Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/CS4l_id3Je0z4XeIOUJDEbc0r1E.roa
File: CS4l_id3Je0z4XeIOUJDEbc0r1E.roa (raw, json)
Hash identifier: rmNUVxx5iMwI7gyHQJjeN+M8yPfccTNkB2emgtgmWcU=
Subject key identifier: 09:2E:25:FE:27:77:25:ED:33:E1:77:88:39:42:43:11:B7:34:AF:51
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0197680BE00D1B68981150CED56E26F8B51F
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/CS4l_id3Je0z4XeIOUJDEbc0r1E.roa
Signing time: Fri 13 Jun 2025 06:48:18 +0000
ROA not before: Fri 13 Jun 2025 06:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207569
IP address blocks: 46.243.1.0/24 maxlen: 24
46.243.4.0/24 maxlen: 24
46.243.6.0/24 maxlen: 24
95.81.112.0/24 maxlen: 24
95.81.113.0/24 maxlen: 24
185.37.194.0/24 maxlen: 24
185.37.195.0/24 maxlen: 24
194.79.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:0b:e0:0d:1b:68:98:11:50:ce:d5:6e:26:f8:b5:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Jun 13 06:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=092e25fe277725ed33e1778839424311b734af51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:86:64:3f:7e:2a:19:b9:c8:2f:ea:5f:ac:33:
a1:cf:d1:30:5c:25:c5:9d:bb:96:84:12:93:6b:44:
5f:8c:21:d5:b0:44:12:de:db:76:24:00:4a:72:63:
56:5e:72:ae:ca:54:59:b2:d4:12:d2:cd:3b:2d:8f:
88:d7:76:97:7f:ce:43:cf:42:89:4f:ee:09:d6:dc:
10:e0:d5:4d:5d:aa:9d:7a:d4:61:45:bf:9a:07:3f:
50:ef:56:c8:72:76:14:59:8e:7a:0e:81:83:3d:5b:
b0:9b:83:a8:c7:d7:5b:f8:9a:72:bf:1e:7e:ac:76:
b9:3f:f9:23:8d:0c:9d:56:68:94:57:c8:15:33:17:
21:1e:4c:f8:2f:c3:9a:eb:61:64:9e:bd:07:14:0c:
e0:94:b0:b2:34:a4:8e:1e:17:94:92:50:27:e1:bd:
93:00:81:98:50:46:54:8a:7a:9a:95:14:b1:51:8d:
36:d4:bb:d7:e3:42:29:56:46:4d:00:d2:2e:13:b2:
8a:90:ed:9e:71:56:97:8f:c7:1b:0a:5a:d1:e7:9e:
f2:d8:7e:f5:35:87:76:73:64:dd:dd:93:04:6f:75:
4b:a1:bb:14:54:25:b0:cb:27:96:de:c6:59:e4:6a:
05:50:21:87:73:af:b3:7a:d0:06:d6:17:f7:5b:b2:
03:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:2E:25:FE:27:77:25:ED:33:E1:77:88:39:42:43:11:B7:34:AF:51
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/CS4l_id3Je0z4XeIOUJDEbc0r1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.1.0/24
46.243.4.0/24
46.243.6.0/24
95.81.112.0/23
185.37.194.0/23
194.79.60.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:59:09:51:41:3a:fc:56:56:18:76:1e:e1:85:3e:3d:88:75:
93:a6:af:ba:06:f7:42:17:91:54:bb:a4:2e:9a:13:6d:6b:ee:
88:e0:90:6c:6c:3a:8c:53:ad:e7:4e:c6:52:4c:b9:8f:43:ce:
87:f8:70:9b:f1:1e:5b:6b:bd:2b:77:85:e1:49:12:ce:69:64:
a4:29:90:45:c7:58:8d:a0:0d:40:df:50:ee:5b:65:29:a8:f6:
e4:d0:1a:88:e4:eb:ef:5d:03:d2:e2:f3:a0:da:19:7e:c7:ec:
1e:58:72:95:b0:4e:5b:b8:0c:44:72:8d:c8:8f:0f:9d:63:87:
d2:15:b1:cb:ca:a7:5d:75:16:0d:2b:50:dc:96:53:51:2c:8d:
68:a7:8f:d8:e9:cb:6f:68:a8:9f:f3:48:a1:47:8f:96:b4:4c:
d5:49:bb:6b:01:d0:27:80:ce:8f:d7:17:a6:97:c8:85:a4:85:
16:19:8f:44:c4:73:4e:34:86:84:c5:cd:d2:15:ab:0e:ef:e0:
12:dd:d5:e4:bf:d5:9a:96:6e:48:31:26:e5:ee:78:d6:4b:52:
6e:bc:94:44:de:01:bf:c8:ea:94:bc:e4:21:c0:8b:11:60:65:
3e:1e:2e:bd:f0:70:91:a9:ea:f1:d3:ce:57:d5:a5:01:b9:3a:
8a:ea:ca:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:42:21 2025 by rpki-client