Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/PnEzUVbrYhXZNNLfCN-Xtl0-Pzk.roa
File: PnEzUVbrYhXZNNLfCN-Xtl0-Pzk.roa (raw, json)
Hash identifier: lXzPnJfE3bH0euvEvGwi8aTfi10gIwh0zvOckFmaQMI=
Subject key identifier: 3E:71:33:51:56:EB:62:15:D9:34:D2:DF:08:DF:97:B6:5D:3E:3F:39
Certificate issuer: /CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Certificate serial: 01985A96B79262787539D36EE1E228356CD8
Authority key identifier: 61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/PnEzUVbrYhXZNNLfCN-Xtl0-Pzk.roa
Signing time: Wed 30 Jul 2025 09:08:03 +0000
ROA not before: Wed 30 Jul 2025 09:08:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200596
IP address blocks: 62.146.248.0/21 maxlen: 24
85.184.228.0/22 maxlen: 24
135.84.148.0/22 maxlen: 24
145.63.64.0/18 maxlen: 24
147.12.16.0/20 maxlen: 24
185.101.196.0/22 maxlen: 24
2a00:5ea0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:96:b7:92:62:78:75:39:d3:6e:e1:e2:28:35:6c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Validity
Not Before: Jul 30 09:08:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e71335156eb6215d934d2df08df97b65d3e3f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:36:38:d5:81:d7:ec:84:2e:cf:58:9c:cf:09:
1b:1e:2f:62:ad:64:b1:b6:35:c4:de:44:c8:44:0d:
53:e5:1e:33:34:42:ab:fd:c1:dc:da:8d:17:cc:bc:
3f:15:30:ac:b9:79:45:f9:57:58:75:69:14:a7:c7:
30:4e:6e:0e:ed:3e:f4:92:0c:06:9f:b6:74:fc:d1:
3f:66:0e:86:46:95:87:03:9a:b6:b1:7e:f2:d4:ba:
33:45:23:b9:9a:46:b6:4a:3c:0f:bf:8f:6c:76:42:
4f:de:8a:cd:b2:33:17:6b:a4:65:8c:ea:91:71:ff:
48:af:d8:b2:51:d6:84:c5:ea:de:51:35:51:8f:26:
b5:00:de:ff:41:09:a6:00:71:0d:60:9e:7c:55:59:
bd:3f:04:a9:8d:cd:00:58:9c:cd:fb:50:4e:46:d3:
1e:ba:e1:73:e7:af:c9:37:1c:a1:3a:c7:f6:7e:c5:
72:aa:51:2b:ac:ab:d1:09:d8:fa:ee:14:d6:46:b6:
52:9b:81:e1:90:fb:bc:36:93:19:aa:ac:78:bc:2b:
af:50:66:d1:1a:8c:8f:38:39:bc:bc:ed:1f:e0:97:
5f:5e:92:74:33:e4:8c:6d:ab:dc:be:5b:6f:1e:0f:
fb:e6:85:48:82:95:11:ab:8d:55:54:41:49:f0:2e:
7a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:71:33:51:56:EB:62:15:D9:34:D2:DF:08:DF:97:B6:5D:3E:3F:39
X509v3 Authority Key Identifier:
keyid:61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/PnEzUVbrYhXZNNLfCN-Xtl0-Pzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.146.248.0/21
85.184.228.0/22
135.84.148.0/22
145.63.64.0/18
147.12.16.0/20
185.101.196.0/22
IPv6:
2a00:5ea0::/29
Signature Algorithm: sha256WithRSAEncryption
4f:23:3c:1d:ff:f9:c1:1b:2d:b1:f7:eb:20:c1:3e:11:17:56:
78:98:18:d9:af:90:0b:de:8a:b8:ac:e2:32:ed:48:44:2c:ca:
0d:35:b5:f3:e4:cf:e4:5c:81:03:29:5b:ba:8b:42:10:61:37:
61:4d:38:a9:a0:d9:50:1d:a6:9e:02:6c:6b:f5:10:df:52:7c:
2e:b2:49:f5:88:83:ac:9b:98:3a:6e:a0:49:60:a1:63:89:78:
37:a1:87:96:2f:1f:24:12:29:10:26:d3:fe:88:14:ce:41:90:
19:a6:bb:10:cf:e8:4a:a3:62:50:99:03:c1:85:19:1c:26:15:
49:cb:33:f0:d6:0f:8e:4f:1d:59:3d:73:72:23:42:18:e9:0f:
e1:a6:6a:42:aa:aa:c7:c4:7c:6a:5b:18:d3:0f:5c:f7:cb:ba:
de:0a:32:23:60:e6:b7:bd:4a:9b:04:3b:2d:b3:06:eb:30:0b:
d7:9d:40:80:7d:b9:0e:d3:5b:2a:1a:3c:45:16:d3:b5:ca:b3:
36:e2:4c:fb:5b:53:da:e7:b2:07:af:bb:2d:86:89:ac:b3:1f:
f8:0c:43:ae:41:d4:ec:eb:23:6f:3b:c4:46:7c:60:9f:36:80:
8c:2e:c9:14:e9:6a:58:ff:ed:18:f2:87:c9:3a:fc:ec:f2:67:
ea:dd:9a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:33:13 2025 by rpki-client