Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2bd6b4-eeb2-4f1b-8aaf-817af8a76250/1/4Kmif40dDkly4NuYVwMwrvfokPU.roa
File: 4Kmif40dDkly4NuYVwMwrvfokPU.roa (raw, json)
Hash identifier: 9ux9u4A+UskZlpKx7LSeZ84U4P8fiZhv7BuICKdCRAY=
Subject key identifier: E0:A9:A2:7F:8D:1D:0E:49:72:E0:DB:98:57:03:30:AE:F7:E8:90:F5
Certificate issuer: /CN=637d64d472563b7e873f5b79f91c9d3fffc3dbf9
Certificate serial: 019A153BDC3541FEDAA6CF4081984A9E3569
Authority key identifier: 63:7D:64:D4:72:56:3B:7E:87:3F:5B:79:F9:1C:9D:3F:FF:C3:DB:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y31k1HJWO36HP1t5-RydP__D2_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2bd6b4-eeb2-4f1b-8aaf-817af8a76250/1/4Kmif40dDkly4NuYVwMwrvfokPU.roa
Signing time: Fri 24 Oct 2025 08:00:35 +0000
ROA not before: Fri 24 Oct 2025 08:00:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210449
IP address blocks: 146.19.224.0/24 maxlen: 24
2a12:1080::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2bd6b4-eeb2-4f1b-8aaf-817af8a76250/1/Y31k1HJWO36HP1t5-RydP__D2_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/2bd6b4-eeb2-4f1b-8aaf-817af8a76250/1/Y31k1HJWO36HP1t5-RydP__D2_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y31k1HJWO36HP1t5-RydP__D2_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:3b:dc:35:41:fe:da:a6:cf:40:81:98:4a:9e:35:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637d64d472563b7e873f5b79f91c9d3fffc3dbf9
Validity
Not Before: Oct 24 08:00:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0a9a27f8d1d0e4972e0db98570330aef7e890f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c7:41:81:9e:42:bb:7e:e1:cf:a4:62:2a:39:
00:bd:9f:3b:d1:a7:b4:ab:e1:6a:29:1b:cf:9f:b1:
ce:6b:d8:bd:e1:55:c9:74:0e:8c:91:ae:e5:5a:c4:
2d:aa:8b:91:11:02:11:ae:79:18:7c:0c:12:e7:f9:
04:04:94:76:33:12:4f:ab:b7:02:8f:ca:69:5a:f3:
c3:af:e1:5f:44:88:f2:69:44:a2:31:05:ea:4e:03:
52:d3:05:ed:a0:67:be:6f:24:7a:93:71:d3:d1:17:
a1:2b:95:cf:e1:b1:99:e7:55:bf:f3:08:e0:d5:3f:
16:4b:cf:a0:56:8f:b4:6c:f8:08:86:0e:61:59:7c:
f4:19:1f:7e:89:ed:74:71:13:77:85:a0:35:8b:4e:
a8:7b:43:49:48:70:f4:29:86:b7:d2:42:cc:75:04:
f6:dd:f1:30:4a:8c:26:e9:43:17:67:a2:ac:fd:e0:
56:14:d9:c5:5a:07:ea:ad:73:85:41:05:29:20:da:
b6:e4:2d:95:7e:1a:ac:fd:e3:9a:5e:5c:5c:84:68:
9f:d6:b3:86:e6:0a:12:6a:05:fe:f2:57:e4:23:35:
d2:ca:67:46:63:3e:0c:38:70:89:ff:ec:c3:5d:32:
ab:39:f9:38:1b:9c:f4:64:f2:e8:e2:46:a5:0b:f6:
2f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A9:A2:7F:8D:1D:0E:49:72:E0:DB:98:57:03:30:AE:F7:E8:90:F5
X509v3 Authority Key Identifier:
keyid:63:7D:64:D4:72:56:3B:7E:87:3F:5B:79:F9:1C:9D:3F:FF:C3:DB:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y31k1HJWO36HP1t5-RydP__D2_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2bd6b4-eeb2-4f1b-8aaf-817af8a76250/1/4Kmif40dDkly4NuYVwMwrvfokPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2bd6b4-eeb2-4f1b-8aaf-817af8a76250/1/Y31k1HJWO36HP1t5-RydP__D2_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.224.0/24
IPv6:
2a12:1080::/29
Signature Algorithm: sha256WithRSAEncryption
00:1e:06:f5:ce:a2:02:bc:e0:dd:aa:dc:d3:03:b1:db:a4:a2:
4b:66:80:11:a1:2e:bc:c5:4a:05:4d:47:b3:5f:9f:e8:6b:50:
0f:4a:c9:fe:1b:4c:10:e4:35:74:a3:a6:14:0b:8a:56:b0:52:
28:a0:9b:64:0c:0c:a1:ef:63:da:77:9e:d3:0a:8d:b7:fd:89:
84:47:76:6d:d8:a2:9a:4d:9c:82:34:8a:4d:d8:83:40:90:36:
6e:ea:16:43:1d:75:37:d2:99:51:5b:47:5c:ec:7e:8a:04:53:
d1:b0:34:09:e7:ad:27:f5:88:f6:53:00:a2:84:7b:91:d5:b9:
92:17:a8:44:1e:e9:74:40:16:63:5b:5a:5a:7f:e4:77:2a:ef:
1f:b5:8a:b9:d7:de:3b:64:c5:82:e1:d0:81:46:f4:7b:1c:8f:
fa:f7:16:ef:d9:53:74:b3:29:31:d9:64:bc:73:09:f8:ab:3f:
77:66:79:74:4c:c5:f2:1e:eb:03:f3:35:4c:b1:3e:d9:a2:fd:
e3:53:bf:7f:9f:43:48:9d:68:e5:86:14:ff:3d:3e:b3:55:8b:
26:8e:aa:15:6e:8d:9b:be:d0:15:9e:3c:ac:93:8f:06:24:5f:
fc:fd:bd:de:fd:00:3b:26:ba:5b:17:9a:7e:07:a8:a7:a4:6a:
fc:b1:d8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:49:19 2025 by rpki-client