Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/E4EO3fVQfns_Atan7LvwnUxSb-U.roa
File: E4EO3fVQfns_Atan7LvwnUxSb-U.roa (raw, json)
Hash identifier: vCMtsAfqgWBbXg/7LBWpNDaXZdUfwGEZ9HYBIRzNGqg=
Subject key identifier: 13:81:0E:DD:F5:50:7E:7B:3F:02:D6:A7:EC:BB:F0:9D:4C:52:6F:E5
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 0198C77277E4B1203D6E4A3D1384732E5950
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/E4EO3fVQfns_Atan7LvwnUxSb-U.roa
Signing time: Wed 20 Aug 2025 12:27:04 +0000
ROA not before: Wed 20 Aug 2025 12:27:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214943
IP address blocks: 45.141.233.0/24 maxlen: 24
78.159.156.0/24 maxlen: 24
94.26.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:72:77:e4:b1:20:3d:6e:4a:3d:13:84:73:2e:59:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Aug 20 12:27:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13810eddf5507e7b3f02d6a7ecbbf09d4c526fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:55:d7:ac:3f:ee:17:d3:10:a5:c3:57:07:40:
81:da:77:fa:ec:d6:7c:b3:e5:77:40:22:30:82:ec:
e1:ea:d0:24:28:e6:af:34:04:87:46:03:46:53:d0:
11:3a:90:44:26:53:66:9c:97:79:ae:ca:1e:77:26:
66:08:f5:28:29:46:4c:98:95:78:d0:4c:2b:c8:a5:
6a:4e:55:85:bb:e4:39:81:82:b1:7a:5d:48:7c:95:
75:63:ff:45:3b:b6:d2:04:bd:87:34:95:db:6a:46:
32:45:ef:c3:c4:60:82:ff:9b:e0:e5:8e:37:86:71:
a2:9a:70:d9:31:18:4c:ac:88:5f:b8:5c:c6:b9:7e:
ed:84:a7:09:5a:7d:7e:59:bc:7d:23:ae:0d:b5:ed:
db:62:7a:3d:8d:0a:68:28:e4:54:d3:fe:db:49:86:
0f:56:f6:4e:8a:4f:90:61:02:e3:23:a9:a4:ed:62:
b0:e3:6e:ef:cd:6a:20:25:ea:d4:d0:f4:a5:53:c3:
81:b2:f6:e2:2a:61:41:8e:fa:47:eb:4a:c4:8d:1a:
3c:5c:a3:7e:d9:ca:ed:4a:de:96:54:d4:31:3b:8e:
fc:da:e8:73:f1:b6:4e:b8:00:1b:d0:49:f4:c3:2e:
4f:cc:e8:6e:01:b2:13:94:cc:52:ef:7d:3b:3b:cc:
61:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:81:0E:DD:F5:50:7E:7B:3F:02:D6:A7:EC:BB:F0:9D:4C:52:6F:E5
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/E4EO3fVQfns_Atan7LvwnUxSb-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.233.0/24
78.159.156.0/24
94.26.90.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:f6:f0:53:67:aa:6c:c8:9b:4b:db:87:9b:ae:4d:71:9c:c5:
1d:de:cf:12:32:d1:ec:14:c1:45:f3:a0:70:23:34:77:91:03:
74:ca:a3:91:1d:ae:bb:8c:5f:eb:2f:f5:59:74:aa:c1:67:5c:
6a:e4:1a:4f:92:dd:df:b0:ed:12:9a:38:ca:f2:77:8b:72:3e:
cb:7d:47:48:a7:ec:4c:a8:e4:c3:1d:a6:42:b4:83:03:27:be:
64:c3:11:c8:af:1e:70:15:8c:b2:51:37:6e:04:49:fc:cb:10:
53:77:c0:07:03:a3:39:38:0a:bf:68:e1:3c:9b:57:56:df:33:
88:77:ae:34:99:2d:c1:00:ad:9d:69:29:fc:82:0d:06:8c:1f:
aa:fd:fa:8c:d2:dd:cd:e5:ee:55:9e:5d:b3:2d:a1:d1:46:83:
40:6f:43:1a:04:85:c2:b0:09:cb:2b:ec:f5:23:a8:21:38:94:
96:cf:54:86:08:08:d0:82:52:09:d6:77:75:40:e5:8d:83:a0:
97:71:59:80:31:0d:cd:1d:46:66:80:4e:6f:74:f3:8b:e3:1f:
81:9b:a3:f8:93:27:f8:9b:7c:13:71:de:99:81:36:bd:f1:cd:
9b:9e:6d:19:c1:f4:7c:af:2c:43:72:df:f6:eb:54:76:d1:b2:
2e:c8:ae:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:35:03 2025 by rpki-client