Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4n2cHJrpJn0ORw59c0WcbKCvGwQ.roa
File: 4n2cHJrpJn0ORw59c0WcbKCvGwQ.roa (raw, json)
Hash identifier: R7VWSDIG3kIzhmByhH6rytUqpJZ/GgBGLrTOIdVxZhM=
Subject key identifier: E2:7D:9C:1C:9A:E9:26:7D:0E:47:0E:7D:73:45:9C:6C:A0:AF:1B:04
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198D18007FCECC44D32E9D79E75A0D56BE9
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4n2cHJrpJn0ORw59c0WcbKCvGwQ.roa
Signing time: Fri 22 Aug 2025 11:18:05 +0000
ROA not before: Fri 22 Aug 2025 11:18:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216022
IP address blocks: 37.202.196.0/23 maxlen: 23
151.243.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d1:80:07:fc:ec:c4:4d:32:e9:d7:9e:75:a0:d5:6b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 22 11:18:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e27d9c1c9ae9267d0e470e7d73459c6ca0af1b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9e:4b:8c:0c:84:71:17:33:fd:44:00:c2:8d:
b3:3f:c3:27:20:b2:26:d4:16:ab:61:0d:77:bf:a1:
fa:b9:e4:fa:11:b8:12:64:5a:e3:2f:97:e2:2f:f4:
11:c8:e2:ce:ca:c0:23:82:79:1b:96:61:00:5f:cf:
fb:8c:3f:9f:4d:8d:5d:1e:bd:aa:cb:14:5b:b4:9e:
e7:c2:b1:cb:a9:27:c0:b3:a5:09:52:12:a1:63:4a:
85:c7:31:36:77:39:27:71:09:d4:ac:a4:ae:0f:ba:
e9:85:97:7d:2f:67:a3:10:1b:95:5f:9c:f6:01:6e:
ae:c7:23:cb:f8:11:f5:1c:73:71:7d:35:57:1b:62:
40:fa:5f:bc:f8:a1:47:b1:37:47:92:26:bc:63:f2:
6a:ab:7c:c6:6a:31:0c:fa:81:c2:2f:50:6a:c1:02:
cf:05:e6:47:18:c8:fa:cb:9e:55:cd:8e:20:b9:bb:
05:2e:9e:34:1a:f7:9c:56:97:e2:e2:69:e3:24:c5:
ec:a9:8c:9e:5f:f6:73:77:b0:8f:7f:66:f3:1f:c3:
65:ea:7e:29:ef:11:28:7f:86:81:e9:f8:dd:c9:a9:
47:80:d3:de:61:71:d3:bf:31:6d:d9:e1:25:7f:7d:
42:58:bc:8a:4a:c2:19:59:bb:ea:57:88:d9:1c:11:
a4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7D:9C:1C:9A:E9:26:7D:0E:47:0E:7D:73:45:9C:6C:A0:AF:1B:04
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4n2cHJrpJn0ORw59c0WcbKCvGwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.196.0/23
151.243.43.0/24
Signature Algorithm: sha256WithRSAEncryption
92:c2:2f:57:ab:c7:1e:3f:ec:e2:71:9d:49:5d:49:96:62:6b:
e7:12:e0:8a:1f:08:cf:14:42:f2:03:58:1e:c6:02:3c:fb:98:
72:ec:50:24:71:db:68:75:db:cc:c6:ff:35:ad:5c:99:03:f9:
47:92:be:9c:8a:b6:23:39:fd:a2:c1:27:7f:e1:99:9c:79:5b:
84:3a:71:39:a4:67:c1:f4:39:24:77:a4:53:fa:78:90:6d:52:
09:f1:8c:3b:6a:fb:57:c0:b3:90:b3:20:46:1d:a0:71:ee:c4:
17:60:5c:01:d7:ba:84:2b:e3:53:8f:7e:11:68:65:d7:e9:2f:
61:93:be:6e:0f:0b:ce:e4:8d:c8:0d:35:35:26:6c:c1:2f:e0:
1d:e4:37:91:0f:0d:41:43:62:30:3c:ea:15:10:e2:84:ac:0c:
7a:92:c0:e3:df:c9:2e:b9:bd:54:c5:73:5b:7f:19:57:58:1d:
ea:b4:37:22:ea:ca:c3:35:a1:2d:ff:1e:54:08:c8:32:cb:ad:
f1:c4:47:0b:9f:50:b0:b6:4e:ab:bc:ec:c2:79:f0:5b:38:ce:
03:34:6c:8f:9d:d1:90:35:eb:37:d0:21:a9:e1:be:38:70:9d:
68:1f:fa:b9:7d:03:13:29:ed:e2:04:ff:21:39:d1:5c:f7:35:
3f:e6:ee:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:14:31 2025 by rpki-client