Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/4Ws8Sjvx72Hy6J5E-P_EI_q3Slo.roa
File: 4Ws8Sjvx72Hy6J5E-P_EI_q3Slo.roa (raw, json)
Hash identifier: uWN9nsMDOn0xfjEWkhhvUgtWX2KzO1qJYjAx6fiUPH0=
Subject key identifier: E1:6B:3C:4A:3B:F1:EF:61:F2:E8:9E:44:F8:FF:C4:23:FA:B7:4A:5A
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 0198F040A2D2405F552B295EBEAF3B822E52
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/4Ws8Sjvx72Hy6J5E-P_EI_q3Slo.roa
Signing time: Thu 28 Aug 2025 10:37:04 +0000
ROA not before: Thu 28 Aug 2025 10:37:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214271
IP address blocks: 213.220.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f0:40:a2:d2:40:5f:55:2b:29:5e:be:af:3b:82:2e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Aug 28 10:37:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e16b3c4a3bf1ef61f2e89e44f8ffc423fab74a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5f:99:2e:33:5d:9b:1d:29:ab:6d:fa:cb:6c:
78:01:5f:d2:a9:d7:a4:b7:15:16:43:b0:63:33:f7:
f4:35:6f:7b:37:a3:90:97:c9:ee:f6:b4:d9:93:f0:
07:81:73:3e:3c:c5:55:6e:bb:91:bb:06:85:3f:eb:
d5:56:d8:24:b6:59:25:6e:3b:aa:9d:64:19:ef:a2:
3b:0a:10:ec:3f:8d:c3:91:92:c3:44:ae:bf:85:32:
84:be:d7:f3:c3:1a:18:0c:41:c0:0e:04:81:0c:38:
c2:ea:b0:ee:6b:83:b8:4b:95:cd:da:1e:40:af:43:
08:e9:fc:fa:00:e1:af:02:9d:c5:2d:95:51:77:0b:
d1:d9:c7:7c:c4:02:a1:36:40:a9:f0:df:96:b0:94:
5c:e3:73:04:e8:e0:4e:a6:19:8a:63:dd:f0:1b:6f:
d4:41:ab:d3:09:d5:ce:f5:01:29:31:e3:11:a5:a0:
bf:5e:7e:dd:0a:33:40:13:d6:0f:98:49:9c:3b:8b:
82:60:1d:94:64:d2:7c:f4:a0:98:7b:99:d0:46:87:
72:6f:dc:c0:fd:0e:b7:0d:c4:d5:f3:73:83:34:a2:
57:a4:71:01:52:33:8d:5c:0b:35:f9:e4:43:28:67:
a2:c5:b6:09:e0:47:09:6e:b3:c2:5c:a9:03:b2:20:
75:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6B:3C:4A:3B:F1:EF:61:F2:E8:9E:44:F8:FF:C4:23:FA:B7:4A:5A
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/4Ws8Sjvx72Hy6J5E-P_EI_q3Slo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.220.5.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:cd:b6:1d:03:60:4f:88:c1:c2:95:d0:d0:3c:8c:75:07:b2:
41:50:00:d5:33:8f:54:ef:ba:6c:a8:77:44:65:52:e8:a0:ee:
b8:e8:86:2e:2e:e5:3c:6f:ff:4d:d0:ca:a5:b2:0a:61:aa:73:
99:93:3a:85:66:ef:f8:e9:b1:18:46:3f:6d:28:e4:72:31:25:
0c:08:d5:e8:95:fd:ca:65:e2:56:e1:82:55:85:6b:3e:38:b0:
6b:95:84:bd:90:d5:66:65:f6:01:ae:0d:55:3e:8d:c7:7e:f1:
1e:8f:d3:48:4a:7f:b7:7f:11:3d:fc:8e:2d:d5:30:fb:79:7b:
83:f3:31:13:56:0a:56:05:8d:f9:e2:e3:11:fa:13:52:2e:58:
9e:51:18:cd:75:b9:c6:da:cd:22:72:09:e7:42:f7:df:fd:5a:
29:16:47:66:26:7f:d1:9d:da:b8:00:33:1f:ef:f6:83:4a:12:
4f:c5:5d:14:8d:b7:7f:6b:a3:1c:01:54:da:56:52:89:81:25:
36:56:b7:f7:0d:b9:26:89:8f:f8:5f:cc:4d:ba:97:bf:19:a6:
7e:6c:83:89:3c:75:a9:65:0b:5f:8f:80:f2:f5:84:94:9d:81:
c1:9c:d3:04:bb:da:28:0a:89:ef:08:4f:c3:58:97:a3:a1:f2:
24:53:e9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:11:56 2025 by rpki-client