Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4hPRxmQTM1tlp5zal47CHbViZWE.roa
File: 4hPRxmQTM1tlp5zal47CHbViZWE.roa (raw, json)
Hash identifier: qI0T2SFS34NNvP4VapxKX6TeFeKdgKAM32X/eys34ds=
Subject key identifier: E2:13:D1:C6:64:13:33:5B:65:A7:9C:DA:97:8E:C2:1D:B5:62:65:61
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019A36642245E0F434D1DB7E2DA389662804
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4hPRxmQTM1tlp5zal47CHbViZWE.roa
Signing time: Thu 30 Oct 2025 18:32:03 +0000
ROA not before: Thu 30 Oct 2025 18:32:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36352
IP address blocks: 178.18.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:36:64:22:45:e0:f4:34:d1:db:7e:2d:a3:89:66:28:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 30 18:32:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e213d1c66413335b65a79cda978ec21db5626561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e7:a3:af:8d:3a:a7:ed:cc:0c:64:cd:0d:a8:
11:10:4e:ac:5d:66:90:02:cc:df:4d:07:f9:f9:41:
5b:a6:d6:28:4b:89:e2:93:90:d5:23:b8:0c:b9:c3:
89:78:c7:93:83:b6:c7:45:c1:07:28:f4:8f:67:3c:
62:2c:d5:0f:fc:98:c9:33:44:38:46:68:e7:be:6a:
bf:25:f3:67:e4:8b:12:9f:5e:a4:17:6f:fa:32:49:
e1:50:5e:a7:c5:ea:b9:0e:83:ba:20:70:8e:a3:dc:
08:9f:3e:63:11:75:8d:4a:a2:4b:aa:b2:b6:95:1a:
30:d5:6d:3c:68:24:1b:7e:ab:55:13:3d:62:a5:81:
49:47:f8:02:ce:6a:40:ae:49:e3:bc:5e:e9:43:ad:
8d:b4:22:41:81:16:27:f8:a8:9a:4c:aa:ab:36:8b:
5a:bb:9b:e1:b9:1f:5c:5a:fb:63:e1:0b:77:d9:45:
7b:c0:13:88:ce:35:5c:36:7a:c8:8f:96:20:fd:1f:
b8:91:a5:67:40:8f:f3:a2:a9:09:1d:fc:66:f3:d9:
99:9e:ec:e6:c6:75:f9:92:31:c8:43:22:ad:e7:38:
07:08:19:6c:09:6f:9e:d0:88:e9:ea:f6:44:81:91:
89:fc:bb:6b:eb:25:1b:03:34:86:2e:a9:39:74:5a:
b9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:13:D1:C6:64:13:33:5B:65:A7:9C:DA:97:8E:C2:1D:B5:62:65:61
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4hPRxmQTM1tlp5zal47CHbViZWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.18.151.0/24
Signature Algorithm: sha256WithRSAEncryption
de:a8:30:54:24:de:a0:5c:b1:82:d5:f3:8c:b4:a1:77:94:6d:
4f:3e:61:dc:c1:0d:3d:57:f5:86:c6:36:45:84:93:97:36:cf:
f1:db:85:20:fa:eb:6b:17:08:96:5d:17:ef:91:64:4b:68:85:
7f:85:47:a6:20:b5:04:1a:89:c3:42:77:3a:49:9a:e1:91:89:
8b:d8:95:ed:a0:ea:67:71:20:f8:f6:b3:9d:35:f6:03:6c:aa:
e8:eb:d9:ae:a3:56:ad:c0:1a:29:b4:8f:2c:0e:79:46:2c:32:
d2:97:55:9d:c4:56:5d:00:55:3a:2f:51:b6:52:ea:aa:01:86:
b5:ec:16:bb:96:dd:59:a8:0c:6e:ac:a1:78:48:81:1c:3c:f3:
4c:7c:dc:d0:b3:7e:df:d9:91:82:49:5b:0a:dc:44:01:13:7e:
e1:15:11:5e:5b:3c:e4:65:62:3b:df:68:b7:72:8f:47:57:75:
bc:2e:e6:ab:8f:4f:72:fd:17:0e:c4:12:d0:74:07:2c:8d:8d:
34:4e:05:c4:0f:7e:77:31:d1:fd:f2:21:55:a0:b5:c9:6c:5f:
1a:9a:e3:19:ba:8b:79:8a:4a:39:bc:0a:da:ba:64:99:d9:e4:
c0:04:42:14:7e:bf:bd:04:9d:0e:4c:3a:b8:f4:89:6b:27:a4:
e1:32:65:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:28:46 2025 by rpki-client