Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/4EBLQiUigXa_kHRgKUQlBdf2vQs.roa
File: 4EBLQiUigXa_kHRgKUQlBdf2vQs.roa (raw, json)
Hash identifier: jB+fJelPc+bKwLGuPQtWiTZOTzyJjm6S+9AcmCEgdhI=
Subject key identifier: E0:40:4B:42:25:22:81:76:BF:90:74:60:29:44:25:05:D7:F6:BD:0B
Certificate issuer: /CN=c612adfabf915df33198935808cf0df9738dca87
Certificate serial: 0197CF95D570AA23EBBD611D61ACA75E64A7
Authority key identifier: C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/4EBLQiUigXa_kHRgKUQlBdf2vQs.roa
Signing time: Thu 03 Jul 2025 09:19:52 +0000
ROA not before: Thu 03 Jul 2025 09:19:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203063
IP address blocks: 185.145.0.0/24 maxlen: 24
185.145.1.0/24 maxlen: 24
185.145.2.0/24 maxlen: 24
185.145.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Jul 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cf:95:d5:70:aa:23:eb:bd:61:1d:61:ac:a7:5e:64:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c612adfabf915df33198935808cf0df9738dca87
Validity
Not Before: Jul 3 09:19:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0404b4225228176bf90746029442505d7f6bd0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8a:cd:71:1a:0e:f8:84:c4:23:d5:3d:f1:1e:
f3:9b:a0:07:68:36:4a:fa:84:17:31:49:b6:3d:49:
24:0d:ed:a0:7f:1d:86:ba:7a:38:17:63:f3:1c:45:
d8:b8:f9:82:de:f5:91:6f:32:90:ee:cb:e7:1d:0a:
3d:1a:66:cd:43:0d:1b:72:90:6a:d9:4e:f9:1f:c2:
99:44:59:7c:dc:2a:b9:71:0d:1e:1f:54:7a:64:9e:
a3:a5:4e:86:82:67:64:30:fa:c4:68:21:1e:bc:71:
8f:37:e7:84:82:f3:89:46:31:64:72:6d:08:f5:76:
95:79:cf:e7:0e:f4:89:45:6d:db:8a:cc:23:ca:e7:
69:8a:a4:9b:e4:2e:9d:9e:e6:cd:6a:23:5a:bc:ed:
12:97:51:cb:43:57:f3:1e:22:cd:87:eb:0f:55:fd:
cd:bf:a0:90:e9:cb:42:9b:95:04:0c:be:d9:49:99:
be:20:e4:48:d0:b8:95:a9:ca:00:fc:58:93:63:a9:
03:0a:ba:b0:0c:fb:e3:e3:ff:e5:fa:80:43:0a:76:
fe:5d:24:b9:f2:5d:9f:8c:06:80:ba:48:bf:5b:c5:
6d:5c:1b:53:9d:3d:3c:23:70:a0:bb:1f:4e:a4:c4:
2c:3e:84:0e:2d:5f:22:3c:ff:07:5d:52:64:e8:ec:
fb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:40:4B:42:25:22:81:76:BF:90:74:60:29:44:25:05:D7:F6:BD:0B
X509v3 Authority Key Identifier:
keyid:C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/4EBLQiUigXa_kHRgKUQlBdf2vQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.0.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:d3:53:4a:bf:fd:5e:fc:28:65:5f:2c:2b:43:4a:80:1e:25:
f8:1f:9a:4d:eb:f8:44:5b:f5:4e:05:fa:0b:4f:42:20:fa:cc:
b8:ea:ad:68:b7:5a:e8:ed:d7:d5:ba:5f:67:f8:e5:1c:57:1e:
80:60:db:51:32:42:ec:c0:c8:d2:77:d9:5c:42:0a:26:22:65:
67:e3:68:c9:f6:9b:ba:8e:e0:cd:0a:3e:60:8a:6f:2a:60:6e:
af:cf:30:4b:e3:23:d9:8e:ab:78:2b:dc:7d:47:72:3a:9f:0c:
5c:78:9e:ca:6c:1f:b6:30:ef:80:63:13:94:4a:4d:17:0a:9f:
3e:0b:9b:89:0e:26:b8:4b:bd:5b:a7:9b:b3:55:d3:30:8e:9a:
f0:58:5c:71:eb:f7:5a:d2:4e:5f:2c:83:93:de:4c:20:e6:03:
8f:9b:d0:bb:7f:32:b3:18:ea:35:1a:88:91:6f:bf:09:ba:c5:
c3:f5:43:e5:35:67:b6:a4:33:5c:dc:5b:3a:43:22:8e:d2:cb:
66:dd:52:a8:60:7a:af:66:9c:fa:d5:80:2c:04:e1:bc:b5:d3:
38:1b:f5:f7:25:05:c7:41:28:4d:74:f7:58:54:c9:8f:44:5c:
90:3a:86:5c:50:9a:c5:f3:d4:50:cc:53:b1:28:29:e0:2b:5d:
e4:98:97:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 20:45:17 2025 by rpki-client