Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/pjw-RAzyfseNdlZ4ZxS-B5p4xa4.roa
File: pjw-RAzyfseNdlZ4ZxS-B5p4xa4.roa (raw, json)
Hash identifier: jYOowczV1CpscODOK61muVPq2O20PaEU0YUYGHgCc6E=
Subject key identifier: A6:3C:3E:44:0C:F2:7E:C7:8D:76:56:78:67:14:BE:07:9A:78:C5:AE
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019871E85A531AB93AD8B69F95851950EFF3
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/pjw-RAzyfseNdlZ4ZxS-B5p4xa4.roa
Signing time: Sun 03 Aug 2025 21:48:29 +0000
ROA not before: Sun 03 Aug 2025 21:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208690
IP address blocks: 2a0c:9a40:8f40::/48 maxlen: 48
2a0c:9a40:d400::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:71:e8:5a:53:1a:b9:3a:d8:b6:9f:95:85:19:50:ef:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Aug 3 21:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a63c3e440cf27ec78d7656786714be079a78c5ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:78:82:d3:2a:00:97:4c:b9:5a:42:cd:11:94:
3a:ba:8b:b6:5a:70:a1:6b:5a:7c:ea:7f:db:60:43:
9d:f4:f9:cb:f9:c6:bd:4f:c6:74:e7:d1:ca:87:c9:
1d:11:87:d5:fc:2c:38:d5:bd:53:5c:dd:1d:a2:a2:
09:cb:f6:c2:13:aa:e7:6f:5f:45:4c:76:38:b5:90:
f8:30:d8:81:ac:93:98:f1:e9:06:9f:24:05:0d:7c:
84:08:40:2e:64:fa:35:89:a9:d0:6c:76:04:8b:a7:
84:8d:af:cb:6a:ca:8e:d4:64:e2:be:2a:64:1a:c8:
fe:5d:17:8a:0f:6d:e2:eb:82:40:01:e7:04:1f:25:
0b:df:9d:8e:98:03:f6:bf:37:24:5b:47:93:8d:7a:
4b:87:b2:8e:8a:29:77:19:62:0b:c9:e3:b0:af:9b:
48:41:a6:3a:6c:c2:49:d7:32:94:81:44:40:9c:0f:
a4:e9:1d:ab:7f:6b:6a:ba:c6:4e:85:52:3c:d1:a4:
b1:07:7a:d4:e9:df:d8:a4:8b:58:c3:11:0a:64:5d:
a0:46:87:b3:3c:4c:d7:47:4b:7a:0b:9c:e6:e5:d9:
6c:0b:aa:e1:e5:1b:43:a7:e8:b7:d1:45:fd:70:88:
f0:9d:24:dc:77:83:c9:92:2b:8b:b7:b4:3a:1d:65:
1c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3C:3E:44:0C:F2:7E:C7:8D:76:56:78:67:14:BE:07:9A:78:C5:AE
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/pjw-RAzyfseNdlZ4ZxS-B5p4xa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8f40::/48
2a0c:9a40:d400::/40
Signature Algorithm: sha256WithRSAEncryption
04:f0:f1:cb:ce:b4:b3:86:f3:c5:dd:f7:2e:ec:55:44:a4:57:
e8:4d:7e:dd:74:66:d8:30:85:2c:bc:ad:84:9c:74:e7:bd:f7:
ab:c2:2d:b9:25:d5:79:67:2d:24:61:a7:36:2e:0f:90:1c:ce:
cf:1d:d4:01:0c:75:04:85:66:9d:69:e8:26:8a:85:ce:00:2b:
0b:09:44:90:cf:43:29:5b:51:e1:27:be:ee:44:72:22:d5:b8:
62:78:26:8e:83:07:9c:41:f8:35:82:50:ef:ca:f7:83:41:db:
62:09:a7:42:5a:ce:dd:c8:ea:eb:1f:f8:42:78:d0:1f:86:a9:
ba:47:3a:af:49:04:db:9e:2d:e2:95:06:b2:69:22:9f:62:70:
11:9c:2a:be:34:af:fa:ed:18:04:47:b8:dc:9c:da:71:29:80:
fd:71:a8:4a:16:4d:21:3d:57:7f:7d:67:91:86:5f:e3:b6:b2:
25:e7:19:32:10:ac:a7:85:16:6a:3b:f9:55:a5:eb:b6:75:bb:
c5:30:6e:f2:02:ec:18:11:6c:2d:46:0f:87:23:58:cb:88:32:
3f:b5:6a:a5:d8:0d:44:c0:d7:85:91:61:88:98:64:31:f9:47:
a1:65:53:c3:1b:1d:96:0c:87:ea:f0:ae:2c:af:dd:f7:4d:b5:
18:ba:15:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:12:28 2025 by rpki-client