Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/4Pfo6dr7-737k8tyVTjGVmWtq04.roa
File: 4Pfo6dr7-737k8tyVTjGVmWtq04.roa (raw, json)
Hash identifier: q2tjhHYa3ywzq75oRuuLup6rX2uYWNVGvc0AQBtWN4U=
Subject key identifier: E0:F7:E8:E9:DA:FB:FB:BD:FB:93:CB:72:55:38:C6:56:65:AD:AB:4E
Certificate issuer: /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Certificate serial: 0198C092D1F5BFC1A9B2ED33237E04737881
Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/4Pfo6dr7-737k8tyVTjGVmWtq04.roa
Signing time: Tue 19 Aug 2025 04:25:04 +0000
ROA not before: Tue 19 Aug 2025 04:25:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56443
IP address blocks: 185.127.176.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c0:92:d1:f5:bf:c1:a9:b2:ed:33:23:7e:04:73:78:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Validity
Not Before: Aug 19 04:25:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0f7e8e9dafbfbbdfb93cb725538c65665adab4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:54:72:2e:46:1f:61:2f:55:6a:27:5e:79:3b:
ce:5b:9a:85:e6:02:46:e5:ef:c9:ea:d4:29:c8:01:
bf:5a:f9:52:3b:08:7b:f4:23:ac:16:64:c4:49:73:
9b:cb:9f:df:cf:02:70:1e:c9:1a:6c:d4:61:6b:eb:
b5:a1:c4:b1:24:b3:a8:7f:42:7c:d5:36:03:41:20:
a7:de:80:6e:96:9e:57:5e:dd:07:7f:94:f5:86:19:
73:bb:61:07:46:6b:57:0c:31:19:d5:cb:4a:cd:f5:
85:21:e5:0e:fb:63:5b:4a:8f:c5:55:a4:be:ff:58:
e9:4b:68:51:ac:23:f5:9c:4f:ae:c0:4c:ed:4b:2e:
3d:89:a8:1a:2b:08:7e:85:e7:7c:ae:95:38:d9:d7:
4d:f3:1d:bb:2a:2c:67:28:76:38:06:c9:5c:c7:8c:
4a:8b:b9:c8:ad:f5:5a:7c:38:cf:52:2b:5c:32:b2:
d3:c1:e6:ce:d7:06:f7:11:e6:24:6a:22:b0:f8:3a:
cd:48:96:8f:33:54:e2:4e:fd:80:f9:6d:8b:38:49:
13:09:29:92:37:b2:f9:ba:97:12:93:29:21:ca:a0:
0e:69:6d:8a:6f:1d:7e:37:03:39:05:7a:27:f3:41:
57:6c:02:f0:8c:90:84:fd:26:0a:5f:be:bc:18:d7:
79:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F7:E8:E9:DA:FB:FB:BD:FB:93:CB:72:55:38:C6:56:65:AD:AB:4E
X509v3 Authority Key Identifier:
keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/4Pfo6dr7-737k8tyVTjGVmWtq04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.176.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:cd:28:35:fb:49:62:59:17:d3:8c:c3:ae:ef:4f:a1:42:92:
ad:67:58:05:1d:04:00:d9:51:ca:bd:ad:ab:83:79:01:69:d4:
70:4f:7a:71:d8:39:ea:c6:54:94:46:93:fb:38:b4:6e:66:41:
9e:11:e3:20:67:af:29:01:e3:0b:82:87:14:c6:9a:34:e7:a4:
cb:52:33:0a:3c:e6:f5:53:0d:0f:d2:4c:7f:fa:c7:56:fc:e5:
88:5d:49:f4:8d:3e:63:ed:3f:6f:d6:c2:ef:76:59:52:16:a2:
5b:eb:c0:34:c2:ca:4f:02:57:a7:ba:7b:a5:bc:99:6a:93:0c:
87:1b:9c:2a:a6:dd:0b:41:88:c3:b5:5d:2b:aa:c0:43:47:42:
76:b9:73:60:b8:2f:0b:c5:73:87:ec:c1:71:21:71:67:73:df:
58:90:78:65:62:9e:e8:51:b8:e0:20:18:9d:3a:2c:61:b1:d6:
e2:27:be:20:83:ec:36:69:fb:d7:a3:08:50:71:56:6a:ba:86:
a7:27:16:8e:47:88:a6:f8:cf:cb:c7:21:33:0e:6a:54:39:f3:
26:58:e2:3a:61:24:47:38:31:47:6d:0f:c7:cc:1a:4a:04:3d:
ed:af:51:f6:f0:64:e3:76:d9:97:0a:2a:f7:7d:a7:dc:7e:c7:
d8:44:3d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:45:11 2025 by rpki-client