Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/4_VNWTufZC8SvBLGtSYS-QMxMRs.roa
File: 4_VNWTufZC8SvBLGtSYS-QMxMRs.roa (raw, json)
Hash identifier: zUcmS/ueRlX7Ac1kd0OB7mAYcKUolkCDvumtjnX6Kbg=
Subject key identifier: E3:F5:4D:59:3B:9F:64:2F:12:BC:12:C6:B5:26:12:F9:03:31:31:1B
Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial: 0196E9A0C7A64992B84A94F18776CE6801ED
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/4_VNWTufZC8SvBLGtSYS-QMxMRs.roa
Signing time: Mon 19 May 2025 17:39:10 +0000
ROA not before: Mon 19 May 2025 17:39:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202623
IP address blocks: 141.101.64.0/24 maxlen: 24
141.101.91.0/24 maxlen: 24
2a06:98c0:1400::/48 maxlen: 48
2a06:98c0:1401::/48 maxlen: 48
2a06:98c0:3602::/48 maxlen: 48
2a06:98c0:3603::/48 maxlen: 48
2a06:98c0:3604::/48 maxlen: 48
2a06:98c0:3605::/48 maxlen: 48
2a06:98c0:3606::/48 maxlen: 48
2a06:98c0:3607::/48 maxlen: 48
2a06:98c0:360e::/48 maxlen: 48
2a06:98c0:3612::/48 maxlen: 48
2a06:98c0:3616::/48 maxlen: 48
2a06:98c0:3622::/48 maxlen: 48
2a06:98c0:3626::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e9:a0:c7:a6:49:92:b8:4a:94:f1:87:76:ce:68:01:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Validity
Not Before: May 19 17:39:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3f54d593b9f642f12bc12c6b52612f90331311b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:46:af:ee:8f:2a:28:28:5b:83:3a:8e:b8:39:
62:4d:21:a5:13:b6:49:bb:d2:78:a6:df:92:c0:0f:
a8:ea:92:15:73:e6:e0:31:ec:a8:90:37:37:d8:c0:
19:a2:99:6c:a4:70:4a:68:83:14:26:51:88:57:83:
64:72:ef:e9:da:fc:fd:c8:07:e7:eb:b9:c2:2d:a0:
05:a9:06:11:84:c0:83:46:90:6b:39:8c:48:fd:c1:
85:a0:ca:da:c2:31:d5:10:17:0a:c1:de:a5:f2:aa:
76:d8:a5:e4:fc:44:aa:f5:c8:40:24:37:53:46:f5:
1a:76:44:66:35:08:66:a6:fc:e5:76:a7:9c:d1:a5:
22:44:64:4e:cf:07:ff:e4:44:20:7a:ed:40:ff:19:
cb:11:ee:92:23:eb:d2:1b:8e:06:74:69:c4:6b:96:
be:f0:da:91:9e:2a:27:f8:f8:73:40:d7:d4:6c:c7:
0e:58:c9:67:ce:6e:cb:31:99:7b:d3:d1:ac:3f:e7:
91:16:ab:6d:8f:27:75:e8:31:43:f0:ed:44:72:32:
60:8b:47:b4:6e:7e:19:27:8c:9f:19:4c:72:3f:ca:
36:3e:e4:49:61:94:4a:85:fd:f2:76:be:eb:13:64:
d0:c5:e6:c3:46:ad:31:25:37:bc:37:63:ad:fa:fc:
27:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F5:4D:59:3B:9F:64:2F:12:BC:12:C6:B5:26:12:F9:03:31:31:1B
X509v3 Authority Key Identifier:
keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/4_VNWTufZC8SvBLGtSYS-QMxMRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.64.0/24
141.101.91.0/24
IPv6:
2a06:98c0:1400::/47
2a06:98c0:3602::-2a06:98c0:3607:ffff:ffff:ffff:ffff:ffff
2a06:98c0:360e::/48
2a06:98c0:3612::/48
2a06:98c0:3616::/48
2a06:98c0:3622::/48
2a06:98c0:3626::/48
Signature Algorithm: sha256WithRSAEncryption
73:26:69:45:dc:76:85:ea:a3:34:9e:01:f9:3c:7f:52:8c:06:
7e:45:60:49:c4:03:34:10:cd:19:e8:5a:e2:4b:b9:a5:31:37:
d8:60:d9:5d:91:61:8d:41:f8:6d:95:2d:6a:dc:8a:ca:88:39:
12:76:73:3d:cb:18:b1:14:93:2c:2b:85:4a:02:ea:90:58:1f:
54:04:92:94:7c:f4:cf:36:de:8d:ce:07:42:35:7a:7a:18:d7:
00:58:e4:36:63:13:f0:4b:ab:ce:42:f1:90:5b:cf:10:da:5c:
45:dc:c8:c1:1f:d6:68:4d:0f:da:07:1c:d7:e6:8c:70:2b:49:
26:23:78:70:f0:4b:03:12:5f:fc:d8:45:ba:66:a4:50:03:57:
51:ec:72:1f:79:8f:c7:48:79:2c:6c:ea:e2:9e:fc:da:1a:6f:
67:1b:e4:dd:ae:75:e9:6d:44:bd:77:f4:2c:59:6e:17:89:67:
fe:75:96:0a:1b:2b:10:a7:6e:12:3a:de:b1:8c:2f:21:cc:68:
4b:f5:0f:3e:19:c6:2b:7c:de:c1:97:e1:a9:7c:70:69:49:e3:
49:4b:af:2f:01:c0:ae:d3:6a:2d:1a:78:70:94:f2:0a:15:e5:
8d:c2:70:e0:cf:a8:9d:91:64:28:da:5a:4e:4e:04:4c:9c:a5:
17:62:54:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:40:39 2025 by rpki-client