Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4bVWZHhbY73keFV-dOCf1QIhDX4.roa
File: 4bVWZHhbY73keFV-dOCf1QIhDX4.roa (raw, json)
Hash identifier: OkbAQR0GOP1o4huU/1jBIe/gDDuuJ0uXZe4/Rf42Mt8=
Subject key identifier: E1:B5:56:64:78:5B:63:BD:E4:78:55:7E:74:E0:9F:D5:02:21:0D:7E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0199398C8D53AE1940021B6337EFF1757FA0
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4bVWZHhbY73keFV-dOCf1QIhDX4.roa
Signing time: Thu 11 Sep 2025 16:12:16 +0000
ROA not before: Thu 11 Sep 2025 16:12:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4515
IP address blocks: 151.242.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:8c:8d:53:ae:19:40:02:1b:63:37:ef:f1:75:7f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 11 16:12:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1b55664785b63bde478557e74e09fd502210d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ef:e0:de:22:5e:4e:2b:14:28:88:35:2a:c5:
9d:8e:52:a0:ba:d5:2b:f6:04:16:a1:88:e9:cf:ff:
12:8b:ef:18:34:99:b2:b0:ef:60:4b:fb:b7:6a:59:
10:09:a7:d1:e0:77:ba:bd:3d:d2:a5:c4:ce:4e:ac:
df:3c:bf:96:0d:9a:c1:32:55:79:0b:65:12:f8:42:
9d:16:62:1d:1c:90:24:a8:1e:58:64:3e:f5:aa:bf:
65:79:9f:ff:c0:64:0a:01:a2:6d:21:3c:2f:4c:bb:
f8:36:5c:c8:99:f6:9e:1a:25:24:76:4e:43:c9:0a:
73:ab:38:18:3f:ed:21:56:e9:73:02:5a:08:77:0b:
e0:59:a9:94:4c:98:2a:6a:40:0e:21:9f:46:b7:36:
ad:b3:59:8f:53:a0:41:fe:68:24:a6:50:17:01:dc:
cb:d5:be:6e:ac:c7:55:74:2c:b8:71:b1:2c:be:aa:
15:b7:34:ae:0e:ca:76:04:a0:62:b2:24:23:bf:db:
92:a6:ce:91:86:83:01:c8:7b:d1:7a:ad:a7:12:68:
4a:db:43:db:ff:f3:83:43:5d:5c:80:20:61:e3:5d:
f8:3b:46:a7:af:1f:60:fe:14:33:99:2a:98:0b:35:
59:63:30:50:cf:fb:db:59:7a:8a:c6:0a:1a:39:92:
5a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B5:56:64:78:5B:63:BD:E4:78:55:7E:74:E0:9F:D5:02:21:0D:7E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4bVWZHhbY73keFV-dOCf1QIhDX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.180.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:07:3a:6e:b1:77:50:7f:06:ae:61:a6:84:cf:22:cb:71:f4:
f3:4c:97:56:19:b0:26:d2:6c:68:a0:a3:f9:53:fd:2d:b5:0a:
3c:53:7c:08:ef:f5:28:85:c5:c7:87:62:4a:5d:b2:c6:0d:4c:
5b:2a:f8:af:22:7d:00:67:e8:17:05:35:07:5e:0e:1a:1a:1b:
10:d6:6b:5a:78:ec:b0:85:04:f1:ab:c1:03:8e:5b:ef:56:c5:
9d:60:46:1a:6c:79:56:4c:56:01:6e:2c:0a:8c:9c:63:68:4e:
34:5d:93:ae:08:87:30:2c:2f:ff:56:1b:36:dd:92:64:a1:aa:
48:02:63:bc:ad:de:b5:ab:e1:5e:0b:39:75:87:83:a5:ea:48:
11:26:3b:c2:ee:41:dd:11:3d:50:ea:f7:d2:6c:eb:cf:b2:88:
72:7a:72:fc:3d:75:0e:72:e6:16:08:e6:55:ed:81:20:8a:31:
54:7e:e4:c6:8d:06:7b:26:33:cc:0a:ea:55:5e:ef:ed:b0:69:
31:d2:eb:2c:f4:b5:30:eb:0f:54:6d:33:43:ad:3b:1e:75:d2:
31:2d:34:e3:95:c1:52:d9:ca:3a:ab:10:c9:a2:67:22:21:88:
39:ee:8c:4b:04:5e:ce:ce:ff:69:49:32:dd:e8:db:3c:17:40:
ae:08:84:45
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZk5jI1TrhlAAhtjN+/xdX+gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwOTExMTYxMjE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWI1NTY2NDc4NWI2M2JkZTQ3ODU1N2U3NGUwOWZkNTAyMjEwZDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAue/g3iJeTisUKIg1KsWdjlKgutUr
9gQWoYjpz/8Si+8YNJmysO9gS/u3alkQCafR4He6vT3SpcTOTqzfPL+WDZrBMlV5
C2US+EKdFmIdHJAkqB5YZD71qr9leZ//wGQKAaJtITwvTLv4NlzImfaeGiUkdk5D
yQpzqzgYP+0hVulzAloIdwvgWamUTJgqakAOIZ9Gtzats1mPU6BB/mgkplAXAdzL
1b5urMdVdCy4cbEsvqoVtzSuDsp2BKBisiQjv9uSps6RhoMByHvReq2nEmhK20Pb
//ODQ11cgCBh4134O0anrx9g/hQzmSqYCzVZYzBQz/vbWXqKxgoaOZJaXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOG1VmR4W2O95HhVfnTgn9UCIQ1+MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvNGJWV1pIaGJZNzNrZUZWLWRPQ2YxUUloRFg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl/K0MA0G
CSqGSIb3DQEBCwUAA4IBAQCeBzpusXdQfwauYaaEzyLLcfTzTJdWGbAm0mxooKP5
U/0ttQo8U3wI7/UohcXHh2JKXbLGDUxbKvivIn0AZ+gXBTUHXg4aGhsQ1mtaeOyw
hQTxq8EDjlvvVsWdYEYabHlWTFYBbiwKjJxjaE40XZOuCIcwLC//Vhs23ZJkoapI
AmO8rd61q+FeCzl1h4Ol6kgRJjvC7kHdET1Q6vfSbOvPsohyenL8PXUOcuYWCOZV
7YEgijFUfuTGjQZ7JjPMCupVXu/tsGkx0uss9LUw6w9UbTNDrTseddIxLTTjlcFS
2co6qxDJomciIYg57oxLBF7Ozv9pSTLd6Ns8F0CuCIRF
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:21 2025 by rpki-client