Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/z_4E1h3GTFlT5ruo0CT3SRpBm0I.roa
File: z_4E1h3GTFlT5ruo0CT3SRpBm0I.roa (raw, json)
Hash identifier: 8BfW7FciBTdc5C8JJIsZRSk+vhvQyrnM6thA6ZIMSXc=
Subject key identifier: CF:FE:04:D6:1D:C6:4C:59:53:E6:BB:A8:D0:24:F7:49:1A:41:9B:42
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 0198FAE87A40DAA8DE1DC1D1EE59A1F22E86
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/z_4E1h3GTFlT5ruo0CT3SRpBm0I.roa
Signing time: Sat 30 Aug 2025 12:16:36 +0000
ROA not before: Sat 30 Aug 2025 12:16:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216074
IP address blocks: 78.158.166.0/24 maxlen: 24
213.195.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:fa:e8:7a:40:da:a8:de:1d:c1:d1:ee:59:a1:f2:2e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Aug 30 12:16:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cffe04d61dc64c5953e6bba8d024f7491a419b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d0:3b:3e:0d:86:ec:d0:31:5a:17:60:b8:26:
e9:2a:ff:68:e7:6c:1a:8a:1f:c5:b4:7f:b9:6a:13:
de:a8:09:af:e9:7f:35:87:c9:21:42:b3:6b:98:ac:
87:29:af:fc:83:e6:14:e4:a1:8f:fc:b0:83:cb:53:
34:c6:cb:a6:14:8b:e3:bb:e4:50:5a:79:a6:15:8a:
20:27:19:96:60:03:76:c6:82:b4:fe:b6:17:38:10:
88:6b:88:c8:a5:78:ec:1a:bd:b0:05:fc:48:b1:0b:
5e:d6:1e:70:b8:71:70:d0:ae:a8:99:9c:27:c7:d8:
2a:62:0c:d6:dd:14:39:50:f0:66:74:09:a9:e3:f1:
96:5b:64:ba:b0:6b:32:22:ea:0e:37:8e:a5:d6:32:
5d:d5:a2:e2:67:a4:32:42:10:6f:e9:a7:9f:28:44:
dc:c8:57:f9:19:b9:69:9e:41:25:55:0d:31:a1:2f:
b0:80:45:ff:97:cb:a3:30:0c:a8:f1:60:2f:fb:49:
19:1f:71:88:f5:34:76:15:38:e5:37:d3:3b:bd:9b:
b1:3a:86:10:d9:15:f1:87:15:f3:dd:52:1f:e3:9b:
29:b7:e2:e1:26:32:59:4c:d3:24:25:3c:cf:77:5d:
2c:14:cc:fa:ee:4b:b8:29:3a:7e:27:06:bd:10:26:
0d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FE:04:D6:1D:C6:4C:59:53:E6:BB:A8:D0:24:F7:49:1A:41:9B:42
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/z_4E1h3GTFlT5ruo0CT3SRpBm0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.158.166.0/24
213.195.23.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:6b:72:f4:92:a9:ef:5c:5f:90:a0:52:2c:30:62:58:d7:cc:
bd:97:4f:d3:6e:73:1f:4b:bf:fb:89:63:e6:ec:a9:07:d2:f0:
fc:6d:47:b1:57:7d:cd:e3:ad:24:05:77:23:c9:fb:96:2c:05:
22:6f:81:cf:93:ec:1f:d1:8f:e7:f5:c1:77:2e:5d:79:bb:fa:
db:3b:d4:0b:27:ce:0a:f7:32:cc:9a:3d:6d:88:d4:07:88:29:
12:44:d3:0a:07:04:d2:b8:34:88:12:62:04:e6:5f:fd:d7:72:
47:ce:84:18:9c:e0:91:f3:ed:29:d4:0b:c9:1a:93:e8:30:59:
50:6b:f3:73:b0:e4:81:46:97:a4:aa:be:d7:09:14:a5:61:fb:
36:96:35:cf:33:84:a1:bb:2f:84:50:bf:db:a4:f2:df:7d:75:
16:e3:5c:18:fd:9f:4a:4d:e3:e2:66:88:54:06:aa:6c:5b:94:
1b:6e:e5:00:d6:db:ba:55:3e:6d:53:17:62:0a:f0:35:9d:bf:
96:91:c7:91:14:cc:0d:a2:ea:97:c2:22:8e:64:62:d8:d2:8b:
75:34:3f:14:c6:47:66:7e:99:e4:65:8b:64:00:c9:1b:a8:a7:
39:7c:c9:90:23:a9:89:6e:4d:00:65:c0:66:b2:13:e3:8a:78:
d0:a0:d7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 19:02:40 2025 by rpki-client