Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/N4VrPT-BKi8nGUud-HeE1m0kVE4.roa
File: N4VrPT-BKi8nGUud-HeE1m0kVE4.roa (raw, json)
Hash identifier: JGfPfYFGnEYNWCt5FiuNL9WBvAsFzfWhTi0mUjPboFE=
Subject key identifier: 37:85:6B:3D:3F:81:2A:2F:27:19:4B:9D:F8:77:84:D6:6D:24:54:4E
Certificate issuer: /CN=e618eff923e35bf83792353c4633ca2300f75b6c
Certificate serial: 0196F7F5FA25F3608778136DD6F67B4837AA
Authority key identifier: E6:18:EF:F9:23:E3:5B:F8:37:92:35:3C:46:33:CA:23:00:F7:5B:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hjv-SPjW_g3kjU8RjPKIwD3W2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/N4VrPT-BKi8nGUud-HeE1m0kVE4.roa
Signing time: Thu 22 May 2025 12:26:54 +0000
ROA not before: Thu 22 May 2025 12:26:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21840
IP address blocks: 185.218.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/5hjv-SPjW_g3kjU8RjPKIwD3W2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/5hjv-SPjW_g3kjU8RjPKIwD3W2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hjv-SPjW_g3kjU8RjPKIwD3W2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f7:f5:fa:25:f3:60:87:78:13:6d:d6:f6:7b:48:37:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e618eff923e35bf83792353c4633ca2300f75b6c
Validity
Not Before: May 22 12:26:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37856b3d3f812a2f27194b9df87784d66d24544e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4f:86:a3:97:94:35:1c:6d:25:31:40:1d:4e:
dd:43:e1:5e:39:1f:c9:04:7f:18:d6:53:8f:94:53:
1f:df:6b:66:58:81:aa:db:b7:f2:14:7c:9c:2f:53:
7e:ba:be:da:15:93:4b:2f:f4:14:c5:7f:85:33:a9:
e4:03:82:60:58:18:99:11:98:a1:b8:56:32:f4:ae:
2c:f0:de:97:99:b1:fb:4a:05:c4:3b:d5:94:87:b2:
74:4f:de:88:f9:0e:38:36:3c:30:66:5a:3c:5a:28:
1a:89:35:a1:cf:6c:06:84:bf:97:1f:39:94:4a:16:
d8:e8:12:9c:1d:90:81:b5:0a:9d:cf:a2:83:39:ed:
2d:bb:dd:03:c8:d1:51:d9:38:b1:26:4f:5c:43:e3:
f8:1a:68:87:f5:78:b3:b0:22:1e:36:45:bc:18:a9:
d9:9a:b7:68:6d:14:a8:dd:63:36:6c:19:4a:46:09:
de:ab:15:ba:aa:54:41:22:f5:38:a0:a1:8e:61:1f:
e5:ec:64:7d:d5:50:ed:46:11:9d:f3:6c:31:f3:33:
bc:fc:29:3d:75:55:a0:23:df:f1:34:69:36:e0:4c:
ad:be:4f:66:0a:af:51:58:6c:a8:ee:dc:51:ee:d6:
5e:a0:62:e7:73:26:81:d4:24:d2:b3:88:b9:25:59:
68:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:85:6B:3D:3F:81:2A:2F:27:19:4B:9D:F8:77:84:D6:6D:24:54:4E
X509v3 Authority Key Identifier:
keyid:E6:18:EF:F9:23:E3:5B:F8:37:92:35:3C:46:33:CA:23:00:F7:5B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hjv-SPjW_g3kjU8RjPKIwD3W2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/N4VrPT-BKi8nGUud-HeE1m0kVE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/5hjv-SPjW_g3kjU8RjPKIwD3W2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.142.0/24
Signature Algorithm: sha256WithRSAEncryption
43:d4:1c:a6:71:d4:9e:f6:37:59:5b:22:1d:5e:f3:c3:55:50:
b3:90:7a:cd:2d:3e:7a:2d:41:7c:4f:56:2f:59:a8:41:6c:22:
a5:a9:66:24:ae:d7:fd:11:03:9f:1b:4e:79:c2:02:63:b5:eb:
20:07:36:be:1a:38:53:19:31:a7:38:fd:a0:5c:60:b7:13:4b:
be:d6:eb:c3:89:20:c0:10:27:ab:44:8b:bb:de:05:75:2d:fb:
56:3c:de:24:87:d4:e8:16:1d:e0:da:4f:30:63:a0:a7:ab:19:
67:26:46:90:8f:8a:75:63:67:73:d1:1f:aa:f5:f1:62:ee:f2:
fa:24:ca:b7:01:e0:49:ba:fe:17:95:61:b1:96:3c:51:a9:13:
0e:e5:8c:4a:eb:98:f8:98:25:06:f9:e5:87:8d:69:9a:2a:dc:
c0:3d:d1:57:db:3e:26:7e:bb:ad:e1:1b:f1:8d:07:cb:19:be:
f9:3c:d3:e3:00:75:e9:60:96:fb:cb:fd:17:8a:12:45:54:a4:
b0:ac:e0:fa:14:3a:95:e1:e5:89:4c:23:92:b3:9b:81:21:4f:
4b:16:db:8d:b0:f8:fa:89:d0:56:44:d1:8a:9e:30:8f:67:a2:
ea:d0:d1:84:9e:8e:9e:4a:59:7b:28:24:0c:bb:9e:79:a2:f4:
e6:28:d1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:17:34 2025 by rpki-client