Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/4XQY4JUsPqpTR-IRkgGIXdttap8.roa
File: 4XQY4JUsPqpTR-IRkgGIXdttap8.roa (raw, json)
Hash identifier: XSSiKVwP/EIHTyAZzuUfnCWA6Nc9NZgrm28O2+2217Y=
Subject key identifier: E1:74:18:E0:95:2C:3E:AA:53:47:E2:11:92:01:88:5D:DB:6D:6A:9F
Certificate issuer: /CN=123c3de61011de07101e14dc0727395171cb03ab
Certificate serial: 01985C3C4296B8B564059E2F34A0AFF72DBC
Authority key identifier: 12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/4XQY4JUsPqpTR-IRkgGIXdttap8.roa
Signing time: Wed 30 Jul 2025 16:48:29 +0000
ROA not before: Wed 30 Jul 2025 16:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214359
IP address blocks: 185.122.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5c:3c:42:96:b8:b5:64:05:9e:2f:34:a0:af:f7:2d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123c3de61011de07101e14dc0727395171cb03ab
Validity
Not Before: Jul 30 16:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e17418e0952c3eaa5347e2119201885ddb6d6a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:79:ad:bf:72:1c:f4:db:35:9d:4e:7e:20:76:
e4:63:66:a6:a8:00:1c:7a:3e:ee:d4:fe:c7:11:ad:
b2:9d:c4:ba:5e:2d:14:7e:0f:35:e9:63:77:60:75:
74:f9:89:e0:a6:fa:e9:c5:c4:0a:68:14:5a:23:0d:
ba:99:d8:7f:22:03:96:28:6b:33:0c:10:7a:29:19:
4e:29:d1:b7:d0:a1:59:6f:3f:b7:71:4e:82:5e:85:
ae:4c:20:84:11:dd:30:23:0d:a5:02:7f:72:55:5b:
92:00:db:59:2f:4c:3f:1d:74:dc:16:e5:81:cd:7d:
1b:11:8e:3d:d4:29:f9:9a:97:8a:65:a2:5a:2d:11:
92:6d:6f:5b:94:a5:36:e6:e6:46:8e:65:2a:fd:55:
e7:07:02:99:eb:d6:1f:da:0b:86:98:d3:72:0e:66:
34:4c:9a:58:71:07:21:a5:ea:ba:23:5e:b5:7c:bb:
fc:62:e9:04:25:68:94:5e:1e:60:fb:d8:85:af:d8:
f9:f3:35:7e:17:26:68:e2:40:1a:cd:7c:f2:2d:44:
29:74:76:8e:58:c1:83:c7:5a:28:1e:88:b8:45:1e:
37:87:a2:c3:8d:e3:46:1e:08:32:ad:39:73:8b:20:
ba:32:f1:1d:37:92:2b:75:ee:36:da:ca:bb:9f:c8:
40:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:74:18:E0:95:2C:3E:AA:53:47:E2:11:92:01:88:5D:DB:6D:6A:9F
X509v3 Authority Key Identifier:
keyid:12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/4XQY4JUsPqpTR-IRkgGIXdttap8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.255.0/24
Signature Algorithm: sha256WithRSAEncryption
08:b2:4b:82:3f:b0:71:a1:ad:f8:76:ea:18:48:55:04:13:d8:
7c:29:ac:16:fe:e9:86:1c:a3:7b:c5:0b:d2:b0:a0:b6:1a:ff:
04:a2:5f:19:16:fd:5a:b3:d0:12:fd:cd:58:33:e7:e8:11:b7:
1b:0d:d9:93:8f:e1:5b:d1:8e:4e:e3:74:c1:57:dc:71:09:e8:
d7:ab:1e:c8:b9:70:c3:2c:5c:42:dc:1c:75:24:25:11:e7:86:
7d:17:0e:5f:ea:9b:80:45:df:7e:42:9d:5a:88:7c:55:e8:4e:
3f:cd:65:af:3d:73:40:a9:3d:a6:ed:6f:33:26:f3:5e:1e:43:
db:54:d4:8c:ac:45:02:e1:b2:ad:65:5b:9d:8c:49:4a:f0:83:
91:3b:a6:4b:f5:2e:01:fb:97:ef:46:83:d6:4c:6c:00:25:79:
bb:d7:d1:b5:b8:2a:79:5f:2e:78:36:82:db:89:aa:3e:6f:66:
91:15:c5:6b:7d:7c:75:a9:ff:da:9d:4d:eb:b4:bb:ab:20:3e:
2b:38:41:6f:26:31:99:79:7b:0a:9b:7b:f3:b5:c7:0d:6b:76:
09:41:cb:8e:c6:9a:a3:f3:0b:20:00:1f:72:64:2e:e0:d5:14:
fc:e7:39:27:dd:8d:e1:67:96:e2:93:f2:20:79:a8:e0:ab:14:
63:13:b6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:00:26 2025 by rpki-client