Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/4iFL4Rjk8z0J-TUPx3tyOCKNMCE.roa
File: 4iFL4Rjk8z0J-TUPx3tyOCKNMCE.roa (raw, json)
Hash identifier: mD2TGVE+TeCfcEhfzrfNiwVtfpV6m0G/Os3vpZIoBGU=
Subject key identifier: E2:21:4B:E1:18:E4:F3:3D:09:F9:35:0F:C7:7B:72:38:22:8D:30:21
Certificate issuer: /CN=83f8fd7493a2fe056222db41ed693083b50eccfb
Certificate serial: 019A01AF160674011CDA11A85D40D1DC7A2A
Authority key identifier: 83:F8:FD:74:93:A2:FE:05:62:22:DB:41:ED:69:30:83:B5:0E:CC:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/4iFL4Rjk8z0J-TUPx3tyOCKNMCE.roa
Signing time: Mon 20 Oct 2025 12:54:02 +0000
ROA not before: Mon 20 Oct 2025 12:54:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41913
IP address blocks: 91.103.152.0/23 maxlen: 23
91.103.154.0/23 maxlen: 23
136.143.168.0/23 maxlen: 23
136.143.170.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:af:16:06:74:01:1c:da:11:a8:5d:40:d1:dc:7a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83f8fd7493a2fe056222db41ed693083b50eccfb
Validity
Not Before: Oct 20 12:54:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2214be118e4f33d09f9350fc77b7238228d3021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:73:84:14:a1:2e:ff:9e:c1:5e:8c:43:24:16:
91:bd:76:d0:ca:1d:92:43:59:36:08:da:9c:27:8f:
d0:60:13:c1:94:db:cd:5b:3f:1c:9d:83:e6:15:25:
40:25:55:42:ff:45:61:9f:22:88:3c:c9:86:b8:29:
ff:c8:6e:90:69:c2:0a:bf:c6:33:9d:18:c8:90:49:
c6:1d:34:53:c2:46:48:ae:18:54:e0:84:3c:a1:61:
04:3e:7c:14:4f:15:d4:5e:3f:82:6e:fb:2f:b8:9b:
d5:fa:40:b0:c6:8f:f1:5a:e4:e9:ba:3f:a1:fc:4e:
c6:b8:de:74:62:b6:55:e8:d9:af:b0:ab:bf:09:c2:
45:bd:ea:8b:2e:f3:34:97:2f:91:6c:b8:61:95:9c:
04:a9:ef:0c:d7:aa:bc:57:0d:99:d0:bf:34:5a:f8:
c3:10:cc:1d:87:78:18:9d:f1:6c:d5:67:cc:4e:fd:
46:92:bc:84:26:13:46:74:6c:b1:c8:7c:e3:6c:7f:
65:47:0f:27:7d:92:fa:84:89:27:39:ed:a8:f9:bc:
32:64:12:c8:31:27:56:b9:68:4e:e2:c8:31:fd:3f:
01:6c:f6:13:ed:34:2a:1e:84:c7:81:08:7c:57:38:
79:dc:e3:64:fe:a4:fc:45:a9:bf:a4:bd:8e:15:32:
fa:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:21:4B:E1:18:E4:F3:3D:09:F9:35:0F:C7:7B:72:38:22:8D:30:21
X509v3 Authority Key Identifier:
keyid:83:F8:FD:74:93:A2:FE:05:62:22:DB:41:ED:69:30:83:B5:0E:CC:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/4iFL4Rjk8z0J-TUPx3tyOCKNMCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.152.0/22
136.143.168.0/22
Signature Algorithm: sha256WithRSAEncryption
49:38:f6:85:72:39:c4:b4:aa:84:58:42:83:b5:23:df:45:4c:
6b:96:33:74:07:3a:b4:e9:82:b4:d8:cd:33:32:fb:71:2f:4f:
59:62:0e:f3:e9:45:ec:f3:59:39:01:93:a2:a5:89:86:a5:c8:
0b:bc:ac:89:25:d8:80:cc:8c:a8:e8:ce:5f:e4:37:dc:5b:76:
3b:28:9e:bc:c3:be:89:78:6e:ab:74:c7:02:ce:8c:8b:ae:1a:
51:24:45:1b:7b:01:dd:0d:65:68:df:57:4a:91:71:ce:d7:27:
57:66:c9:e5:2e:48:7e:29:b6:fe:98:63:88:4b:08:29:5c:98:
86:06:b3:0f:76:e2:73:c0:25:3d:ff:02:4a:a7:dc:68:6c:5c:
6b:0a:c3:1b:3c:04:24:12:d8:8f:09:05:99:e8:90:62:6d:91:
70:9e:34:f7:4d:af:97:a0:27:5a:2d:c5:c4:72:d1:7f:84:49:
fd:68:dd:af:62:c9:5f:a1:89:d9:d4:00:42:33:d7:2f:8e:c6:
eb:ed:b3:4f:98:9b:65:86:95:0e:87:41:02:d2:3c:82:be:78:
49:6c:3d:f4:83:a3:84:5d:d7:ef:87:fb:95:3d:49:59:f0:b9:
f4:72:14:6a:70:6b:f6:45:bf:75:5b:79:cb:21:94:cb:f1:7b:
03:cc:78:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:11:18 2025 by rpki-client