Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/4wbMt4tKcNXusEiMmRC_sOdiz20.roa
File: 4wbMt4tKcNXusEiMmRC_sOdiz20.roa (raw, json)
Hash identifier: seyw9xiXc9KRKxQOkiwLoYEup8iG+2g4B4VnVjaHCCg=
Subject key identifier: E3:06:CC:B7:8B:4A:70:D5:EE:B0:48:8C:99:10:BF:B0:E7:62:CF:6D
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 0198C2B9F7B75213C52F82B1AB09DE1452CB
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/4wbMt4tKcNXusEiMmRC_sOdiz20.roa
Signing time: Tue 19 Aug 2025 14:27:04 +0000
ROA not before: Tue 19 Aug 2025 14:27:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397563
IP address blocks: 80.253.252.0/23 maxlen: 24
91.151.80.0/24 maxlen: 24
91.151.82.0/24 maxlen: 24
91.151.90.0/24 maxlen: 24
91.151.91.0/24 maxlen: 24
91.151.93.0/24 maxlen: 24
213.142.128.0/24 maxlen: 24
213.142.129.0/24 maxlen: 24
213.142.130.0/24 maxlen: 24
213.142.131.0/24 maxlen: 24
213.142.136.0/24 maxlen: 24
213.142.137.0/24 maxlen: 24
213.142.142.0/24 maxlen: 32
213.142.152.0/23 maxlen: 24
213.142.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c2:b9:f7:b7:52:13:c5:2f:82:b1:ab:09:de:14:52:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Aug 19 14:27:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e306ccb78b4a70d5eeb0488c9910bfb0e762cf6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0c:0b:4e:2a:cc:a5:50:fa:07:10:df:1e:d3:
6b:44:f1:37:ca:bd:a7:a4:8d:f4:d9:ec:25:5f:c6:
3b:03:fd:30:43:af:cc:0e:f5:bf:9c:79:6c:47:47:
32:65:94:e1:ff:ad:8d:bb:08:54:f1:25:fe:27:9e:
6f:56:de:03:eb:46:04:f3:ef:04:f0:10:96:11:7b:
9e:da:da:4f:4b:56:67:c0:7f:b2:6e:22:68:cc:ca:
92:95:f9:88:17:e4:b3:5a:b5:c5:6c:b3:1e:6e:c3:
1c:55:9b:9b:ac:a8:2b:d0:b2:96:19:89:4f:fe:60:
83:c1:df:5b:7a:ee:0b:5e:3a:a3:a4:0f:96:e9:f3:
4c:51:05:bb:0e:e4:7b:76:26:54:07:2a:0b:69:1b:
de:86:95:9f:a9:4f:c7:13:67:5e:0e:a8:f8:2b:90:
b3:a9:fa:0c:a2:c4:02:c7:33:30:b0:24:6d:0c:98:
30:24:e3:6c:55:ed:62:42:4a:73:2a:33:0e:fb:0d:
0e:e9:a4:d5:78:5a:36:53:ba:7d:81:a0:4e:1b:d8:
80:70:dc:6f:39:5f:26:95:d2:78:da:56:c9:e7:2f:
86:a1:d2:90:a1:25:66:e9:9f:c6:5a:bd:7f:68:91:
b1:9b:86:1c:1a:59:3d:d6:c8:d5:a6:a7:84:f0:a5:
93:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:06:CC:B7:8B:4A:70:D5:EE:B0:48:8C:99:10:BF:B0:E7:62:CF:6D
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/4wbMt4tKcNXusEiMmRC_sOdiz20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.252.0/23
91.151.80.0/24
91.151.82.0/24
91.151.90.0/23
91.151.93.0/24
213.142.128.0/22
213.142.136.0/23
213.142.142.0/24
213.142.152.0/23
213.142.157.0/24
Signature Algorithm: sha256WithRSAEncryption
be:8f:74:c2:e8:53:46:a6:90:43:52:9a:e2:cb:f8:23:6f:a1:
e3:47:da:83:f2:5f:09:01:92:3b:10:ea:21:bc:17:e3:a7:7b:
ca:df:fb:d4:4b:e5:25:af:ba:27:2d:fc:ff:99:18:4e:77:c1:
4e:9b:82:fd:a8:ee:1f:9f:9e:ff:7b:09:92:83:02:d1:f3:da:
8a:6e:00:1a:3b:8c:6e:39:37:22:de:67:ad:f7:22:26:33:c1:
70:e4:d7:07:7d:87:1c:e0:15:a4:b5:1b:bd:ad:b7:fe:03:3f:
8e:27:06:bf:42:eb:52:7c:68:a7:97:ee:b6:da:c2:9f:a2:51:
98:84:28:f8:64:98:e5:52:82:c6:80:50:9b:2f:56:d0:17:6c:
02:7b:60:15:39:2c:34:85:bd:2b:10:05:88:eb:20:72:a4:c7:
f8:6d:1f:7f:d6:18:f4:e1:7f:38:7c:bb:47:f9:e9:25:a7:00:
9b:5c:88:07:24:34:f4:cd:f8:19:08:e6:1e:3d:93:27:24:36:
c0:6b:f7:4f:ab:ca:18:0c:04:e5:e2:76:8c:dc:b5:ef:76:fb:
9d:39:01:b0:95:8c:3f:97:57:90:61:b3:c8:84:c1:0d:99:fb:
1d:ff:c8:59:46:41:39:8b:8d:16:34:7e:75:a6:bc:65:f5:03:
86:27:ae:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:18:28 2025 by rpki-client