Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/4kg4y74yKFBoKL19EAnoggmnyVU.roa
File: 4kg4y74yKFBoKL19EAnoggmnyVU.roa (raw, json)
Hash identifier: KOLvfzWJXbHmd9fxVRUIYFEHdRGKTleOpLyOLjIZHVY=
Subject key identifier: E2:48:38:CB:BE:32:28:50:68:28:BD:7D:10:09:E8:82:09:A7:C9:55
Certificate issuer: /CN=172537601a31697404922d957e74450f5a9cbe73
Certificate serial: 019A170435EADF02BAF12C9B0A266B677E46
Authority key identifier: 17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/4kg4y74yKFBoKL19EAnoggmnyVU.roa
Signing time: Fri 24 Oct 2025 16:19:03 +0000
ROA not before: Fri 24 Oct 2025 16:19:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 81.17.160.0/21 maxlen: 24
81.17.168.0/21 maxlen: 24
109.238.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:17:04:35:ea:df:02:ba:f1:2c:9b:0a:26:6b:67:7e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=172537601a31697404922d957e74450f5a9cbe73
Validity
Not Before: Oct 24 16:19:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e24838cbbe3228506828bd7d1009e88209a7c955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:97:75:9b:d5:94:19:f2:a3:47:3e:bb:04:58:
14:6e:5c:83:0a:3d:dc:2a:07:25:c5:f0:76:a5:46:
58:7f:05:90:87:db:88:1e:a8:cc:c9:48:55:b3:bf:
c4:ab:18:02:87:a9:ed:20:db:48:ad:8d:62:50:f2:
35:88:1a:45:3c:4a:87:48:2e:05:af:b0:42:e4:f7:
5d:9b:39:e5:42:06:d6:6f:9c:39:1d:ed:79:0c:19:
49:03:b7:77:20:89:2a:f1:e5:3b:43:b0:ef:ec:2f:
77:eb:35:8b:52:43:40:10:c9:76:9c:5c:c8:b7:5d:
51:71:fa:86:fa:7f:dc:d0:49:d0:e6:bd:6d:39:99:
e1:08:51:6e:c2:37:3a:d2:53:00:e0:ad:dc:24:79:
bc:25:b6:f9:46:4e:1e:ba:f7:9a:7b:20:74:76:4d:
31:a3:82:1a:1b:c4:2e:32:94:65:42:83:4f:df:6b:
ee:e5:12:71:5d:cb:6e:42:b9:d8:84:5f:f2:77:19:
97:26:46:12:00:0d:d3:01:ae:9e:57:3e:0e:58:13:
08:8b:53:46:80:ac:cd:1b:4d:49:7b:53:c0:fe:69:
5c:78:a5:e6:dc:76:9a:01:d3:43:e1:8c:6c:96:8f:
26:eb:01:f1:c5:ab:9b:80:1f:18:eb:94:df:57:01:
13:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:48:38:CB:BE:32:28:50:68:28:BD:7D:10:09:E8:82:09:A7:C9:55
X509v3 Authority Key Identifier:
keyid:17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/4kg4y74yKFBoKL19EAnoggmnyVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.17.160.0/20
109.238.160.0/21
Signature Algorithm: sha256WithRSAEncryption
52:9d:08:45:fa:55:a9:a7:ab:a9:fc:10:61:e8:3f:a3:da:0a:
ce:f0:ed:a0:17:79:3a:b5:7a:ef:d8:7c:c8:ab:c1:15:93:b0:
c9:61:ad:f4:6f:96:cc:d3:05:2e:68:dc:01:d8:8d:ba:d3:d7:
4c:8b:a1:b3:bd:ec:07:13:d9:a1:9e:e8:e0:b9:0c:c7:d1:fd:
86:16:80:a8:00:b4:27:96:0b:96:2e:f2:ff:d5:10:9f:5c:4a:
45:1a:6c:51:94:32:08:c4:6b:9f:f0:6c:7b:44:97:b0:17:0b:
3b:22:20:95:07:f2:56:ef:ea:b5:a9:36:ae:c2:d9:3b:05:33:
e5:c9:84:6f:b7:f4:fd:21:bc:53:c2:60:06:ca:6f:f4:c5:86:
d0:bf:56:46:97:67:99:d4:67:47:c8:f5:d8:f5:c0:b4:fb:1b:
65:83:50:57:dc:62:ca:bf:ce:cc:d1:65:98:d8:25:84:02:cd:
b0:9c:d4:c7:4e:36:38:c8:76:63:6b:eb:41:24:b7:c0:c4:aa:
2e:6f:77:28:34:20:f1:13:de:2e:40:7b:48:67:28:ee:7c:a8:
e0:65:45:c4:56:e7:37:b6:6b:0e:11:df:cb:e8:12:bd:44:a6:
44:08:18:ae:9b:be:76:43:c8:56:af:5a:3c:c7:f8:bb:f3:29:
52:33:ff:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 05:44:56 2025 by rpki-client