
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/4d1Pkq7-lWC3-1U-aIUJanzwNos.roa
File: 4d1Pkq7-lWC3-1U-aIUJanzwNos.roa (raw, json)
Hash identifier: zZsUqZYfGAefG3I0e/YYA4kFIUGe+3X4rCm4R/YUXUc=
Subject key identifier: E1:DD:4F:92:AE:FE:95:60:B7:FB:55:3E:68:85:09:6A:7C:F0:36:8B
Certificate issuer: /CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Certificate serial: 0199CE1A0E403F5019CCA554CD0E6F05CB17
Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/4d1Pkq7-lWC3-1U-aIUJanzwNos.roa
Signing time: Fri 10 Oct 2025 12:30:38 +0000
ROA not before: Fri 10 Oct 2025 12:30:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54252
IP address blocks: 83.136.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ce:1a:0e:40:3f:50:19:cc:a5:54:cd:0e:6f:05:cb:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Validity
Not Before: Oct 10 12:30:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1dd4f92aefe9560b7fb553e6885096a7cf0368b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1c:9e:87:7f:b9:26:e7:5c:4d:99:40:cb:8a:
54:39:bb:e7:d7:a2:b1:64:49:91:3c:da:41:71:ff:
8c:6b:a1:91:e7:61:4c:4d:56:a8:6a:2f:bd:c4:e4:
34:c3:f3:55:f3:22:60:68:9e:e3:14:58:6d:d0:9c:
d3:e5:46:1e:1d:d0:24:3d:88:f7:36:56:3f:4f:77:
41:fd:89:7f:60:b5:ab:0e:6b:d4:97:d0:9c:90:26:
74:c2:86:0c:b6:96:80:8f:2b:82:36:50:c8:76:64:
b3:db:7f:e6:40:c8:e2:e4:8a:2f:51:a7:ce:9e:5a:
80:a6:37:72:32:2b:b2:dd:12:79:ba:72:aa:af:71:
bb:da:98:2f:b7:37:cb:09:b8:b7:59:3d:7c:3b:44:
84:b5:aa:27:78:62:29:47:2a:37:2a:0c:40:d8:02:
b5:29:75:f1:00:71:86:88:eb:6e:2d:f8:4c:80:02:
02:e1:03:32:b4:6f:0c:0a:72:6f:25:33:19:0a:09:
5d:b9:15:0a:e4:c2:8e:08:5d:71:e4:41:3d:ac:9d:
d1:78:ae:77:10:9f:ff:67:fa:e0:de:e2:2e:2f:3a:
17:f8:1b:d2:60:ab:87:56:bc:23:c3:26:be:88:3f:
17:cd:84:ff:97:ee:f5:a2:4c:99:b8:66:11:04:35:
eb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DD:4F:92:AE:FE:95:60:B7:FB:55:3E:68:85:09:6A:7C:F0:36:8B
X509v3 Authority Key Identifier:
keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/4d1Pkq7-lWC3-1U-aIUJanzwNos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.213.0/24
Signature Algorithm: sha256WithRSAEncryption
79:9b:87:e4:a2:71:26:64:22:06:2d:a7:5b:1c:32:ff:79:e6:
35:d0:22:9d:52:fa:47:a5:44:6d:18:8f:ec:84:3c:e7:68:46:
a0:69:67:ee:52:e6:63:21:75:b5:48:97:e8:77:f2:95:d8:d8:
6c:49:76:fc:8a:51:71:0f:b5:c5:92:bd:7a:c6:61:b0:fa:8d:
af:95:f2:0d:3d:d2:d7:61:3c:94:87:37:04:20:0f:92:82:99:
6c:f8:99:9a:c7:f0:11:5c:db:c1:1e:a6:5a:3e:94:ad:21:0b:
11:3d:31:b2:fd:2e:8c:e8:09:50:34:13:74:ab:e8:c9:17:02:
0a:e8:7a:0a:f0:ce:1a:ab:8d:c6:78:5f:78:1b:ff:c3:85:d6:
4f:15:50:54:82:aa:97:00:d3:9b:87:3a:ba:d9:f3:20:69:60:
ba:52:87:2b:c7:a6:b4:7b:c7:94:12:f4:e3:9d:43:75:ce:a0:
94:cc:14:58:93:91:f4:d3:0e:e8:e0:3a:42:ed:1d:9a:51:20:
c7:6a:11:39:6a:6e:29:fd:34:a1:59:62:2b:cf:02:9a:28:98:
eb:a8:2b:25:59:d5:79:55:e8:66:ef:55:c5:ef:ea:fe:7e:5f:
00:c9:ea:85:46:2f:23:46:aa:e4:4d:db:29:81:35:c6:3a:60:
7b:19:f1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:51:46 2025 by rpki-client