Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/4ilP7jPFuF0HhMuhBQVrfUkKxrM.roa
File: 4ilP7jPFuF0HhMuhBQVrfUkKxrM.roa (raw, json)
Hash identifier: gHv/lKe2wiiXicxKTk0LqrVMj7gKuLxC/r7kKNYFngU=
Subject key identifier: E2:29:4F:EE:33:C5:B8:5D:07:84:CB:A1:05:05:6B:7D:49:0A:C6:B3
Certificate issuer: /CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15
Certificate serial: 0199B51E63C50EB9E34EB8B912B10DB9D1DE
Authority key identifier: 2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/4ilP7jPFuF0HhMuhBQVrfUkKxrM.roa
Signing time: Sun 05 Oct 2025 16:04:51 +0000
ROA not before: Sun 05 Oct 2025 16:04:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208324
IP address blocks: 176.105.236.0/24 maxlen: 24
176.105.237.0/24 maxlen: 24
176.105.238.0/24 maxlen: 24
176.105.239.0/24 maxlen: 24
195.7.9.0/24 maxlen: 24
195.7.10.0/24 maxlen: 24
195.7.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b5:1e:63:c5:0e:b9:e3:4e:b8:b9:12:b1:0d:b9:d1:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15
Validity
Not Before: Oct 5 16:04:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2294fee33c5b85d0784cba105056b7d490ac6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b0:ec:57:ff:ab:1b:32:53:d7:78:00:69:f7:
33:9a:eb:2e:99:48:40:9f:06:5a:41:23:ac:5d:73:
7c:b0:57:9e:88:cb:8d:b7:2d:e9:99:b9:71:66:fb:
79:85:51:a2:dc:a4:4c:eb:db:15:03:ee:18:b2:7a:
fb:0f:fc:31:d6:41:31:21:5a:aa:fa:dc:cc:66:c0:
08:15:8e:a0:bb:36:1b:16:ac:de:96:92:0c:39:58:
04:dc:77:a9:78:25:57:22:e1:4f:51:7c:18:1b:4e:
7b:dc:9c:ec:35:c0:c6:02:98:fe:6a:78:63:ba:69:
1f:e9:08:33:ad:8c:14:7a:01:1d:0d:ff:67:be:29:
44:53:6b:9d:fa:3c:c6:db:6c:f7:97:0c:fa:d2:1d:
68:fc:50:5a:09:17:32:6b:23:3d:ac:2d:ba:b1:ba:
af:c9:30:71:da:1c:30:0f:9b:15:05:6e:1a:eb:d3:
15:6b:01:1a:39:9d:3f:d0:49:c8:d9:f5:d8:2d:8f:
31:a3:b8:93:12:a7:27:72:33:a0:3e:9b:62:73:fe:
e1:a7:ee:7e:07:eb:c3:90:92:e1:e8:7b:6a:1a:6d:
b7:b5:f4:0f:96:aa:b1:f0:fd:41:82:a4:e2:d9:8d:
8e:c3:dc:7c:d7:3b:ce:b8:93:55:50:2f:5e:6c:53:
ba:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:29:4F:EE:33:C5:B8:5D:07:84:CB:A1:05:05:6B:7D:49:0A:C6:B3
X509v3 Authority Key Identifier:
keyid:2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/4ilP7jPFuF0HhMuhBQVrfUkKxrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.236.0/22
195.7.9.0-195.7.11.255
Signature Algorithm: sha256WithRSAEncryption
79:43:99:19:8a:37:4f:4d:59:53:ab:f9:49:e7:16:b6:b6:8e:
2e:8c:32:9e:8e:60:12:fc:74:e8:a3:c6:fa:8c:67:05:de:75:
b9:05:e6:5c:36:fa:c0:62:86:54:d2:34:74:a6:cd:d7:a1:e6:
40:82:c5:05:ff:73:36:b3:e5:0b:2f:0b:1d:07:e5:f8:f8:80:
ac:41:91:55:7d:50:6c:5c:fe:66:af:34:bc:43:26:89:b2:c1:
48:c0:47:59:93:5b:74:90:6c:22:33:66:82:54:11:0a:34:90:
b1:b3:f7:87:22:9f:c3:15:41:88:31:d5:55:5d:f9:78:12:03:
cc:f6:f1:0e:0b:31:40:3c:d7:f4:f0:4a:26:c7:52:b3:53:47:
77:c6:8d:c2:01:2a:0e:ff:07:88:53:cc:2a:72:08:4e:58:a6:
49:ea:02:47:dd:a3:da:44:5f:a7:0c:b1:18:34:91:73:69:cd:
66:78:d7:e5:80:f4:4e:5d:76:36:cd:0b:d8:7e:5f:a2:49:b0:
e6:81:4a:49:d2:8a:70:f0:29:aa:4f:f4:ea:9a:58:b4:ec:66:
30:ac:e8:53:0b:f3:65:6d:ba:06:8b:29:ea:84:62:66:91:24:
a4:df:6a:f7:17:f4:13:a0:09:32:16:cf:5c:d8:c9:96:7f:1f:
ec:b2:fa:d9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:14:37 2025 by rpki-client