Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/4PwOSUrjTPELgAlwtbJup9ssmd4.roa
File: 4PwOSUrjTPELgAlwtbJup9ssmd4.roa (raw, json)
Hash identifier: ECLFH5SH4PpnSHbEmRjXMrjcKpWME+T+GWIJpU5UWsE=
Subject key identifier: E0:FC:0E:49:4A:E3:4C:F1:0B:80:09:70:B5:B2:6E:A7:DB:2C:99:DE
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01997B0562CCBBEE91146579B016207B9BE4
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/4PwOSUrjTPELgAlwtbJup9ssmd4.roa
Signing time: Wed 24 Sep 2025 09:19:34 +0000
ROA not before: Wed 24 Sep 2025 09:19:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207506
IP address blocks: 146.120.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7b:05:62:cc:bb:ee:91:14:65:79:b0:16:20:7b:9b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Sep 24 09:19:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0fc0e494ae34cf10b800970b5b26ea7db2c99de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0f:ed:cf:3d:56:59:9d:fb:4e:ec:bd:ca:e5:
27:94:a6:16:00:04:b3:f6:e4:d0:f1:d9:40:d6:4d:
ec:04:97:8f:a0:62:da:1b:45:d1:8e:89:28:d1:4b:
0a:6d:f8:c3:ed:ca:6c:4c:32:cb:c6:f9:d6:c9:ec:
e6:f8:49:7a:03:01:c3:c5:a4:60:03:45:73:27:e4:
c2:f1:41:17:0a:5e:34:40:d5:69:66:6c:2e:6f:90:
33:82:70:48:48:32:d0:7f:41:c3:2e:91:38:1f:07:
09:20:f6:d6:5f:b1:b1:02:4d:6e:af:7a:81:64:f6:
7e:26:2c:5f:f8:31:4d:d7:96:ee:26:56:cc:80:7d:
ef:24:58:10:c6:f5:35:59:b8:9b:a2:d4:c3:79:05:
aa:4f:ad:ea:f6:80:26:a4:0a:fb:bc:94:fd:5e:24:
66:9e:57:cc:e4:a2:71:5a:6b:be:82:f2:b3:20:58:
f7:70:ce:70:34:09:1c:5b:9a:c9:a9:60:f6:8d:ae:
24:ff:67:e4:aa:dc:1e:ff:58:eb:a0:5f:52:48:40:
2a:1b:4f:13:5a:5a:73:53:c4:b2:b9:ab:6d:87:2f:
85:b6:e0:a0:f9:4a:3e:a3:2b:57:e9:68:ac:d0:98:
20:fe:72:ee:91:b2:3e:5a:d1:75:0d:ab:13:af:4c:
32:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:FC:0E:49:4A:E3:4C:F1:0B:80:09:70:B5:B2:6E:A7:DB:2C:99:DE
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/4PwOSUrjTPELgAlwtbJup9ssmd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.241.0/24
Signature Algorithm: sha256WithRSAEncryption
13:67:6e:05:ed:83:d3:8a:98:23:49:83:ac:d9:85:ec:ef:57:
29:6d:58:f5:66:d3:a9:4b:f8:8a:b1:a9:27:c4:79:8f:eb:3d:
ca:97:0a:68:dc:d7:de:0a:9e:67:44:b9:60:07:00:2f:c2:fc:
5a:ec:98:4e:4a:90:df:99:f0:db:84:e8:d4:9d:51:5a:51:bf:
37:17:ae:ad:57:89:67:76:53:1f:7b:a7:81:72:9f:69:a0:6f:
f1:36:f2:1d:ee:f5:af:95:ed:5f:3e:d8:0e:70:22:dd:24:d5:
9f:04:0b:47:7c:3a:0c:a4:27:c7:64:83:5e:f4:ea:cc:e9:be:
1a:e6:6a:99:9d:2f:a2:46:82:a3:bf:e9:41:24:49:cc:c3:16:
8f:ec:c7:36:9e:64:be:38:dd:e3:05:1c:7a:43:3b:a3:ef:40:
ad:45:c5:a9:24:22:94:9a:c6:51:d8:51:59:c9:bb:69:72:02:
27:21:a1:e8:14:9c:03:03:e6:60:e3:80:ca:d1:1f:56:42:70:
e4:97:d0:ce:f5:81:46:18:20:50:2c:e8:62:07:60:8c:7e:1c:
16:8d:2e:0e:6d:cd:58:58:30:61:d7:ec:99:d3:ee:c6:b9:ac:
6e:71:ff:77:91:bc:f8:0d:6a:36:5f:55:4e:4c:93:36:90:61:
73:4e:ca:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:12 2025 by rpki-client