ba:5e:ea:53:b5:06:d1:0a:0f:bd:cc:bb:c1:7f:
6b:66:09:9d:97:4b:a5:74:b7:5b:93:b2:5b:7d:fc:80:de:05:
1b:28:20:1a
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAZc/nsDmdV1cnSVutsscv2gFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy
MDRjOGQwHhcNMjUwNjA1MTAyNDE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDRkMzMwMjEwZGZiYjYxNzU0ZWViMmMzYjE2NGU3YjY3YjEzNWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOV4LMUPRSflwOEcKUhCZD/NX+YB
flf2Ss1mCFN3hKOgfD1R5lXq9Mz+ikMMNzky2yg+8fhc9DvzhFtrCG8QetSYbJbP
cJJAFRNr+NP2VgVeIAqmze6HJqubdFQpQ7coacu6DSfk7OZMbn+kGN/+YhrHwh2e
ELu+zdvrxVwVE4H3PYT0CNgibcrlYRECg5xpAXHt8kl5HVOM6Dwj1K2QemE60+fQ
+iG/wVN4FbEkQIY8r1gICOtkUs30AvnQvBB0dFGoLHPS90nSk4NTvq9oIiS3bqVM
F5v3Hc309/MYwHWILYDkKKBrHeFvtTrQi5TqPw33V9+JrhLdRPNK/TLvjQIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFOBNMwIQ37thdU7rLDsWTntnsTW0MB8GA1UdIwQY
MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt
YmQxOTI2NzZjOWJiLzEvNEUwekFoRGZ1MkYxVHVzc094Wk9lMmV4TmJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi
LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAwQUmAwQE
wfYgAwQEwfbQMA8EAgACMAkDBwAqAgqQxAUwDQYJKoZIhvcNAQELBQADggEBAIG9
3kowipBApkyHikWepgEC5uB22oBwr51c9UgNQUwBDvN0cub8ImaWLI0CUYD0fs4c
w552xh1V7O1Huy22amWwDujzYqFrweoY7BAVqpPTmRIBpCOwtVFtDZPaoN6HxLZJ
d42gE9kDMpbdP7mgn3PKnIFYcMfZB/aE6PXhWHEQysM0wbqIRy0PxTSImgbkNOS4
OPdHUdoxkmZXqUkxIANSTdBcbjXmQw3BIcGbupGtOJO6P0qg9aoZG5+vG4IRhWOo
ee8JoSaLFCbizYnXNCnlMZ+c/lZkXMe62oa6XupTtQbRCg+9zLvBf2tmCZ2XS6V0
t1uTslt9/IDeBRsoIBo=
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:08:33 2025 by rpki-client