Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/4FynWQReK8fRxN_uNnLkwTP2lYE.roa
File: 4FynWQReK8fRxN_uNnLkwTP2lYE.roa (raw, json)
Hash identifier: VEq12KahPtGBV1be7sGcqyI3vqUnKDMcKj34J54Xm3k=
Subject key identifier: E0:5C:A7:59:04:5E:2B:C7:D1:C4:DF:EE:36:72:E4:C1:33:F6:95:81
Certificate issuer: /CN=dfd0fbc4de81ee2727aba3e910afcd2a53a6640c
Certificate serial: 019A4D66A1C1CEA03C008BA4C918B5B48F46
Authority key identifier: DF:D0:FB:C4:DE:81:EE:27:27:AB:A3:E9:10:AF:CD:2A:53:A6:64:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39D7xN6B7icnq6PpEK_NKlOmZAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/4FynWQReK8fRxN_uNnLkwTP2lYE.roa
Signing time: Tue 04 Nov 2025 05:46:03 +0000
ROA not before: Tue 04 Nov 2025 05:46:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 193.138.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/39D7xN6B7icnq6PpEK_NKlOmZAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:66:a1:c1:ce:a0:3c:00:8b:a4:c9:18:b5:b4:8f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd0fbc4de81ee2727aba3e910afcd2a53a6640c
Validity
Not Before: Nov 4 05:46:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e05ca759045e2bc7d1c4dfee3672e4c133f69581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f7:72:cd:3d:fa:86:4f:cf:62:b7:18:44:44:
6c:c9:92:9d:c4:1a:07:23:0a:61:00:d7:0e:a3:87:
cb:08:03:55:55:4a:31:89:53:c8:ec:9c:2b:5e:6a:
7e:f7:b9:b0:0d:34:60:ca:8b:d7:d6:2f:f3:ed:2e:
94:46:8b:76:1c:10:fd:26:07:d9:6e:28:e3:ee:d8:
72:fa:a1:f2:e0:0f:69:60:63:cd:b5:2e:1d:12:fc:
a2:c5:da:cb:75:d0:eb:9e:2d:96:d6:c1:d2:ee:0f:
bc:f3:f9:d0:ef:0c:49:f9:8c:cb:eb:ba:00:52:9a:
16:bc:03:39:10:e6:ba:b8:0c:7c:0f:fd:a9:da:ea:
16:f7:bb:0d:ba:e0:59:4c:71:e0:4f:88:96:28:ab:
d0:f4:c6:ef:41:ec:68:85:ca:59:e0:73:4b:06:d9:
7a:5f:f3:22:3b:c9:62:46:5b:d8:d7:ac:4f:cb:ea:
41:c8:ee:a0:8a:f0:9b:9d:1a:52:15:39:2e:33:b2:
8c:f8:f0:f4:8a:db:07:75:ef:a8:4b:c3:e4:c0:b5:
0d:51:bb:d2:93:14:32:77:55:0f:1b:30:1b:3b:99:
50:64:50:16:96:9a:53:29:54:a3:01:ce:3e:bd:6b:
17:2f:72:40:9b:21:b0:2e:e5:d5:db:69:35:2f:a2:
59:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5C:A7:59:04:5E:2B:C7:D1:C4:DF:EE:36:72:E4:C1:33:F6:95:81
X509v3 Authority Key Identifier:
keyid:DF:D0:FB:C4:DE:81:EE:27:27:AB:A3:E9:10:AF:CD:2A:53:A6:64:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39D7xN6B7icnq6PpEK_NKlOmZAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/4FynWQReK8fRxN_uNnLkwTP2lYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.77.0/24
Signature Algorithm: sha256WithRSAEncryption
82:51:f4:28:39:fe:ac:f5:f3:19:1a:41:d0:38:7e:4c:43:fa:
23:20:02:de:fd:b5:b8:8c:a9:cb:80:bd:3f:39:f6:9a:65:8d:
05:f3:89:92:1f:95:4a:a4:cd:0d:93:88:5d:9a:a2:bb:ea:95:
e1:37:f3:6a:b9:0d:c6:e5:94:ef:ef:3d:bd:7c:f5:00:35:cc:
1d:ea:8a:6d:24:63:90:34:f2:31:0f:d2:7e:04:e1:33:5a:4c:
96:90:3b:8a:f9:23:4a:2a:98:6c:0b:45:2c:13:b3:60:61:2c:
be:cc:e3:3a:8c:2c:91:97:74:bf:67:be:34:6e:20:a0:a6:26:
95:f6:ab:47:63:50:ad:40:09:91:f9:91:cb:fa:9a:c2:aa:ad:
05:26:3c:b9:3f:ff:fd:df:94:73:de:15:52:47:c1:8e:5b:5b:
ff:3c:07:f8:ab:fb:92:8c:d7:08:35:bc:87:d4:99:69:55:e1:
9e:9a:5f:c5:22:21:ac:a5:98:12:e3:fb:f5:7c:34:b7:88:bb:
b5:5f:ad:84:c7:88:68:51:3a:dd:84:cb:54:bd:1b:df:59:f6:
eb:bb:10:9f:ed:00:8d:0a:93:72:ab:d9:63:f9:a4:b9:74:fa:
75:eb:20:24:40:13:df:29:10:08:d8:1e:64:72:40:e5:4c:bc:
0c:18:3c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:03:30 2025 by rpki-client