Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/4b9wapi-A3xvohc41Khc1lUVmhg.roa
File: 4b9wapi-A3xvohc41Khc1lUVmhg.roa (raw, json)
Hash identifier: iNy46VLu2un4QkjNe7VEFguyWUL0vvJsdCZlhuaclZQ=
Subject key identifier: E1:BF:70:6A:98:BE:03:7C:6F:A2:17:38:D4:A8:5C:D6:55:15:9A:18
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01977816ECFDE13D5A546AA0167AB8BD5C2C
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/4b9wapi-A3xvohc41Khc1lUVmhg.roa
Signing time: Mon 16 Jun 2025 09:34:17 +0000
ROA not before: Mon 16 Jun 2025 09:34:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 188.255.210.0/24 maxlen: 24
188.255.239.0/24 maxlen: 24
212.69.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:16:ec:fd:e1:3d:5a:54:6a:a0:16:7a:b8:bd:5c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 16 09:34:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1bf706a98be037c6fa21738d4a85cd655159a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b2:3b:ad:20:c2:fc:8b:55:ee:48:6c:30:0c:
23:05:28:16:0d:fb:87:94:32:5b:22:55:74:da:ef:
8f:f8:8e:33:90:6b:76:41:e9:f9:80:d8:92:3a:bd:
dc:76:77:b1:8d:48:c8:07:48:d9:16:fe:19:cc:08:
b5:d0:cd:f0:e4:05:1a:fd:9b:43:ca:9f:b6:62:9b:
5b:9c:fe:16:71:f6:16:29:7b:15:59:ac:ca:c6:5a:
28:a4:9e:95:8e:de:57:b7:76:dc:8e:92:e4:a1:e5:
99:5e:60:f3:64:00:76:a2:22:12:b0:2f:3d:a8:8c:
60:ed:d5:1b:1b:bd:4b:16:8d:d5:a4:bc:fe:36:8a:
94:fa:08:bb:cd:e9:07:13:6b:05:69:82:2a:e2:fd:
59:0c:db:34:87:9d:0c:6d:2c:ff:b0:c7:0a:45:3f:
e5:ea:d2:dd:bb:d0:8a:17:01:90:a1:47:be:a1:27:
f9:d7:87:54:cf:91:b1:58:95:c5:39:f2:c4:26:5c:
5c:ba:42:55:b3:67:ab:3a:c3:81:bb:b6:14:31:83:
9f:29:86:e3:fc:a4:35:2a:a1:ab:84:9f:e3:31:fe:
be:7a:8f:fc:7a:70:a0:3e:35:ae:9e:7d:5f:b2:11:
37:ef:12:59:3b:95:21:80:76:06:cc:eb:c9:9d:56:
2d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:BF:70:6A:98:BE:03:7C:6F:A2:17:38:D4:A8:5C:D6:55:15:9A:18
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/4b9wapi-A3xvohc41Khc1lUVmhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.210.0/24
188.255.239.0/24
212.69.1.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:e6:dc:b8:a1:80:ab:ac:4d:ca:b9:d9:d3:81:ef:2c:cc:ee:
b2:85:88:c9:79:e5:ed:22:e2:44:9b:63:dc:9d:86:3a:44:d7:
e1:9e:43:ea:19:84:73:3b:ce:91:e8:36:70:e7:2c:a1:6c:ee:
4b:df:35:12:b6:13:8d:03:31:a8:00:ef:58:1d:89:61:1d:f3:
c7:f3:3b:5d:bb:f8:ce:4d:93:d7:4e:1f:c6:a6:36:02:04:0c:
7c:66:19:c8:f9:83:fe:87:7f:d6:06:ec:2e:c4:58:22:d6:74:
68:7c:2a:45:ff:2c:ef:36:6c:61:84:b5:4f:27:aa:e8:1d:bc:
a9:04:ca:e4:e7:9e:b6:60:12:9b:06:85:b4:7e:fd:f9:f1:24:
c7:08:81:5e:80:b9:73:e4:a5:ce:68:83:3f:10:68:86:fe:78:
d9:71:45:3d:0a:01:96:50:86:13:50:31:d7:29:87:c8:c6:14:
80:8e:75:7b:ed:e5:d2:f6:08:1e:95:66:60:e7:4b:b3:08:fa:
6d:56:f3:bc:62:47:0d:aa:0b:90:e3:cf:51:0e:01:2b:3c:99:
be:95:8a:df:c7:e4:c9:28:7f:87:11:14:76:d5:11:9d:57:b2:
44:42:0c:dc:03:59:d9:3a:5f:cf:75:ee:83:19:02:a8:30:7a:
e4:e1:5b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 03:58:01 2025 by rpki-client