Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/4RKx0TPWpjyqFnYw_5DcC4r--8c.roa
File: 4RKx0TPWpjyqFnYw_5DcC4r--8c.roa (raw, json)
Hash identifier: EeJxEgHcgX2POFtcheGSjZ/nSQoAG58B2CWKgWaFLHU=
Subject key identifier: E1:12:B1:D1:33:D6:A6:3C:AA:16:76:30:FF:90:DC:0B:8A:FE:FB:C7
Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial: 0199A937AF49D72DC7B8F8A50D7A3AA5DFB4
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/4RKx0TPWpjyqFnYw_5DcC4r--8c.roa
Signing time: Fri 03 Oct 2025 08:37:02 +0000
ROA not before: Fri 03 Oct 2025 08:37:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43700
IP address blocks: 14.102.4.0/22 maxlen: 24
31.172.224.0/22 maxlen: 22
45.84.244.0/22 maxlen: 22
78.158.0.0/19 maxlen: 19
78.158.0.0/20 maxlen: 20
78.158.16.0/20 maxlen: 20
95.215.140.0/22 maxlen: 22
185.246.240.0/22 maxlen: 22
185.252.108.0/22 maxlen: 22
185.252.204.0/22 maxlen: 22
216.25.0.0/22 maxlen: 22
216.25.0.0/23 maxlen: 23
216.25.2.0/24 maxlen: 24
216.25.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a9:37:af:49:d7:2d:c7:b8:f8:a5:0d:7a:3a:a5:df:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Validity
Not Before: Oct 3 08:37:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e112b1d133d6a63caa167630ff90dc0b8afefbc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cb:13:87:0e:ed:3d:2f:75:dd:65:c3:a0:9e:
99:33:d5:1d:27:9f:e5:62:64:a0:84:dd:32:53:d7:
09:37:cf:0e:7f:21:c6:e5:fe:0c:2e:07:0b:40:ca:
f6:fb:0c:1c:7d:b4:1f:5f:70:e1:ca:ab:bc:6d:67:
ae:48:a3:6f:59:b9:ef:f8:4c:7c:c1:b5:ef:db:ff:
56:7f:6c:8b:59:ed:a7:eb:43:dc:92:72:07:09:50:
c2:36:16:bf:94:cd:d4:87:77:43:39:75:21:78:51:
69:5e:2d:aa:ee:11:cd:06:e2:73:03:58:1f:db:df:
90:da:b0:82:39:b2:ce:24:26:03:65:28:69:08:2c:
5e:73:52:75:cc:2b:d0:c7:ff:dd:6a:35:53:ff:28:
4f:eb:4e:eb:55:37:87:96:52:a7:12:26:50:91:b5:
e1:8f:7e:bd:40:63:b5:44:44:ae:62:ff:bb:24:1a:
64:dd:f1:b8:03:23:b8:e9:65:2d:94:5a:67:00:1d:
fa:b4:a9:2f:d6:a3:3b:bb:78:99:a5:06:1a:98:32:
23:ae:fd:c5:eb:d3:13:5f:36:0f:21:60:f9:4f:b3:
69:42:3c:c2:32:55:ce:a9:3f:c7:f1:de:81:00:a8:
dd:78:1b:37:5f:4d:ef:36:03:2f:87:0d:9e:2a:07:
cc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:12:B1:D1:33:D6:A6:3C:AA:16:76:30:FF:90:DC:0B:8A:FE:FB:C7
X509v3 Authority Key Identifier:
keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/4RKx0TPWpjyqFnYw_5DcC4r--8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.4.0/22
31.172.224.0/22
45.84.244.0/22
78.158.0.0/19
95.215.140.0/22
185.246.240.0/22
185.252.108.0/22
185.252.204.0/22
216.25.0.0/22
Signature Algorithm: sha256WithRSAEncryption
17:3b:b3:b8:5c:93:9a:76:50:e1:fa:45:54:90:b8:25:78:9d:
87:f9:f8:bb:6a:d3:09:c1:08:f7:0d:01:a8:df:83:f1:aa:12:
92:33:0a:7f:d0:d0:5a:ce:5f:c2:8a:84:b3:cf:e8:c0:c0:79:
f2:93:66:37:f9:49:1b:c1:1c:73:d3:70:f2:81:5e:b7:7a:34:
02:13:c3:55:e0:97:fb:dd:fe:08:09:b7:04:1e:fd:11:ce:63:
8b:17:7c:14:66:f6:9b:06:24:99:58:72:6d:65:bf:96:60:23:
a5:7b:ba:b7:55:b4:b8:00:84:46:c3:be:8a:2e:26:70:31:f3:
80:b9:72:95:e7:cc:2b:3c:d5:af:f4:b8:2c:ad:a0:1c:b9:64:
09:92:61:4f:85:6e:67:c2:86:5b:c7:29:5b:80:88:91:99:18:
5b:33:a3:25:23:dd:1d:99:27:e9:9e:7f:68:2d:55:d7:fc:74:
86:12:eb:41:1d:06:24:26:7b:6d:cd:61:db:dd:e3:d2:b5:34:
e9:5a:8d:d4:b7:bb:c5:74:26:4c:76:a5:54:65:68:d4:17:17:
84:5e:d1:5e:fb:63:d4:85:37:97:90:3a:7e:80:16:02:ca:7c:
53:80:13:cd:67:60:26:08:5e:e8:4a:e2:da:0d:63:68:dc:b4:
40:49:7e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:50:13 2025 by rpki-client