Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4peSVxTbY4zslmn56rvjicgQc7I.roa
File: 4peSVxTbY4zslmn56rvjicgQc7I.roa (raw, json)
Hash identifier: +nu5P8vI7PFQXwbJ6t2Zz3coXWOy63zFOw3M4zv4uDY=
Subject key identifier: E2:97:92:57:14:DB:63:8C:EC:96:69:F9:EA:BB:E3:89:C8:10:73:B2
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019A3517CBB0B82377EED027F8E4018000D5
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4peSVxTbY4zslmn56rvjicgQc7I.roa
Signing time: Thu 30 Oct 2025 12:29:03 +0000
ROA not before: Thu 30 Oct 2025 12:29:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34984
IP address blocks: 203.202.233.0/24 maxlen: 24
2a05:d740::/30 maxlen: 30
2a05:d744::/30 maxlen: 30
2a06:e900::/30 maxlen: 30
2a06:e904::/30 maxlen: 30
2a07:4a00::/30 maxlen: 30
2a07:4a04::/30 maxlen: 30
2a0a:37c0::/30 maxlen: 30
2a0a:37c4::/30 maxlen: 30
2a0b:9800::/30 maxlen: 30
2a0b:9804::/30 maxlen: 30
2a0b:a280::/30 maxlen: 30
2a0b:a284::/30 maxlen: 30
2a0b:a300::/30 maxlen: 30
2a0b:a304::/30 maxlen: 30
2a0c:7440::/30 maxlen: 30
2a0c:7444::/30 maxlen: 30
2a0c:74c0::/30 maxlen: 30
2a0c:74c4::/30 maxlen: 30
2a0c:7540::/30 maxlen: 30
2a0c:7544::/30 maxlen: 30
2a0d:2cc0::/30 maxlen: 30
2a0d:2cc4::/30 maxlen: 30
2a0d:88c0::/30 maxlen: 30
2a0d:88c4::/30 maxlen: 30
2a0f:1180::/30 maxlen: 30
2a0f:1184::/30 maxlen: 30
2a0f:2380::/30 maxlen: 30
2a0f:2384::/30 maxlen: 30
2a0f:3380::/30 maxlen: 30
2a0f:3384::/30 maxlen: 30
2a0f:4580::/30 maxlen: 30
2a0f:4584::/30 maxlen: 30
2a0f:4680::/30 maxlen: 30
2a0f:4684::/30 maxlen: 30
2a0f:5580::/30 maxlen: 30
2a0f:5584::/30 maxlen: 30
2a0f:7100::/30 maxlen: 30
2a0f:7104::/30 maxlen: 30
2a0f:7300::/30 maxlen: 30
2a0f:7304::/30 maxlen: 30
2a0f:7c80::/30 maxlen: 30
2a0f:7c84::/30 maxlen: 30
2a0f:9fc0::/30 maxlen: 30
2a0f:9fc4::/30 maxlen: 30
2a0f:a140::/30 maxlen: 30
2a0f:a144::/30 maxlen: 30
2a0f:a500::/30 maxlen: 30
2a0f:a504::/30 maxlen: 30
2a0f:a700::/30 maxlen: 30
2a0f:a704::/30 maxlen: 30
2a0f:c780::/30 maxlen: 30
2a0f:c784::/30 maxlen: 30
2a14:4080::/30 maxlen: 30
2a14:4084::/30 maxlen: 30
2a14:4380::/30 maxlen: 30
2a14:4384::/30 maxlen: 30
2a14:4480::/30 maxlen: 30
2a14:4484::/30 maxlen: 30
2a14:4980::/30 maxlen: 30
2a14:4984::/30 maxlen: 30
2a14:4a80::/30 maxlen: 30
2a14:4a84::/30 maxlen: 30
2a14:4b80::/30 maxlen: 30
2a14:4b84::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:35:17:cb:b0:b8:23:77:ee:d0:27:f8:e4:01:80:00:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Oct 30 12:29:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e297925714db638cec9669f9eabbe389c81073b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ec:5f:64:62:82:6d:76:dc:b9:73:7d:2a:19:
5c:63:bf:5e:3e:97:bb:1d:07:68:dd:da:ee:93:36:
ba:18:4d:91:d7:b9:0c:b2:7e:e2:fd:c8:b0:8b:cb:
47:f9:b3:c7:3d:1c:08:06:a9:56:99:46:67:89:31:
83:9b:46:41:80:1f:53:10:22:7a:2f:0e:39:ab:0a:
9e:1a:a9:ab:11:e6:d0:2c:73:c0:f1:cf:69:15:ba:
55:0b:28:0e:7e:62:69:7d:a9:b4:cf:b4:68:84:27:
01:c4:df:00:b5:d0:4b:26:5b:45:e6:21:f6:6f:04:
f0:92:5d:6d:39:2f:87:95:29:dc:a4:74:72:9d:7f:
f7:1a:41:ac:f6:22:85:e3:58:81:39:4e:17:6f:a8:
57:e9:63:50:2b:52:58:f3:1b:4b:24:a2:0b:e5:3d:
01:ec:26:7d:0d:d9:7e:e4:86:ff:99:21:e4:9a:ba:
df:d9:b2:b9:92:9d:71:c7:c8:e4:ef:49:cf:54:9c:
9d:da:40:53:61:b4:82:06:fa:4c:56:8e:83:87:b3:
ec:e2:5f:f9:6c:06:f7:dd:49:0a:25:6b:0c:7e:b2:
67:92:48:ca:f8:12:47:25:cf:5b:c4:3c:83:4d:4c:
5b:90:75:05:8f:76:5b:48:f0:b0:24:a4:b8:d1:9f:
ed:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:97:92:57:14:DB:63:8C:EC:96:69:F9:EA:BB:E3:89:C8:10:73:B2
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4peSVxTbY4zslmn56rvjicgQc7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.202.233.0/24
IPv6:
2a05:d740::/29
2a06:e900::/29
2a07:4a00::/29
2a0a:37c0::/29
2a0b:9800::/29
2a0b:a280::/29
2a0b:a300::/29
2a0c:7440::/29
2a0c:74c0::/29
2a0c:7540::/29
2a0d:2cc0::/29
2a0d:88c0::/29
2a0f:1180::/29
2a0f:2380::/29
2a0f:3380::/29
2a0f:4580::/29
2a0f:4680::/29
2a0f:5580::/29
2a0f:7100::/29
2a0f:7300::/29
2a0f:7c80::/29
2a0f:9fc0::/29
2a0f:a140::/29
2a0f:a500::/29
2a0f:a700::/29
2a0f:c780::/29
2a14:4080::/29
2a14:4380::/29
2a14:4480::/29
2a14:4980::/29
2a14:4a80::/29
2a14:4b80::/29
Signature Algorithm: sha256WithRSAEncryption
03:01:0f:15:81:61:08:60:08:e6:0c:92:c4:ef:21:3d:83:ee:
b5:cc:a8:f8:92:ad:18:73:73:2a:79:64:5c:cc:42:be:d7:e8:
23:38:ec:b6:26:3e:15:2d:5a:cf:a7:a7:7d:81:0d:ff:f7:8c:
9e:66:78:21:a7:da:b2:8b:46:3f:5a:7a:d9:65:b1:ad:0f:d5:
2e:f5:18:76:32:48:c0:57:f8:87:29:87:2b:95:2b:6d:91:da:
46:01:85:f9:06:11:52:26:98:fa:1b:27:1c:31:7b:bb:ae:b2:
7e:30:1f:6b:d6:42:ac:59:34:77:32:67:66:0b:08:86:9c:59:
a6:ad:85:fe:44:a0:95:0c:1a:a0:00:db:13:1c:7f:a1:7b:58:
af:a4:2a:55:b6:76:be:26:67:39:86:3c:a4:7e:ed:1c:5c:7e:
27:05:be:db:8f:85:7d:a7:2c:5b:f1:07:a8:b4:3c:f6:f7:c9:
6f:8a:e2:de:ae:01:ec:84:72:33:f5:4d:8e:5e:65:d7:79:aa:
74:79:08:4a:a2:22:96:b8:a6:b8:a3:ae:4b:6d:0b:bf:58:82:
08:e9:9a:7a:c9:87:65:01:b5:39:22:74:a2:dc:41:7d:c9:30:
c9:ef:d1:2e:2a:9c:ed:64:67:0b:83:96:93:4c:26:af:95:a8:
14:8c:a0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:03:00 2025 by rpki-client