Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/4RPSqbfmeC-IC3WR5JrPY-ti6aQ.roa
File: 4RPSqbfmeC-IC3WR5JrPY-ti6aQ.roa (raw, json)
Hash identifier: egyP6+hpVOsfhjTSw14Ho98ZzzCiujpdZ4z2/ZYR+NI=
Subject key identifier: E1:13:D2:A9:B7:E6:78:2F:88:0B:75:91:E4:9A:CF:63:EB:62:E9:A4
Certificate issuer: /CN=c34094e3236dcd1c835113791a3824da2973df9b
Certificate serial: 01997586F991AEF131C556C6E6443A367174
Authority key identifier: C3:40:94:E3:23:6D:CD:1C:83:51:13:79:1A:38:24:DA:29:73:DF:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/4RPSqbfmeC-IC3WR5JrPY-ti6aQ.roa
Signing time: Tue 23 Sep 2025 07:43:23 +0000
ROA not before: Tue 23 Sep 2025 07:43:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47898
IP address blocks: 91.198.249.0/24 maxlen: 24
91.206.252.0/23 maxlen: 23
91.206.252.0/24 maxlen: 24
91.206.253.0/24 maxlen: 24
91.214.136.0/22 maxlen: 22
91.214.136.0/23 maxlen: 23
91.214.138.0/23 maxlen: 23
91.223.122.0/24 maxlen: 24
193.202.118.0/24 maxlen: 24
194.24.236.0/24 maxlen: 24
194.24.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft
rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:75:86:f9:91:ae:f1:31:c5:56:c6:e6:44:3a:36:71:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c34094e3236dcd1c835113791a3824da2973df9b
Validity
Not Before: Sep 23 07:43:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e113d2a9b7e6782f880b7591e49acf63eb62e9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cf:69:38:ac:e7:da:6b:6c:08:0c:00:24:74:
67:d7:e4:20:46:64:84:da:d2:10:7d:2e:55:be:1d:
11:50:5a:24:e7:6e:91:48:45:fa:fc:54:71:2f:73:
80:85:fb:17:4a:87:98:19:e3:66:5c:f1:4c:b4:2d:
fa:94:3f:3e:43:78:f8:51:f1:65:9e:95:7b:d6:f1:
4c:56:0c:ec:7c:8d:ef:c9:fd:26:8b:87:04:72:73:
aa:37:60:cd:64:46:1a:7b:b3:da:22:d3:44:07:3f:
2f:29:be:0b:09:4d:5b:b2:79:e5:99:8f:0e:11:59:
3b:3b:05:e8:de:68:b2:41:07:bc:a2:81:c5:b3:ef:
51:f4:8c:36:fc:a8:ac:dd:fd:f5:6a:66:cb:e4:b5:
19:2a:ba:4e:47:2c:98:5b:04:cc:8c:cb:6d:66:0f:
90:40:ff:b3:d3:43:88:88:3d:3a:cb:5e:0b:cf:85:
05:0b:6d:8d:5c:db:86:d2:ac:c3:07:34:0e:6a:13:
b5:94:18:a6:e7:84:f5:06:ad:92:2b:d3:23:1c:e4:
67:f3:c0:ea:e1:ec:f6:82:91:a1:90:34:90:2b:9c:
e6:62:e5:b3:ca:f3:cb:41:91:46:cd:0e:7a:cf:23:
a4:f9:29:a0:d8:9c:41:7d:77:4b:c2:0b:77:38:1d:
52:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:13:D2:A9:B7:E6:78:2F:88:0B:75:91:E4:9A:CF:63:EB:62:E9:A4
X509v3 Authority Key Identifier:
keyid:C3:40:94:E3:23:6D:CD:1C:83:51:13:79:1A:38:24:DA:29:73:DF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/4RPSqbfmeC-IC3WR5JrPY-ti6aQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.249.0/24
91.206.252.0/23
91.214.136.0/22
91.223.122.0/24
193.202.118.0/24
194.24.236.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:49:5b:62:c0:40:03:ab:43:a1:7f:fe:83:16:5c:a9:4c:c2:
16:75:ef:2a:00:30:3c:16:25:aa:8a:d5:8c:e8:d1:2f:53:91:
74:6b:8e:a6:54:2e:0f:3d:a5:9d:ca:f8:2d:c6:9e:b7:5c:b7:
7d:4b:2a:d6:b7:28:99:d4:78:ed:2f:78:a6:39:ad:0b:93:d8:
17:91:13:eb:5b:eb:19:1e:8a:f1:d4:12:c2:56:6a:59:21:ab:
e8:9c:88:b6:38:91:7d:2f:4a:33:43:31:31:98:8b:5d:50:47:
73:83:90:51:b9:c4:0b:9b:86:d2:42:ce:94:d8:0d:da:49:50:
3e:37:6c:1a:53:c2:91:5a:f9:19:54:a9:e8:22:a2:b2:67:44:
ff:10:c0:e0:58:95:94:01:34:62:cf:aa:38:ed:83:40:2e:b3:
0e:b3:f0:63:e1:f2:88:1f:8f:9b:40:97:df:9a:27:86:c9:21:
a3:32:ae:2e:00:0c:7f:41:eb:67:a3:74:6a:62:33:bb:dc:90:
79:cd:ee:a3:96:0a:73:44:f5:4f:7f:b1:1d:de:0c:45:94:f4:
e8:f1:99:b4:2d:29:c9:c1:a4:d0:fb:ce:9a:6b:07:24:8a:89:
d7:82:52:dd:4c:f2:05:4c:81:2e:b2:50:e6:76:49:eb:56:cc:
66:7a:89:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:23:13 2025 by rpki-client