Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/dEwDgHNRwB2VoPRdx0_R_r9VvXs.roa
File: dEwDgHNRwB2VoPRdx0_R_r9VvXs.roa (raw, json)
Hash identifier: ZmaavjquA+5GJ96FSUOD0qeY6WuxDd/G1b1qQ9SzWGc=
Subject key identifier: 74:4C:03:80:73:51:C0:1D:95:A0:F4:5D:C7:4F:D1:FE:BF:55:BD:7B
Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Certificate serial: 0199566B96FB461B2BFBFBD8F1D8E31EABB1
Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/dEwDgHNRwB2VoPRdx0_R_r9VvXs.roa
Signing time: Wed 17 Sep 2025 06:45:15 +0000
ROA not before: Wed 17 Sep 2025 06:45:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 158.173.3.0/24 maxlen: 24
158.173.4.0/24 maxlen: 24
158.173.5.0/24 maxlen: 24
158.173.6.0/24 maxlen: 24
158.173.7.0/24 maxlen: 24
158.173.16.0/24 maxlen: 24
158.173.17.0/24 maxlen: 24
158.173.18.0/24 maxlen: 24
158.173.19.0/24 maxlen: 24
158.173.20.0/24 maxlen: 24
158.173.21.0/24 maxlen: 24
158.173.22.0/24 maxlen: 24
158.173.23.0/24 maxlen: 24
158.173.24.0/24 maxlen: 24
158.173.25.0/24 maxlen: 24
158.173.32.0/24 maxlen: 24
158.173.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:56:6b:96:fb:46:1b:2b:fb:fb:d8:f1:d8:e3:1e:ab:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Validity
Not Before: Sep 17 06:45:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=744c03807351c01d95a0f45dc74fd1febf55bd7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fa:66:ad:c3:6a:a2:a8:45:7d:ff:4f:9d:ea:
54:c3:0c:27:31:cf:ff:82:23:d6:2f:e3:13:8c:7a:
aa:dd:e2:4c:dd:27:ab:15:34:8a:e4:74:35:23:ed:
25:58:ce:d0:4e:64:2e:90:85:94:79:7d:59:b3:0d:
bf:3d:f3:3d:18:b7:d6:aa:ff:9e:6c:7b:0b:b0:fa:
eb:9f:41:af:15:a0:67:49:51:bd:0c:20:d5:90:4e:
1a:c4:8e:2b:5d:1d:34:e3:1e:11:93:b0:ed:7c:bc:
89:d7:01:36:16:23:03:8c:9a:cb:29:53:cd:c8:6f:
bf:15:a5:c5:36:54:5e:2a:04:86:01:84:52:29:b9:
36:5a:ad:4e:cb:fe:50:68:cd:71:5e:10:10:ee:5a:
b5:53:49:2f:5b:67:c2:b9:ec:a0:ea:34:05:4f:5f:
7a:62:b0:0a:15:50:a2:07:2b:24:5d:63:5f:87:02:
eb:fc:f0:59:44:40:77:b6:84:9a:59:87:e4:f3:90:
02:3a:af:f6:06:04:be:fb:82:07:0d:2b:0f:5c:79:
f8:d3:3c:e9:23:aa:a4:59:1a:eb:f3:52:2a:20:bc:
fe:7e:85:4c:bc:48:56:ab:fc:7e:62:cf:d4:06:0d:
5a:74:96:04:b4:17:c4:77:8f:cc:56:66:20:df:dc:
9a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:4C:03:80:73:51:C0:1D:95:A0:F4:5D:C7:4F:D1:FE:BF:55:BD:7B
X509v3 Authority Key Identifier:
keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/dEwDgHNRwB2VoPRdx0_R_r9VvXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.3.0-158.173.7.255
158.173.16.0-158.173.25.255
158.173.32.0/23
Signature Algorithm: sha256WithRSAEncryption
47:e9:8b:91:47:3a:57:27:21:e4:09:39:91:60:fa:87:fc:a3:
af:2b:5e:a0:df:b1:15:82:c6:d7:0d:f3:a3:fe:6b:07:e1:33:
52:32:d4:ec:5e:61:c3:5d:f2:72:fd:e0:7f:c6:8d:d5:45:90:
3c:e6:73:df:03:04:19:62:78:d2:83:17:0e:97:e2:56:7a:20:
1a:7c:55:8d:12:9b:de:c8:f5:c0:2b:d3:5c:13:c3:6e:1d:0d:
c5:df:c1:d3:a9:e8:0c:c8:53:d4:1d:96:c1:b4:17:23:73:91:
c5:dd:a8:49:63:f4:49:fc:81:1b:3c:e3:31:d2:3d:80:9a:43:
02:be:64:0b:7c:44:ce:9d:6e:21:7b:77:26:71:88:c0:9a:06:
e9:32:60:d2:69:86:ec:8b:bf:93:26:5b:2a:e3:a4:94:11:8d:
50:b1:8b:5e:f0:9a:e9:f1:13:da:09:d9:ea:d5:0a:41:f9:e5:
a3:15:63:f2:5d:6d:a5:e1:7f:ad:f4:76:f9:e7:42:47:3e:c0:
71:56:46:17:a7:5b:a0:60:84:80:f9:c9:77:9b:e2:52:6e:8e:
4e:8e:8a:fc:73:bf:2b:2c:c8:c2:c0:10:4a:4b:32:f4:79:46:
fe:e5:73:38:3d:d8:10:b7:b2:d5:24:ae:93:4b:2a:6d:f3:ca:
70:21:cf:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:29:48 2025 by rpki-client