Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4u-XNaJYXR8t0X6gDh98IYzRLGk.roa
File: 4u-XNaJYXR8t0X6gDh98IYzRLGk.roa (raw, json)
Hash identifier: wjhbEQsVd7pmYjmdx1M+WQUgKIuMvCQ7AXgL852FDXg=
Subject key identifier: E2:EF:97:35:A2:58:5D:1F:2D:D1:7E:A0:0E:1F:7C:21:8C:D1:2C:69
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019843D628AAA7A57A7BDC473A03E3B1D77C
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4u-XNaJYXR8t0X6gDh98IYzRLGk.roa
Signing time: Fri 25 Jul 2025 23:06:05 +0000
ROA not before: Fri 25 Jul 2025 23:06:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 193.189.82.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 07:37:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:d6:28:aa:a7:a5:7a:7b:dc:47:3a:03:e3:b1:d7:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 25 23:06:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2ef9735a2585d1f2dd17ea00e1f7c218cd12c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:aa:5a:ee:f4:66:98:11:ae:aa:d9:0e:47:95:
31:b3:1e:eb:89:6b:a0:d0:b3:48:67:7d:14:3e:b4:
6f:b1:1c:70:f1:b4:48:33:25:ac:05:62:e7:b9:08:
dc:53:f9:7a:7d:54:3f:94:d0:d3:4f:ba:10:a4:f1:
98:5e:93:d6:32:e0:27:47:97:7e:97:14:59:e0:83:
e6:81:0d:da:2e:92:32:e6:e7:81:29:3d:bc:1a:6c:
8b:a7:35:4a:fa:b4:b5:6f:29:49:05:e0:9f:8c:1e:
f8:ec:ca:dd:db:17:61:a5:3d:d2:51:19:b9:89:ad:
7c:9f:a8:7d:b4:78:4f:e3:d3:af:5d:5b:6e:af:93:
a2:f8:25:4e:f9:ca:63:b0:4f:b6:70:83:dd:59:44:
c7:c1:f3:36:46:56:23:fc:ff:19:9b:c3:aa:f1:c3:
23:46:fc:02:af:a0:c3:a0:a2:47:ca:64:3b:49:34:
77:da:9a:73:7e:0d:f0:87:3b:c2:d7:e1:58:4c:98:
2d:cb:ee:ad:30:e1:09:87:1c:61:6e:d9:ea:29:ea:
0c:d2:c1:5c:ab:43:d4:28:a2:d7:29:e6:c9:92:15:
50:e2:2a:c4:06:ef:27:fc:0e:a4:a6:80:fb:0b:57:
bb:c0:dc:e0:36:62:6a:15:e7:1e:f1:fc:35:4b:b0:
0d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:EF:97:35:A2:58:5D:1F:2D:D1:7E:A0:0E:1F:7C:21:8C:D1:2C:69
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4u-XNaJYXR8t0X6gDh98IYzRLGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.189.82.0/23
Signature Algorithm: sha256WithRSAEncryption
12:7e:a3:bd:5f:5c:41:4e:aa:83:06:ef:65:c0:16:3d:4f:16:
f4:51:31:3b:15:0b:d1:91:63:39:18:0d:e3:b0:77:d9:e9:6f:
f2:e3:44:a9:96:6a:9c:f8:0d:1b:25:04:a6:3f:d4:6d:d9:b3:
70:27:d3:15:3c:22:c8:b4:a1:0a:e4:f5:53:75:82:5b:a0:2e:
8e:c5:30:53:c6:76:3a:e2:24:ff:90:17:94:09:23:fe:48:a1:
45:4f:53:37:ee:b3:89:7d:77:b6:9a:59:1c:80:13:0e:58:03:
8d:b8:06:9f:fc:d9:0c:2a:b9:8e:e0:25:7a:22:34:23:ea:39:
82:f3:af:6d:9e:74:2d:f1:a6:4e:0c:75:52:b9:bb:04:98:89:
a7:2a:86:b1:0d:69:70:70:d6:87:0a:04:a1:1f:4c:ab:3f:65:
b6:ef:e8:ad:ae:10:fd:8a:11:04:74:06:4d:1c:b2:fd:33:12:
6e:12:cb:4c:fd:d9:f1:27:28:b6:a9:7a:37:aa:07:26:cd:12:
92:69:44:95:3c:0a:c8:25:4b:31:0a:98:29:49:49:f5:5f:6c:
a4:cf:ef:e6:34:c4:4c:12:44:3a:0e:78:1f:18:0c:f7:85:95:
8b:d9:a5:04:c3:b7:83:68:e4:34:fb:17:63:4d:b0:66:e0:c8:
af:de:2d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:09:02 2025 by rpki-client