Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/4G_hLtAbDUZ70PLgQlRhmGd1eNc.roa
File: 4G_hLtAbDUZ70PLgQlRhmGd1eNc.roa (raw, json)
Hash identifier: wmpDbVETxoLeblIgd50u7tjYlbJnrcIWiWDK1Lpalb4=
Subject key identifier: E0:6F:E1:2E:D0:1B:0D:46:7B:D0:F2:E0:42:54:61:98:67:75:78:D7
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019933DA614882A6EE4C47137EA65822F477
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/4G_hLtAbDUZ70PLgQlRhmGd1eNc.roa
Signing time: Wed 10 Sep 2025 13:39:33 +0000
ROA not before: Wed 10 Sep 2025 13:39:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12735
IP address blocks: 193.35.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:da:61:48:82:a6:ee:4c:47:13:7e:a6:58:22:f4:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Sep 10 13:39:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e06fe12ed01b0d467bd0f2e042546198677578d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c2:25:48:ba:d1:07:f6:9b:80:22:3b:95:8f:
17:ab:97:af:f5:a9:be:d2:70:94:c1:34:52:6f:59:
02:a6:9f:c9:01:f8:96:68:2b:91:b1:b8:4e:12:f7:
3e:7c:1e:d4:65:65:b1:41:07:ef:17:e0:80:ee:f5:
c5:91:95:39:ec:07:9d:60:43:c1:be:06:96:63:17:
a8:14:78:6e:ab:5d:45:c5:b2:aa:99:e5:f7:76:4e:
8f:e0:b2:c7:d1:ed:ab:6c:20:59:87:9f:1a:a3:14:
0a:99:70:6d:be:40:29:d7:7a:47:ac:35:05:20:59:
71:04:dd:3f:89:7d:d0:96:c9:9f:86:29:c6:7d:6c:
c4:90:a7:78:2c:b0:c9:e1:f4:cb:22:3c:ea:49:42:
71:13:09:79:cd:29:61:17:4a:04:c2:47:90:1b:3c:
be:a6:36:03:56:f3:98:51:1c:e6:34:5d:21:43:bb:
5c:60:04:d0:b2:da:9b:3a:18:ad:76:9b:82:84:1c:
0a:0a:f8:87:d7:fd:e7:71:c9:36:b9:67:ed:b5:a9:
9a:93:e8:e3:27:b6:ae:63:91:58:43:7e:96:cb:3e:
2e:f1:27:56:da:8f:f8:29:66:0b:08:25:52:01:5a:
d1:1d:2d:bb:c8:72:d9:e7:fb:2c:69:fd:6d:c8:ef:
99:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6F:E1:2E:D0:1B:0D:46:7B:D0:F2:E0:42:54:61:98:67:75:78:D7
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/4G_hLtAbDUZ70PLgQlRhmGd1eNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.153.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:38:1e:0e:49:c4:b0:36:0d:8f:aa:1e:e2:8a:18:38:83:57:
e6:13:f5:98:b4:83:bf:9c:c7:aa:a5:f6:93:7a:45:4c:be:36:
58:d4:83:57:64:17:6b:f2:e7:c7:23:be:8b:95:9a:25:c2:a8:
32:d7:b6:03:54:0c:72:c3:96:d1:51:08:b3:c5:aa:5b:86:a3:
0e:19:f6:f4:47:d3:94:4b:6a:8f:46:8c:73:4b:8e:d5:ef:b1:
20:75:29:66:c0:e6:1f:57:bc:08:76:1a:b2:b1:65:01:f8:24:
22:9c:45:96:56:0e:8e:b0:83:98:48:6c:e4:c7:30:95:7a:6d:
dd:fc:6f:af:26:50:e3:8a:03:fd:bd:22:3e:24:f0:01:a4:94:
0c:b7:b5:03:88:63:ed:95:ff:ec:59:e6:8e:44:4b:9f:7b:c4:
76:85:f2:6e:5c:e8:03:41:ce:c6:62:30:68:a7:fd:8d:9b:96:
2e:67:25:4e:0b:b9:31:91:29:56:da:10:7c:2b:1c:03:46:69:
d4:11:70:43:b9:06:35:aa:7a:05:18:d5:9b:b6:87:d6:aa:d6:
09:ef:d6:cf:ab:e2:3e:c7:00:55:f0:79:16:58:3d:23:65:80:
1c:90:4b:9c:e9:68:26:26:f1:54:b5:60:2d:f1:ab:f7:42:0e:
ac:d5:67:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 09:42:12 2025 by rpki-client