Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/PdmkiIr6IQZ3ECxIk-0ePUpgPiI.roa
File: PdmkiIr6IQZ3ECxIk-0ePUpgPiI.roa (raw, json)
Hash identifier: AJLw7PX9vrmJ9MfsvtzIEbi8E6wrzfkj3Y9s547jzYg=
Subject key identifier: 3D:D9:A4:88:8A:FA:21:06:77:10:2C:48:93:ED:1E:3D:4A:60:3E:22
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 019850207EFEA259BB7AB0089DFDAC73DBA0
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/PdmkiIr6IQZ3ECxIk-0ePUpgPiI.roa
Signing time: Mon 28 Jul 2025 08:22:43 +0000
ROA not before: Mon 28 Jul 2025 08:22:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29632
IP address blocks: 94.131.0.0/23 maxlen: 23
94.131.4.0/24 maxlen: 24
94.131.6.0/24 maxlen: 24
94.131.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:50:20:7e:fe:a2:59:bb:7a:b0:08:9d:fd:ac:73:db:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jul 28 08:22:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3dd9a4888afa210677102c4893ed1e3d4a603e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4b:c4:da:aa:22:a1:29:a4:21:91:eb:8b:f4:
21:82:26:5f:18:42:9d:1b:17:22:27:d0:5f:09:21:
06:78:14:1a:50:0d:12:60:d0:2c:03:61:7a:8f:8f:
c5:96:4f:fc:48:9d:44:7b:61:ca:52:80:72:1e:f7:
de:50:d9:f2:21:d2:eb:73:eb:48:63:ea:26:14:33:
4b:99:f1:80:14:43:28:63:83:76:62:09:cb:74:3a:
54:bd:71:52:ed:30:47:8d:c8:34:fa:06:d4:63:e2:
93:9b:ac:a5:77:24:ba:37:51:76:c8:12:a9:a6:32:
f8:cd:b1:9b:b3:a4:12:51:1f:64:b6:5f:01:a2:82:
95:79:ef:de:47:4d:e7:1c:9f:db:88:f8:b1:56:5c:
65:93:7d:1e:98:a6:3a:b8:12:bd:43:f8:60:9d:bc:
ec:c4:83:b7:20:51:11:ad:61:0b:30:04:1e:2e:84:
71:ac:1c:67:ae:c3:4e:df:72:1c:86:a1:16:88:df:
a6:39:3a:cf:be:44:a4:70:e9:b3:7f:51:c0:26:98:
0f:c9:e6:5a:2e:cb:d9:5c:c6:15:e0:bb:06:78:27:
81:78:af:2d:61:cf:e5:be:5e:92:14:9e:47:74:6e:
92:b1:86:2d:44:ed:59:e2:da:cb:1a:a1:fa:1c:1b:
07:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D9:A4:88:8A:FA:21:06:77:10:2C:48:93:ED:1E:3D:4A:60:3E:22
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/PdmkiIr6IQZ3ECxIk-0ePUpgPiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.0.0/23
94.131.4.0/24
94.131.6.0/23
Signature Algorithm: sha256WithRSAEncryption
97:c4:11:eb:ba:08:0d:23:53:cb:cd:f8:bd:47:05:7f:da:b3:
f0:d8:71:86:fc:d0:67:7f:d4:c4:aa:5b:98:62:19:f6:0d:47:
9d:fd:b3:04:b4:0f:bf:43:a6:a7:92:91:80:8e:87:50:69:f3:
65:b5:be:71:27:6c:43:08:cb:cd:a6:e9:49:0c:01:21:dd:33:
ab:31:47:6b:47:3c:63:3b:dd:54:3c:40:8e:41:16:de:ae:6e:
6c:12:a3:95:6a:58:5c:5f:5a:55:08:84:ae:96:65:04:11:54:
18:de:85:dd:ac:01:9b:90:32:11:de:c3:44:cd:c3:4e:15:9a:
c9:e6:a2:d9:5d:58:65:30:02:dd:c5:ca:7d:33:b2:53:12:20:
cb:16:b4:73:a9:ba:7a:26:91:af:d6:02:b9:d5:8b:c6:69:49:
ce:f9:c1:96:29:d4:91:c7:70:28:fe:66:b0:21:bc:77:4a:10:
8e:83:68:56:cd:bb:d6:3a:07:a7:f6:35:c5:d5:53:0b:9e:84:
02:0b:41:31:46:ce:ab:ea:e6:7b:93:a9:4a:f6:5a:69:1c:c4:
06:37:b4:22:25:40:61:57:53:ea:04:54:b7:2d:53:c4:2a:2b:
72:cd:84:ce:82:9d:92:c8:7a:e1:31:d7:01:77:0d:03:2d:2f:
da:b7:95:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:03:02 2025 by rpki-client