Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/4GRJUR4vXXkbJXxmZNO0pAVN8no.roa
File: 4GRJUR4vXXkbJXxmZNO0pAVN8no.roa (raw, json)
Hash identifier: t1gQYMmTlpYmC9Bxb3uLcdtIlModthZLt22QTmHtD3g=
Subject key identifier: E0:64:49:51:1E:2F:5D:79:1B:25:7C:66:64:D3:B4:A4:05:4D:F2:7A
Certificate issuer: /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Certificate serial: 0198E251BE2D27E4D82896AC319A949FFF82
Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/4GRJUR4vXXkbJXxmZNO0pAVN8no.roa
Signing time: Mon 25 Aug 2025 17:41:04 +0000
ROA not before: Mon 25 Aug 2025 17:41:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42708
IP address blocks: 85.203.44.0/24 maxlen: 24
85.203.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 17:17:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e2:51:be:2d:27:e4:d8:28:96:ac:31:9a:94:9f:ff:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Validity
Not Before: Aug 25 17:41:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e06449511e2f5d791b257c6664d3b4a4054df27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:92:84:45:b5:f2:4b:91:ef:df:7b:94:d2:e6:
ca:61:94:80:54:f3:1b:0e:3e:80:0a:5b:98:d8:cd:
09:10:ca:e6:0e:92:80:91:98:78:f8:24:71:c3:55:
95:b0:6b:23:00:fe:9e:94:79:08:8c:43:67:3e:3c:
e4:78:bd:f2:3d:da:7c:c2:fe:73:a0:a0:60:05:5c:
f7:2f:26:71:7f:d3:12:53:6a:b9:14:8a:87:41:83:
07:07:c0:51:8b:fd:9b:b7:3e:93:fe:30:03:0c:ff:
bb:44:94:b7:6f:9c:16:b2:c9:43:d8:61:70:8a:d7:
63:ce:82:45:37:c7:04:14:e4:8f:15:ab:c7:64:c5:
0a:86:67:62:ac:a0:27:96:18:ed:d6:62:95:20:45:
67:f3:bf:52:1b:d0:1a:a6:0e:4e:e9:eb:81:ec:4a:
d1:91:10:3c:fb:ac:c5:98:ba:de:c6:e3:bd:05:cd:
ff:48:12:ce:9c:d0:91:04:97:c7:42:34:5b:ba:09:
92:9a:4d:f4:a7:e9:9c:d0:10:be:c1:7e:1f:31:e5:
60:93:fe:64:55:39:d7:6b:c7:e0:33:ae:6a:de:ae:
83:d5:b3:44:ca:af:e9:5f:33:8e:19:b4:c3:1a:97:
a4:04:bd:ab:cd:82:70:27:e5:b7:24:d1:75:f7:99:
d4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:64:49:51:1E:2F:5D:79:1B:25:7C:66:64:D3:B4:A4:05:4D:F2:7A
X509v3 Authority Key Identifier:
keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/4GRJUR4vXXkbJXxmZNO0pAVN8no.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.44.0/24
85.203.47.0/24
Signature Algorithm: sha256WithRSAEncryption
43:d9:ee:6f:13:ca:90:10:2a:c2:9d:68:86:26:bb:4a:ca:a9:
1d:c1:4b:61:07:03:80:41:1c:f9:7b:8d:dc:b0:d6:14:d1:92:
64:15:87:67:5b:05:1f:be:1b:0e:f1:a8:76:27:e4:33:e0:9d:
ed:59:70:86:81:2a:bd:10:7b:5a:af:19:b0:85:7a:ba:76:72:
fe:f5:6f:6a:51:6f:d0:ef:f4:c8:e2:01:08:7c:a5:3c:23:6c:
24:b9:a2:75:2b:ce:0a:9f:80:0c:c1:28:f7:8c:f7:d1:6e:e0:
59:41:4e:f4:15:60:c2:45:b8:57:41:b5:a9:55:ba:8c:88:d9:
7d:be:0c:5b:f6:c6:0e:4f:29:d8:f2:39:8a:04:29:19:ed:72:
5d:b2:45:9b:dc:6b:41:14:9e:d3:be:94:d0:aa:02:43:87:c9:
c8:d2:8b:76:83:66:3f:37:a2:dd:f2:94:10:77:4b:f5:c2:d3:
53:3e:81:08:1d:9b:48:2b:5a:47:ec:0e:0c:1c:b6:c8:10:d3:
ab:d9:1c:12:58:c1:3b:cf:6a:ce:81:f0:88:08:22:91:11:78:
18:a0:12:ae:1d:c4:1b:6c:32:ed:9b:ca:e6:a7:d7:85:d0:34:
fd:b9:8a:38:b9:be:54:5f:25:f4:cf:f6:69:a5:44:05:c7:0c:
f7:69:c8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 02:36:13 2025 by rpki-client