Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/P6XaJ7TdHbOqlto-yAH0frSAI50.roa
File: P6XaJ7TdHbOqlto-yAH0frSAI50.roa (raw, json)
Hash identifier: PsLfkW8kXZ71QT50jEPl9iE7cJ5j7kESsz2bTm5wRaA=
Subject key identifier: 3F:A5:DA:27:B4:DD:1D:B3:AA:96:DA:3E:C8:01:F4:7E:B4:80:23:9D
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 0198388BD5EF78876469D9B14CA9440E1F4D
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/P6XaJ7TdHbOqlto-yAH0frSAI50.roa
Signing time: Wed 23 Jul 2025 18:29:05 +0000
ROA not before: Wed 23 Jul 2025 18:29:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215158
IP address blocks: 155.212.2.0/24 maxlen: 24
170.168.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:8b:d5:ef:78:87:64:69:d9:b1:4c:a9:44:0e:1f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Jul 23 18:29:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3fa5da27b4dd1db3aa96da3ec801f47eb480239d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4c:70:1f:41:3f:80:12:d6:29:28:6d:71:f4:
75:2e:e1:94:28:4b:2b:3b:bd:f6:94:bc:ce:61:b3:
03:9c:e9:ee:57:1d:6b:1f:e5:e0:62:8c:9c:e1:4b:
ae:17:a3:31:ac:9c:d9:12:08:b4:fc:43:07:e0:34:
97:29:d3:95:bb:11:e8:26:58:4b:ca:cb:8b:09:0e:
9d:4f:d3:b6:4d:58:22:eb:d6:4e:06:f6:6e:04:5f:
0d:07:60:e2:72:27:0c:79:73:82:43:31:35:eb:7e:
55:88:07:90:2a:95:59:ba:f9:56:ee:ad:8b:73:a4:
70:27:9d:cd:c2:96:af:1f:de:df:48:20:5a:a2:a9:
70:fb:95:01:ca:39:a6:30:ac:12:62:9d:30:a0:1f:
11:b9:78:1f:31:06:d0:82:6e:f2:78:37:35:08:ab:
95:92:1c:25:60:ed:f5:a5:e9:3f:0e:58:a9:07:14:
b9:1c:d0:30:81:9f:e2:82:ff:89:b3:1b:c0:cd:f4:
d5:38:e5:d8:58:04:19:77:08:ff:f7:b7:11:ac:fb:
45:35:7b:1c:e0:cc:af:eb:2e:e9:56:76:80:f1:94:
1d:81:e5:80:24:eb:07:c9:32:25:31:16:a3:4e:f4:
26:66:a0:33:7a:b7:d6:8f:f9:e2:62:f1:26:18:49:
45:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A5:DA:27:B4:DD:1D:B3:AA:96:DA:3E:C8:01:F4:7E:B4:80:23:9D
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/P6XaJ7TdHbOqlto-yAH0frSAI50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.212.2.0/24
170.168.27.0/24
Signature Algorithm: sha256WithRSAEncryption
22:c8:ad:45:f0:0b:b4:fa:98:ec:17:c3:83:60:b9:27:51:68:
8d:aa:f4:fd:5e:ea:be:5b:5e:b6:4d:75:a9:7b:6e:49:bb:b0:
4f:d7:51:6d:bb:16:80:9e:55:94:9d:5e:aa:67:36:e1:c7:73:
73:d3:16:6b:7f:d9:9b:c5:00:aa:f8:3e:e0:dc:84:f9:8e:e4:
37:c1:06:4f:4d:0b:cd:f6:56:9c:69:0c:fb:a8:9d:13:4e:44:
65:94:7a:31:18:09:b4:4c:9d:cb:70:f9:39:ee:4e:25:10:3b:
cb:a8:3f:df:a7:aa:0f:fa:d6:e1:15:83:be:62:a0:a2:7c:f4:
d4:97:0b:31:c9:38:ec:97:63:09:f5:60:d4:b4:d0:6e:39:11:
0b:c0:bc:c6:be:ff:7e:01:fc:fc:30:cd:5c:e3:94:a2:d8:8c:
02:9d:83:68:a2:72:f8:07:69:b3:b5:be:28:0b:70:f8:3c:59:
9f:0f:97:f7:71:85:ed:7a:f2:4b:84:35:f4:67:4c:4b:e2:33:
cc:e7:6b:db:96:7d:ce:48:d1:7f:46:af:ab:eb:a9:b5:44:64:
98:f9:bd:e2:ef:f4:d1:c2:c9:e1:f9:8e:db:8b:19:e6:c1:57:
a0:e7:0a:1d:e7:8d:4f:2f:6e:bc:0d:c8:31:65:92:7d:63:ef:
52:5b:1f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 19:39:23 2025 by rpki-client