Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/e4LlGesTD6mTPv65_Xasp4NEd_8.roa
File: e4LlGesTD6mTPv65_Xasp4NEd_8.roa (raw, json)
Hash identifier: CpYDArXMRbmqYH5++yHN1CPQrtF6bSosJ95ZT4bP1HU=
Subject key identifier: 7B:82:E5:19:EB:13:0F:A9:93:3E:FE:B9:FD:76:AC:A7:83:44:77:FF
Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Certificate serial: 019934D4F47E69C24E8CDFBB2AF930675ABA
Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/e4LlGesTD6mTPv65_Xasp4NEd_8.roa
Signing time: Wed 10 Sep 2025 18:13:15 +0000
ROA not before: Wed 10 Sep 2025 18:13:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12844
IP address blocks: 158.173.26.0/23 maxlen: 24
158.173.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:d4:f4:7e:69:c2:4e:8c:df:bb:2a:f9:30:67:5a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Validity
Not Before: Sep 10 18:13:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b82e519eb130fa9933efeb9fd76aca7834477ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:37:cb:bc:ab:5f:50:4f:26:dd:46:2e:58:35:
0c:9a:cb:15:b1:c4:8d:39:b6:df:39:1a:4f:66:40:
4a:22:28:90:9a:04:d5:d1:70:12:57:28:77:a8:4a:
34:62:73:00:0b:a4:53:8b:19:e1:88:29:19:1c:03:
76:a4:e2:ca:98:5d:f0:a5:38:63:3d:e1:fe:ba:4c:
f2:0c:d9:76:c1:dd:6d:40:bd:70:c7:50:9c:53:ca:
13:61:3c:97:d5:a2:94:1b:7c:a6:3e:3b:f3:ad:cf:
b1:66:9d:0c:94:12:88:ac:77:68:98:4b:7f:c7:d7:
6c:12:cb:07:61:1d:61:9e:fb:ef:b2:d6:cf:cc:1c:
d1:32:2e:1c:04:fd:c3:99:fd:fb:23:87:46:40:13:
88:8f:36:20:66:8f:bf:ba:70:cb:24:99:00:29:d2:
d1:89:35:d0:af:26:0f:67:83:e3:03:40:56:0d:7e:
e4:21:03:39:73:59:a2:7c:1b:d7:c5:22:9a:e7:d8:
d1:a8:54:5b:c5:d0:c9:b4:cf:1c:e3:88:fa:f9:0b:
80:a5:5c:4d:c6:94:2e:15:b7:fc:b9:f1:81:7a:e8:
a4:af:d9:80:26:e2:ef:3e:83:cf:d7:0c:cb:85:ff:
c1:9d:01:2d:74:83:39:28:e2:cf:16:a3:cb:17:4c:
0a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:82:E5:19:EB:13:0F:A9:93:3E:FE:B9:FD:76:AC:A7:83:44:77:FF
X509v3 Authority Key Identifier:
keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/e4LlGesTD6mTPv65_Xasp4NEd_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.26.0-158.173.31.255
Signature Algorithm: sha256WithRSAEncryption
01:cf:06:68:24:60:77:a3:3b:fb:3c:8c:5f:e3:53:27:0e:90:
c3:05:3e:b7:36:e2:17:a1:4a:00:d5:43:1b:59:70:63:e3:19:
16:4a:4d:72:6f:78:db:e2:5c:61:0b:3a:14:2e:26:a7:76:02:
bf:c8:04:4b:72:85:d5:f8:e4:d7:2b:e5:42:cd:17:0d:ea:85:
1f:2c:ea:f7:97:9c:be:09:db:3c:21:2d:17:87:bd:4f:02:0d:
d9:de:a7:37:29:40:45:3b:1b:d3:5d:37:66:8d:00:04:2c:b0:
d7:0b:62:bb:8e:cf:6f:fb:40:10:26:77:b4:18:4d:9b:00:91:
c3:e1:34:67:67:cf:20:cd:d1:c3:f1:1e:35:3f:2a:b6:30:d5:
6a:b5:be:54:dc:96:e3:33:47:96:35:cb:37:85:fd:71:1a:c7:
cc:67:28:d6:54:92:a3:14:c2:2f:da:c9:5f:0e:59:38:24:3b:
f4:4f:44:8c:9d:51:8a:81:6a:be:a1:3b:99:01:eb:3d:37:88:
01:95:e8:5c:aa:44:7a:2f:0f:81:cf:a2:83:e0:d9:7e:20:ef:
69:aa:24:f4:81:8e:b7:a3:4e:b8:33:a1:88:ad:43:4a:8b:25:
d3:f4:ff:4e:5b:ca:06:8b:78:bc:8a:7b:ec:fc:a6:4c:66:a2:
2a:bf:25:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:45 2025 by rpki-client