Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/4wUZf81dDkIeAPvjdALKJO_OOPc.roa
File: 4wUZf81dDkIeAPvjdALKJO_OOPc.roa (raw, json)
Hash identifier: HqwNO12raLEf5yNUI8l+TH+b+XfQFpo8GF0GMhT1w60=
Subject key identifier: E3:05:19:7F:CD:5D:0E:42:1E:00:FB:E3:74:02:CA:24:EF:CE:38:F7
Certificate issuer: /CN=dcbfb0048a8da556fd9d3df1077402f843f5d703
Certificate serial: 01993B9F8AAE2D3463185DBC156391AC32C1
Authority key identifier: DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/4wUZf81dDkIeAPvjdALKJO_OOPc.roa
Signing time: Fri 12 Sep 2025 01:52:15 +0000
ROA not before: Fri 12 Sep 2025 01:52:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 32519
IP address blocks: 193.110.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3b:9f:8a:ae:2d:34:63:18:5d:bc:15:63:91:ac:32:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbfb0048a8da556fd9d3df1077402f843f5d703
Validity
Not Before: Sep 12 01:52:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e305197fcd5d0e421e00fbe37402ca24efce38f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7e:a4:99:4f:96:5c:16:99:56:84:d3:68:d9:
97:d8:8f:48:1a:e7:ba:90:fb:12:3a:4f:16:48:9c:
fe:5e:65:0a:e6:9b:ae:df:94:14:52:82:f7:d9:5e:
e4:83:91:dc:7e:b0:02:22:5c:40:09:60:58:57:81:
3a:0a:e6:0e:84:a7:db:10:30:3c:7a:32:25:e8:dd:
4c:27:58:34:91:38:16:37:51:99:74:53:b2:de:33:
7b:2f:90:43:2d:19:0a:3f:8f:40:92:f9:11:79:46:
9f:4e:37:0f:eb:f2:14:49:ef:c5:78:ff:b5:5a:5a:
07:be:4b:87:40:10:01:b7:74:09:70:3d:e2:10:5f:
5c:e2:4a:d1:2a:e2:fc:f8:38:45:36:48:c3:50:cd:
a0:57:43:fc:9f:34:20:10:f3:a2:b4:3f:ad:97:eb:
20:4c:26:48:af:33:e8:55:18:5c:c4:f7:0a:51:62:
d6:43:42:9b:31:0b:99:66:62:0e:d2:84:a5:fd:67:
f4:f3:f0:3d:a7:26:e8:b5:6f:1c:a8:c1:4c:53:ba:
92:7d:59:81:28:7c:98:bb:79:2e:a8:0e:03:8e:93:
00:4e:37:6a:d6:0f:72:38:fa:6a:36:95:b9:0f:42:
ab:a5:74:43:50:e6:4d:ee:69:67:10:8d:44:7f:a1:
fc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:05:19:7F:CD:5D:0E:42:1E:00:FB:E3:74:02:CA:24:EF:CE:38:F7
X509v3 Authority Key Identifier:
keyid:DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/4wUZf81dDkIeAPvjdALKJO_OOPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.200.0/22
Signature Algorithm: sha256WithRSAEncryption
25:ab:23:9b:f8:00:1b:4d:82:2e:53:db:d0:6d:d6:a3:34:c7:
90:2f:aa:ed:2e:dd:79:11:ae:9f:34:c4:aa:d6:ce:9e:b8:54:
ba:60:82:98:07:31:ee:84:32:3e:83:f8:01:7d:a3:2b:36:a3:
d9:25:7a:8e:61:af:2e:86:72:62:21:67:93:c0:18:c1:48:de:
1d:7f:2e:90:03:c0:5b:14:b7:e4:ba:0c:29:12:69:af:bf:db:
a6:1f:57:4b:a8:14:05:2b:1f:68:db:d1:7c:05:47:cf:78:da:
3f:11:f6:0e:54:2b:6d:ce:ab:a1:4b:32:95:2b:5a:47:fd:6a:
a5:39:1a:5f:b7:52:1f:0f:3a:ef:e8:0b:69:8e:c3:99:2e:fd:
f1:db:df:59:41:34:4c:db:36:50:6a:86:6f:03:95:53:ca:e5:
22:93:e9:a6:6d:1c:e3:e6:69:51:3d:2c:f4:84:ab:b2:d5:7a:
b2:6f:be:48:24:eb:bd:ae:6f:3a:61:7f:8a:da:14:93:f1:58:
0c:a4:01:13:2a:61:fa:01:86:10:95:1a:b0:47:ad:22:c5:35:
73:79:4d:4d:c2:66:45:ef:f9:b4:30:de:20:91:4c:26:23:51:
46:4c:15:45:6e:d7:54:46:4f:02:9d:84:4b:8a:32:85:2e:db:
78:c0:d8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:22:07 2025 by rpki-client