Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/4ZVhrpuB1IHBXfe6fTnFzmbNef0.roa
File: 4ZVhrpuB1IHBXfe6fTnFzmbNef0.roa (raw, json)
Hash identifier: FuraICrae+dlC4EwK8Mlwdgne0MzMhtiCSQ/Z77/tTA=
Subject key identifier: E1:95:61:AE:9B:81:D4:81:C1:5D:F7:BA:7D:39:C5:CE:66:CD:79:FD
Certificate issuer: /CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Certificate serial: 0198E87A462C37E323D9C656D4DC2B10A3DC
Authority key identifier: 03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/4ZVhrpuB1IHBXfe6fTnFzmbNef0.roa
Signing time: Tue 26 Aug 2025 22:23:04 +0000
ROA not before: Tue 26 Aug 2025 22:23:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216435
IP address blocks: 2a10:500::/32 maxlen: 48
2a10:500::/40 maxlen: 48
2a10:500:100::/40 maxlen: 40
2a10:500:200::/40 maxlen: 40
2a10:500:f00::/40 maxlen: 40
2a10:500:1000::/40 maxlen: 40
2a10:500:1100::/40 maxlen: 40
2a10:500:1200::/40 maxlen: 40
2a10:500:1300::/40 maxlen: 40
2a10:500:1400::/40 maxlen: 40
2a10:500:1500::/40 maxlen: 40
2a10:500:1600::/40 maxlen: 40
2a10:500:1700::/40 maxlen: 40
2a10:500:1800::/40 maxlen: 40
2a10:500:1900::/40 maxlen: 40
2a10:500:1a00::/40 maxlen: 40
2a10:500:1b00::/40 maxlen: 40
2a10:500:1c00::/40 maxlen: 40
2a10:500:1d00::/40 maxlen: 40
2a10:500:1e00::/40 maxlen: 40
2a10:500:1f00::/40 maxlen: 40
2a10:500:2000::/40 maxlen: 40
2a10:500:2100::/40 maxlen: 40
2a10:500:2200::/40 maxlen: 40
2a10:500:2300::/40 maxlen: 40
2a10:500:2400::/40 maxlen: 40
2a10:500:2500::/40 maxlen: 40
2a10:500:2600::/40 maxlen: 40
2a10:500:3600::/40 maxlen: 40
2a10:500:4800::/40 maxlen: 40
2a10:500:4900::/40 maxlen: 40
2a10:500:4d00::/40 maxlen: 40
2a10:500:5600::/40 maxlen: 40
2a10:500:5c00::/40 maxlen: 40
2a10:500:6000::/40 maxlen: 40
2a10:500:6700::/40 maxlen: 40
2a10:500:7a00::/40 maxlen: 40
2a10:500:7c00::/40 maxlen: 40
2a10:500:7e00::/40 maxlen: 40
2a10:500:8b00::/40 maxlen: 40
2a10:500:8d00::/40 maxlen: 40
2a10:500:8e00::/40 maxlen: 40
2a10:500:9400::/40 maxlen: 40
2a10:500:9500::/40 maxlen: 40
2a10:500:9600::/40 maxlen: 40
2a10:500:9800::/40 maxlen: 40
2a10:500:9e00::/40 maxlen: 40
2a10:500:b100::/40 maxlen: 40
2a10:500:c300::/40 maxlen: 40
2a10:500:ce00::/40 maxlen: 40
2a10:500:de00::/40 maxlen: 40
2a10:500:f000::/40 maxlen: 40
2a10:500:fdff::/48 maxlen: 48
2a10:500:fe00::/40 maxlen: 48
2a10:500:fe01::/48 maxlen: 48
2a10:500:fe0a::/48 maxlen: 48
2a10:502::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e8:7a:46:2c:37:e3:23:d9:c6:56:d4:dc:2b:10:a3:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Validity
Not Before: Aug 26 22:23:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e19561ae9b81d481c15df7ba7d39c5ce66cd79fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f3:2e:1e:cd:8e:dd:3f:fd:34:ec:bd:23:7c:
ff:8d:84:f0:42:c1:e2:a6:14:01:6e:42:f5:ec:fc:
31:2d:d7:44:d4:d5:14:ee:95:d5:81:cd:c1:96:88:
fa:0d:7e:ee:64:17:48:29:c1:9b:24:38:48:85:1e:
13:8d:10:2f:70:c2:8f:4b:b6:e9:8f:71:5e:76:8c:
8e:4b:ad:82:6c:3a:e8:87:88:1d:d2:0a:84:25:ef:
37:fe:e0:55:06:7b:79:13:1e:92:3b:c6:e1:c0:0f:
fa:83:60:e3:57:66:67:ce:16:fa:95:33:77:63:70:
d1:09:14:64:60:de:af:94:be:39:66:d0:ff:c0:20:
7f:e5:2b:be:ef:2e:20:98:c8:02:3a:d8:0a:d4:ff:
52:73:d1:41:f8:54:d3:a3:39:5f:c2:fe:6f:47:c6:
56:30:b3:d8:16:c7:08:f0:f9:fb:89:97:82:46:06:
a3:14:64:9d:e8:ca:ad:01:0f:34:ef:8a:22:bd:5e:
8e:11:92:a8:61:34:82:f0:ea:53:7b:6c:58:27:57:
1e:92:fe:db:e6:f1:16:b8:4c:58:18:7f:b1:94:d5:
9c:47:1d:8b:cf:5c:05:f8:2b:4d:8e:db:00:67:08:
8f:b2:e1:02:d2:f2:f4:fe:2b:61:21:c1:a8:0e:06:
1b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:95:61:AE:9B:81:D4:81:C1:5D:F7:BA:7D:39:C5:CE:66:CD:79:FD
X509v3 Authority Key Identifier:
keyid:03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/4ZVhrpuB1IHBXfe6fTnFzmbNef0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:500::/32
2a10:502::/32
Signature Algorithm: sha256WithRSAEncryption
42:22:fe:12:a6:a4:1f:25:94:2d:1a:45:70:00:a1:85:7f:b7:
88:15:ca:26:e6:fe:2a:89:00:93:2a:08:8d:8f:d1:af:52:d3:
49:a8:45:bd:1a:23:39:14:4b:3c:d7:37:a6:3e:63:86:c4:03:
0c:eb:69:1c:0c:63:de:31:98:7a:ef:cf:b1:90:b3:7f:ba:08:
9b:3b:39:1e:74:e2:29:39:fc:5a:0e:08:14:20:29:11:15:7e:
d4:33:78:71:84:88:3d:bc:45:ec:96:7c:42:35:d3:c4:69:34:
24:0b:3b:c8:58:42:07:22:b6:e3:61:8c:d7:a5:50:07:67:4c:
03:a9:6e:9e:29:8a:d1:a7:46:0f:b7:1c:d2:21:52:ff:20:bd:
ff:24:a9:84:90:50:eb:b1:c6:e6:d7:dd:b4:0f:44:ff:2f:c9:
80:ff:e1:5e:fc:14:7e:6d:d2:e8:c7:a2:7e:db:96:76:59:cf:
ce:97:66:6d:20:7c:1a:af:6f:82:d7:cc:40:7a:f9:a3:40:44:
33:f0:b1:4e:9e:28:30:d0:26:9c:1c:9a:53:1f:36:bb:43:c2:
13:ac:56:5c:4f:d9:7f:2c:6e:52:10:a7:ef:6d:56:b4:14:55:
76:ca:bc:c3:67:69:6f:fb:18:a2:91:5c:3e:85:1c:51:f3:3d:
44:26:2a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 06:09:38 2025 by rpki-client