Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/4tIwWmU-n7-9mbrV6zHCUY2kgO0.roa
File: 4tIwWmU-n7-9mbrV6zHCUY2kgO0.roa (raw, json)
Hash identifier: UNWMMK2ScoKR3jrKuoJR0R5xS2Hl4Xfz/Y0cE7DjtqA=
Subject key identifier: E2:D2:30:5A:65:3E:9F:BF:BD:99:BA:D5:EB:31:C2:51:8D:A4:80:ED
Certificate issuer: /CN=f382cb13dde12658cdac18cacae91fbbf5c58090
Certificate serial: 0198E02B814BFD02A3936472591B7594291C
Authority key identifier: F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/4tIwWmU-n7-9mbrV6zHCUY2kgO0.roa
Signing time: Mon 25 Aug 2025 07:40:04 +0000
ROA not before: Mon 25 Aug 2025 07:40:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 17497
IP address blocks: 193.203.214.0/23 maxlen: 23
193.203.214.0/24 maxlen: 24
193.203.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 09:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e0:2b:81:4b:fd:02:a3:93:64:72:59:1b:75:94:29:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f382cb13dde12658cdac18cacae91fbbf5c58090
Validity
Not Before: Aug 25 07:40:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2d2305a653e9fbfbd99bad5eb31c2518da480ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5a:c5:5c:4c:d7:1d:81:f4:50:a6:3c:f2:ad:
75:0d:97:0d:e6:77:9a:bd:ec:4a:6d:f8:b2:49:04:
29:56:d4:b6:e4:d7:16:01:14:c2:7b:c3:b7:60:f5:
f5:18:6a:d0:67:af:9b:96:b9:f0:31:07:3e:fa:8e:
77:84:2d:6b:f5:9b:e9:f1:5f:79:34:eb:83:58:df:
29:2c:a4:e3:5e:7b:26:b1:66:b8:48:1e:22:36:fa:
e2:54:f8:46:55:ea:70:d8:ab:ab:ff:92:35:86:e5:
da:66:0f:1c:0c:75:3d:aa:ce:56:e3:ef:70:60:e9:
67:ee:d4:66:68:3c:42:38:44:a0:66:74:ff:a6:ad:
36:02:cd:77:3d:43:a2:0a:6e:48:33:9f:d5:c4:e3:
66:91:88:86:ea:3e:f8:55:c6:89:11:b0:04:f2:81:
c7:46:9c:7c:be:76:28:47:d0:8f:8c:86:4c:7a:61:
de:a2:26:fa:fe:2e:d9:18:8e:77:c8:8d:00:27:2f:
bb:c1:c9:bc:02:24:2d:af:e8:7c:79:11:8d:49:9c:
35:61:1b:78:0c:b6:6c:b1:9c:f0:ca:22:12:56:36:
42:fb:f3:f6:3d:e2:94:d4:e5:f9:c2:1c:52:09:b6:
d3:73:f6:74:37:91:61:15:fb:ca:f2:f9:45:cb:5c:
93:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D2:30:5A:65:3E:9F:BF:BD:99:BA:D5:EB:31:C2:51:8D:A4:80:ED
X509v3 Authority Key Identifier:
keyid:F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/4tIwWmU-n7-9mbrV6zHCUY2kgO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.214.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:eb:b4:b3:50:a3:c5:73:32:53:c5:bc:e7:c4:17:05:e4:a7:
9f:f3:ba:0d:c5:24:5e:76:e0:15:bc:69:88:58:5c:37:37:0c:
81:27:af:74:ee:0a:58:7c:9e:03:75:b8:b5:f2:5c:16:78:bd:
c1:d1:83:65:65:20:41:50:1c:16:6b:58:73:1e:18:ef:6e:1a:
08:94:0c:ed:9f:08:f3:27:af:e1:f4:17:9d:80:a3:c1:1d:ac:
2a:07:88:1f:eb:77:19:45:94:87:6b:82:18:ff:f2:ec:2a:7f:
67:61:c5:e0:95:2e:0c:9f:7a:ab:9f:41:d4:94:7b:62:8f:75:
93:8f:9d:05:e6:0d:01:bf:4b:f2:c6:c6:11:b4:9c:82:7f:92:
ea:76:d1:71:96:46:17:d0:cb:6f:0f:a9:56:81:e5:b6:ff:9a:
45:3c:59:81:99:a2:d9:93:03:80:82:75:d1:77:f3:c0:a0:95:
6d:69:0e:3b:47:07:ad:c1:60:d6:ee:df:c2:39:99:d0:53:0e:
c5:79:c0:e8:8e:f0:62:04:dc:9b:81:ba:a4:09:be:cc:aa:8f:
5e:91:95:92:b9:b1:bb:1c:24:3a:e0:b1:c5:2a:22:bf:c8:d5:
ba:10:cd:4e:17:ce:fe:82:da:37:cb:bc:d6:7f:e0:52:ef:7d:
5f:b5:ea:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 13:54:24 2025 by rpki-client