Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/o4QGe1oVFAvlinc81nAuNrtMaoE.roa
File: o4QGe1oVFAvlinc81nAuNrtMaoE.roa (raw, json)
Hash identifier: gIUvO01SqzkXQhjCsB61bL9/pNHUHKOGVQndKRDnyOA=
Subject key identifier: A3:84:06:7B:5A:15:14:0B:E5:8A:77:3C:D6:70:2E:36:BB:4C:6A:81
Certificate issuer: /CN=c6f61e3eb3cb447aca6d9a4356cd75717a7b7c68
Certificate serial: 0198E6F52DEAC2A35767756226F1FC8F36A2
Authority key identifier: C6:F6:1E:3E:B3:CB:44:7A:CA:6D:9A:43:56:CD:75:71:7A:7B:7C:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvYePrPLRHrKbZpDVs11cXp7fGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/o4QGe1oVFAvlinc81nAuNrtMaoE.roa
Signing time: Tue 26 Aug 2025 15:18:04 +0000
ROA not before: Tue 26 Aug 2025 15:18:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31723
IP address blocks: 185.160.144.0/22 maxlen: 24
217.171.112.0/20 maxlen: 24
2a07:be00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xvYePrPLRHrKbZpDVs11cXp7fGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 00:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e6:f5:2d:ea:c2:a3:57:67:75:62:26:f1:fc:8f:36:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6f61e3eb3cb447aca6d9a4356cd75717a7b7c68
Validity
Not Before: Aug 26 15:18:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a384067b5a15140be58a773cd6702e36bb4c6a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5a:e8:05:8b:bf:23:69:ee:76:dd:89:e8:33:
1f:cc:e6:a0:27:ca:07:6a:94:75:ff:f3:a7:0e:b2:
85:43:74:eb:1c:4e:45:4e:cd:4e:a7:16:2b:bc:cc:
62:6d:c7:14:c4:40:3d:45:20:73:f8:d4:09:e0:0a:
f1:af:d9:ff:60:52:73:f1:6e:e5:51:d7:eb:33:a8:
ee:c7:04:c2:78:29:c9:a0:ed:be:31:58:dc:15:73:
ab:36:83:94:5f:af:a0:37:59:2d:b8:fe:f8:cd:f0:
5a:9d:27:ff:d1:fe:e9:77:f8:da:bd:70:9a:28:89:
60:fc:8a:9f:09:f5:f5:05:a6:20:f6:72:60:86:a8:
ae:cc:cf:af:0c:e3:30:0d:12:5a:12:30:2c:d9:2f:
27:78:17:c9:33:31:64:0c:bc:f1:74:15:4e:bf:17:
87:8f:e1:bf:01:3e:fb:6a:a1:16:2f:bf:55:51:08:
b6:cd:aa:d0:a0:17:b7:fe:af:88:43:52:91:d2:df:
73:5b:df:75:30:0e:4c:04:79:53:26:d0:8a:cc:71:
94:23:54:4f:0a:e8:0b:e3:19:21:2c:15:cc:36:95:
e3:0a:6b:96:22:e6:7c:5d:34:48:3b:65:c1:48:29:
56:b9:90:06:f4:f7:e9:c1:1b:bb:9c:6b:e5:9f:91:
15:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:84:06:7B:5A:15:14:0B:E5:8A:77:3C:D6:70:2E:36:BB:4C:6A:81
X509v3 Authority Key Identifier:
keyid:C6:F6:1E:3E:B3:CB:44:7A:CA:6D:9A:43:56:CD:75:71:7A:7B:7C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvYePrPLRHrKbZpDVs11cXp7fGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/o4QGe1oVFAvlinc81nAuNrtMaoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.144.0/22
217.171.112.0/20
IPv6:
2a07:be00::/29
Signature Algorithm: sha256WithRSAEncryption
3b:f7:b6:91:43:3c:24:ac:ff:9c:c7:c4:e7:eb:2a:93:20:14:
af:52:2e:e1:12:d7:0f:ba:a6:f9:1b:ee:71:01:8b:53:40:4b:
7c:8c:ad:1e:a6:0a:36:74:f3:a7:37:38:a4:45:15:1e:72:8d:
68:97:2e:74:cf:af:cc:2d:f4:94:f0:4b:d4:0a:7e:b1:d4:37:
cd:90:6a:9d:6b:6e:64:b1:53:fa:41:cc:48:f0:f7:f0:b2:0e:
38:64:fa:2d:61:fb:26:82:61:43:42:82:3a:f2:cd:79:6d:de:
2d:5e:49:19:4f:68:15:b8:75:5e:3a:41:84:5e:56:45:e2:09:
68:25:cf:4d:04:31:0f:2a:b4:18:ca:32:5d:c9:3f:e8:b3:23:
70:5f:a3:6f:30:91:8e:90:33:13:de:8e:81:99:98:62:fa:f8:
7d:03:24:3a:21:16:bf:89:46:c7:74:93:b1:ec:29:2c:7b:82:
27:13:e4:4c:49:e2:7f:d9:ac:1d:a7:f4:51:40:a9:22:3e:91:
75:bc:5f:b7:a2:8d:5d:7d:df:c9:7f:bd:7a:10:16:98:d6:26:
48:4f:13:36:0f:ec:89:fc:ca:64:eb:da:24:08:5c:ec:de:59:
fb:46:a3:8d:47:04:68:1d:6c:fb:58:18:a0:93:49:c0:00:45:
5c:21:80:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 06:26:48 2025 by rpki-client