Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/PQkIeE659gopb00eRM_lG80Gc8o.roa
File: PQkIeE659gopb00eRM_lG80Gc8o.roa (raw, json)
Hash identifier: jYp7n+Hnf2RwdwBfym+F/7I14DXBfuEPAe6US1OGNLE=
Subject key identifier: 3D:09:08:78:4E:B9:F6:0A:29:6F:4D:1E:44:CF:E5:1B:CD:06:73:CA
Certificate issuer: /CN=4e7856d295580936916a553fb9bfb59f3a176804
Certificate serial: 019712148B3749DA57F933C39CA754F22D81
Authority key identifier: 4E:78:56:D2:95:58:09:36:91:6A:55:3F:B9:BF:B5:9F:3A:17:68:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnhW0pVYCTaRalU_ub-1nzoXaAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/PQkIeE659gopb00eRM_lG80Gc8o.roa
Signing time: Tue 27 May 2025 14:10:25 +0000
ROA not before: Tue 27 May 2025 14:10:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212320
IP address blocks: 89.39.128.0/21 maxlen: 21
2a14:9e80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnhW0pVYCTaRalU_ub-1nzoXaAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:12:14:8b:37:49:da:57:f9:33:c3:9c:a7:54:f2:2d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7856d295580936916a553fb9bfb59f3a176804
Validity
Not Before: May 27 14:10:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d0908784eb9f60a296f4d1e44cfe51bcd0673ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1e:ff:2e:66:c4:92:00:51:e9:ac:2e:8f:99:
c9:12:0f:bd:69:bb:7f:59:30:c8:85:21:cd:ec:2f:
40:2f:e2:ac:1d:8f:30:45:39:6e:90:36:94:0f:41:
6a:40:9d:23:9e:c0:14:8a:21:d1:14:1a:03:3e:d7:
c7:e1:4f:6f:9f:d0:31:97:9e:cd:a1:bd:16:68:8f:
47:42:e2:7e:5a:d9:2f:55:11:1c:f1:34:9f:06:f7:
95:41:1b:bd:58:86:8f:a2:2e:5b:80:1c:7e:18:7a:
b7:78:27:99:a6:ce:2b:0d:46:ea:48:42:9d:ea:69:
7e:76:ed:36:dc:88:6d:f5:03:0b:2c:18:dd:8c:d5:
2e:b0:f7:f8:d3:77:ca:68:c5:12:1a:ef:7f:62:06:
ff:d4:a7:07:cb:74:10:64:58:ee:ed:37:85:47:11:
6a:69:82:af:09:77:f4:80:51:ff:13:42:c6:6b:ce:
20:07:5c:70:0d:bd:6a:5e:6f:c9:74:58:e3:61:94:
0c:13:f9:6d:63:99:c7:d0:96:f3:60:28:09:f6:10:
54:e8:5f:a1:b4:94:f2:72:04:62:b7:81:9d:d4:fe:
c0:a1:17:bb:23:4c:aa:a4:f1:49:49:2c:c7:0b:23:
f0:57:3e:ca:85:e1:fb:d6:0b:d9:7a:0b:de:a2:b0:
9b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:09:08:78:4E:B9:F6:0A:29:6F:4D:1E:44:CF:E5:1B:CD:06:73:CA
X509v3 Authority Key Identifier:
keyid:4E:78:56:D2:95:58:09:36:91:6A:55:3F:B9:BF:B5:9F:3A:17:68:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnhW0pVYCTaRalU_ub-1nzoXaAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/PQkIeE659gopb00eRM_lG80Gc8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.128.0/21
IPv6:
2a14:9e80::/29
Signature Algorithm: sha256WithRSAEncryption
a1:03:f5:56:b6:cf:c5:50:e5:9b:26:45:4b:42:c5:2a:a9:2a:
2d:67:8b:1f:f3:32:d6:df:17:d9:8d:67:36:bf:45:be:5f:18:
5e:1d:ef:c5:1e:1c:c2:f1:0e:56:f0:48:61:4a:c9:67:19:d9:
b8:2f:5b:33:22:24:1e:55:38:00:5c:89:cc:bf:a3:55:9c:8d:
a2:d0:40:bb:83:78:78:c7:61:c2:d4:1a:aa:d2:32:8f:ea:4e:
e6:94:62:71:9f:27:53:c3:39:43:2c:3b:3b:45:89:99:b8:02:
70:19:68:75:e9:f2:13:4c:67:c0:53:3f:a7:24:de:89:a8:b5:
88:41:17:5b:53:c4:1d:6d:db:a0:00:fb:2f:40:77:a7:51:7d:
97:01:d7:31:16:ef:c2:f9:4d:8a:e5:49:75:86:94:d7:ec:ca:
d1:99:e4:53:b0:e3:cd:3d:17:95:07:cd:30:56:fb:79:de:c5:
de:ff:9c:c2:1a:c3:6d:2e:99:e1:72:5e:67:a9:91:5a:60:ed:
88:91:ed:b7:eb:93:f2:e7:0b:ec:86:d0:9d:e0:64:57:e0:8a:
a4:96:f6:86:71:b2:81:2e:e6:2b:66:0a:57:02:3b:d6:0f:79:
4f:5e:6a:f2:42:1a:bf:32:84:38:e6:47:f3:ac:a3:36:e5:8f:
70:2a:70:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:54:58 2025 by rpki-client