Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/4hv9xJ2bNEDWcqzGsYchdn5kUVY.roa
File: 4hv9xJ2bNEDWcqzGsYchdn5kUVY.roa (raw, json)
Hash identifier: V4068ud7nrpI5Ayn9tZ99ZE/P8vbDb4mLPR/eOpzEt4=
Subject key identifier: E2:1B:FD:C4:9D:9B:34:40:D6:72:AC:C6:B1:87:21:76:7E:64:51:56
Certificate issuer: /CN=1d13cd3dde789d294793afce938a533c02bb84d1
Certificate serial: 0197A1DEB1B2A860A604567B338C6B1E3B57
Authority key identifier: 1D:13:CD:3D:DE:78:9D:29:47:93:AF:CE:93:8A:53:3C:02:BB:84:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRPNPd54nSlHk6_Ok4pTPAK7hNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/4hv9xJ2bNEDWcqzGsYchdn5kUVY.roa
Signing time: Tue 24 Jun 2025 12:16:55 +0000
ROA not before: Tue 24 Jun 2025 12:16:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210204
IP address blocks: 185.235.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRPNPd54nSlHk6_Ok4pTPAK7hNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a1:de:b1:b2:a8:60:a6:04:56:7b:33:8c:6b:1e:3b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d13cd3dde789d294793afce938a533c02bb84d1
Validity
Not Before: Jun 24 12:16:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e21bfdc49d9b3440d672acc6b18721767e645156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:67:02:69:92:7f:20:bd:c6:1a:f0:d6:29:ef:
21:e0:aa:8b:5e:fc:aa:8b:24:65:a7:c1:6a:d6:12:
d7:55:c9:d7:2f:1e:c6:b6:ae:d4:6a:f8:37:1d:3a:
f5:bf:46:b8:a4:52:cb:0c:f2:bd:2a:8f:b6:61:aa:
08:45:04:2e:f6:44:a8:c4:0e:36:28:14:ae:71:95:
05:a9:83:96:06:9e:73:c5:2d:cf:9b:9f:b7:99:21:
c8:67:50:79:b4:2c:69:e5:87:f2:ae:3f:52:9e:c9:
4d:53:b9:7d:aa:4d:c3:fa:73:96:3c:fc:bb:f4:71:
e9:86:fa:0d:db:4f:72:2f:c6:00:aa:1d:f5:53:0c:
fd:df:91:77:99:67:87:4c:5a:15:ab:78:ce:86:96:
a0:77:0a:ad:d4:32:f8:ff:b5:64:18:24:49:9f:64:
32:1b:7e:f4:09:b0:69:61:55:62:09:af:23:a8:4d:
9a:a5:89:af:81:90:d3:3a:d7:62:9c:6a:01:ca:ab:
6b:0c:a6:85:4b:89:4d:5d:64:5d:9d:e7:09:65:ad:
19:8d:d4:3d:fc:50:67:c9:ad:77:7f:7d:1e:67:c6:
25:cc:c9:f9:bc:86:9b:be:f5:df:66:13:a7:68:8a:
6b:ce:d9:c0:ab:3f:fd:7f:01:fa:d0:54:b7:da:bb:
79:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1B:FD:C4:9D:9B:34:40:D6:72:AC:C6:B1:87:21:76:7E:64:51:56
X509v3 Authority Key Identifier:
keyid:1D:13:CD:3D:DE:78:9D:29:47:93:AF:CE:93:8A:53:3C:02:BB:84:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRPNPd54nSlHk6_Ok4pTPAK7hNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/4hv9xJ2bNEDWcqzGsYchdn5kUVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.60.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:12:15:4e:6c:69:32:36:50:5c:0a:b6:bb:8a:ee:a1:c7:0f:
48:a5:e8:de:dd:2a:35:1b:3d:e3:7c:84:66:e1:6d:28:d3:3c:
6a:54:e4:3d:15:2a:84:6c:96:c3:9c:9a:05:0a:17:2b:f0:9d:
8a:76:62:44:95:bd:21:9c:e2:2c:cd:ab:dc:87:20:e4:af:5f:
d4:b7:b0:30:4b:c3:d1:fa:98:a0:0a:dc:88:d8:1b:c9:aa:67:
c7:2e:54:dc:87:85:e8:ab:4e:de:6f:3c:87:89:d4:c0:f3:42:
ea:7c:1b:f9:c8:63:00:cd:40:98:a4:dc:6e:3c:e2:0e:8f:66:
8b:85:db:66:9e:52:b5:d0:21:e2:bf:3c:d4:ac:d1:88:b0:90:
fe:83:af:5e:c5:9f:15:31:ef:63:1d:b2:f6:f2:7d:b7:f1:c4:
30:e1:54:40:ed:f6:0e:1e:48:d5:6c:de:46:d2:8d:57:3c:1d:
e1:02:73:61:b1:58:7a:6b:3e:50:2c:04:3d:e7:0d:0c:ae:8e:
d6:cc:a0:47:79:4f:21:20:7b:ef:f5:77:44:9a:c6:bf:fd:fa:
c6:4c:61:4d:d8:5f:69:5f:60:f2:60:b5:55:c9:79:3c:9a:5d:
20:1c:cb:e6:8f:1a:58:3c:78:e1:d4:4f:45:25:04:e1:79:eb:
d0:72:33:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:50:13 2025 by rpki-client