Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/p9k3zxmtTgpiO3w4qYK_kwtViBY.roa
File: p9k3zxmtTgpiO3w4qYK_kwtViBY.roa (raw, json)
Hash identifier: mLV8UWd/FUVnWkFT1+wt/9Wcpsl9J+IOBX34HOvbJnM=
Subject key identifier: A7:D9:37:CF:19:AD:4E:0A:62:3B:7C:38:A9:82:BF:93:0B:55:88:16
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0197DDF09CF2E6E978AF7667621D4D16880E
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/p9k3zxmtTgpiO3w4qYK_kwtViBY.roa
Signing time: Sun 06 Jul 2025 04:13:42 +0000
ROA not before: Sun 06 Jul 2025 04:13:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20326
IP address blocks: 89.106.74.0/24 maxlen: 24
89.106.75.0/24 maxlen: 24
89.106.76.0/24 maxlen: 24
89.106.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:dd:f0:9c:f2:e6:e9:78:af:76:67:62:1d:4d:16:88:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 6 04:13:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7d937cf19ad4e0a623b7c38a982bf930b558816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bd:55:5e:b9:1f:0a:d2:44:2d:02:06:1d:66:
94:77:3c:33:9e:d8:3b:3a:47:60:15:58:a5:1f:53:
46:2c:da:60:81:fd:e7:52:0a:40:a7:8e:83:ae:be:
76:4c:36:bb:b3:73:f5:28:bf:a4:73:0b:92:85:88:
08:5d:10:f5:81:54:f7:2e:2b:9c:bb:5a:92:5f:e8:
d3:b5:04:68:01:46:f1:ac:b4:2b:46:7a:eb:58:8d:
ff:c1:be:85:65:54:5c:1e:54:ba:f7:31:89:e5:a4:
6e:27:f8:84:5c:2f:5e:f1:dd:c7:26:ac:fa:f1:79:
fb:09:dc:8f:e5:07:b4:47:6f:d6:21:27:74:5a:32:
cc:bb:af:99:9b:3b:e1:21:88:41:fa:03:ef:86:55:
6c:49:07:9a:6c:b7:eb:82:bc:74:41:af:2f:7d:f1:
c3:02:47:28:ce:70:eb:0f:fd:dd:2c:25:ad:08:7e:
19:0b:90:bc:3d:2b:1f:b0:bd:61:19:bf:9c:46:6f:
c1:9e:78:d8:ed:01:69:ef:d2:d8:06:e9:ab:ed:b8:
f6:e6:e9:f0:9b:7b:92:ae:f0:10:ed:0c:6c:aa:1c:
d5:ac:12:04:00:f7:dd:e3:60:9e:e9:c7:96:2f:dc:
de:c3:d0:1a:d9:78:c2:06:4d:d3:f6:c3:f6:19:bf:
11:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D9:37:CF:19:AD:4E:0A:62:3B:7C:38:A9:82:BF:93:0B:55:88:16
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/p9k3zxmtTgpiO3w4qYK_kwtViBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.74.0-89.106.77.255
Signature Algorithm: sha256WithRSAEncryption
48:5a:c5:ff:5c:e3:f8:0c:68:75:9f:9a:56:63:59:2b:c9:14:
2a:6e:af:ef:0d:64:9a:31:98:05:ed:01:9e:ba:84:9a:c0:84:
1c:80:2a:9e:ed:ce:e4:30:42:a7:7a:fa:d3:8a:b7:cd:29:88:
e7:8c:f6:d4:dc:77:8f:2a:9c:9f:24:50:78:f3:7d:e0:ba:e5:
b2:42:7e:ce:62:78:9c:be:7a:38:40:3b:8b:c8:9c:d0:05:49:
bf:2b:dc:71:cd:ae:61:9a:35:06:d4:04:ee:04:ac:32:a8:e3:
67:68:92:c4:34:85:3f:18:e5:29:aa:44:64:da:ee:2e:fe:5a:
83:be:ea:fa:f0:45:39:c4:ee:22:eb:d7:98:7b:8a:c5:c2:40:
00:4a:6e:dd:09:ba:70:72:3e:86:00:dd:34:74:0d:39:9d:6e:
3a:61:bd:04:96:a4:65:09:1c:7d:b1:8c:12:21:f7:6e:46:8d:
bc:00:6a:2f:ed:d0:89:63:ad:37:ca:d7:2a:e4:fe:2d:a3:2c:
b6:6b:95:19:22:76:ce:fe:5a:54:2a:b8:e7:39:09:58:33:5a:
5d:e5:74:bb:ba:12:17:eb:ae:a2:49:6e:4f:9c:2e:be:cc:c3:
f8:18:f9:37:ef:e1:05:aa:47:e6:8e:c2:77:69:6f:80:5e:fd:
5a:b9:f5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:36:20 2025 by rpki-client