Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PuqxK-NUzTd6gr1fZkti3laolZU.roa
File: PuqxK-NUzTd6gr1fZkti3laolZU.roa (raw, json)
Hash identifier: Cm+sZ9Dq1elXOe2+/r1UDrEOKk1BNHO2xx+3MxEWOyA=
Subject key identifier: 3E:EA:B1:2B:E3:54:CD:37:7A:82:BD:5F:66:4B:62:DE:56:A8:95:95
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01986E864398C2A8111D6E8B12AB37781C42
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PuqxK-NUzTd6gr1fZkti3laolZU.roa
Signing time: Sun 03 Aug 2025 06:02:29 +0000
ROA not before: Sun 03 Aug 2025 06:02:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 45815
IP address blocks: 94.249.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 07:37:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:6e:86:43:98:c2:a8:11:1d:6e:8b:12:ab:37:78:1c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 3 06:02:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3eeab12be354cd377a82bd5f664b62de56a89595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:84:67:ea:1d:1d:81:91:6b:21:0d:98:5b:69:
b9:64:ef:b4:32:40:7a:23:9f:30:1b:ca:50:9e:be:
d8:b8:9b:20:dc:d2:a8:7d:ba:ea:0e:d5:94:76:2e:
f0:49:72:62:fb:fe:6b:4d:7a:6e:35:32:b2:76:35:
f2:92:dd:a1:a5:9e:ac:57:97:7e:55:7a:91:c4:3f:
1c:bc:97:8d:55:bc:b5:93:c2:0b:dc:12:c8:ee:f4:
85:d8:7c:a3:a1:31:8f:dc:4f:ca:ea:3e:b5:ad:19:
21:95:22:b8:c6:e7:0b:6c:2f:b2:74:50:5b:18:bc:
6a:ec:50:b0:ea:ca:08:fe:3d:58:a1:b0:64:fe:c3:
74:1e:07:be:97:b9:a4:1d:40:37:0a:d9:29:f1:f8:
76:53:99:69:2d:67:b6:59:8e:b7:21:38:1b:79:77:
11:fc:4d:a3:5b:59:d0:32:e3:bd:f4:23:ef:fe:f9:
89:96:a4:86:65:e7:a2:02:f0:63:6d:1d:ff:bd:33:
d8:ac:4e:57:25:c5:1d:f4:1b:1d:ec:8a:b7:22:c2:
f1:f1:b0:f2:a0:15:5d:d8:56:d5:e8:7d:c7:00:3f:
53:69:07:e6:32:cf:d0:30:1c:5a:1a:6e:56:73:c4:
00:25:3c:b6:9a:bb:79:dd:cd:f6:cb:78:0e:2c:f6:
90:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EA:B1:2B:E3:54:CD:37:7A:82:BD:5F:66:4B:62:DE:56:A8:95:95
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PuqxK-NUzTd6gr1fZkti3laolZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.249.213.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:87:bf:9e:8b:73:ff:c3:a3:5a:b9:3e:5d:43:09:33:30:66:
0b:26:57:66:67:5c:a8:f2:3c:ea:f5:66:c5:74:8e:21:db:9d:
de:68:c7:02:90:38:8c:06:ba:5c:fd:ee:8b:98:38:08:2c:26:
75:21:89:83:07:14:c8:42:05:91:f8:d3:a0:56:00:25:23:c2:
b0:2d:6e:11:07:7a:31:7e:db:3a:63:5a:c7:a2:20:a4:06:4d:
ad:01:7c:f1:2f:08:87:ea:9c:f1:c3:6a:94:91:b5:5e:6d:27:
e1:9e:6a:e9:3a:bc:71:f3:b3:f7:94:a1:0e:14:7d:4d:71:2b:
f8:52:82:64:a5:e7:0d:1c:e8:a2:dd:53:bb:c9:b5:c3:89:5c:
bf:d1:fe:4a:54:36:b3:2f:25:e4:24:f4:c4:59:ad:eb:90:b7:
fb:14:a9:61:04:a3:11:c8:c1:2f:5e:bc:01:47:91:b6:8b:b9:
ce:82:50:fb:3a:70:36:2d:dc:12:94:11:a4:1f:08:24:e4:ba:
a3:4e:c9:1c:71:7f:79:d4:fe:27:3e:40:dd:42:ee:0a:db:67:
f0:ea:07:d8:6c:c7:59:22:3f:52:65:bf:d1:70:98:c7:fc:cd:
97:f1:0c:ae:b4:fc:c8:05:24:b6:bb:04:55:22:cb:fb:68:32:
07:37:d4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:18:44 2025 by rpki-client