Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0PmAJBMQtkNJLK7u-oKS0xfUwEA.roa
File: 0PmAJBMQtkNJLK7u-oKS0xfUwEA.roa (raw, json)
Hash identifier: PiI+RUz81eVGvu3zavc5rXQ1+YrYlbxMWFyDRkxIxUg=
Subject key identifier: D0:F9:80:24:13:10:B6:43:49:2C:AE:EE:FA:82:92:D3:17:D4:C0:40
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0198122C4A1A01E02D4905230017106B7555
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0PmAJBMQtkNJLK7u-oKS0xfUwEA.roa
Signing time: Wed 16 Jul 2025 07:39:09 +0000
ROA not before: Wed 16 Jul 2025 07:39:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214271
IP address blocks: 77.93.158.0/24 maxlen: 24
82.152.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 14:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:12:2c:4a:1a:01:e0:2d:49:05:23:00:17:10:6b:75:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 16 07:39:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0f980241310b643492caeeefa8292d317d4c040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:44:ae:6c:23:c7:b1:b5:48:45:ff:39:ff:bf:
a3:3c:9d:01:b8:b2:ef:16:ce:b0:6e:47:0e:f6:c9:
c4:09:77:7d:fd:33:53:73:b7:42:3c:9f:9b:bd:50:
f9:00:83:10:4d:4f:74:94:89:f2:ad:c0:1e:91:55:
b9:29:60:bd:3d:a5:d6:74:54:90:c3:b9:5b:c6:c9:
b2:09:f5:ec:91:d4:75:c9:29:45:33:09:a2:9c:5c:
96:5e:24:17:65:d2:83:d3:56:9c:e8:d4:66:3f:c5:
68:fc:e1:a3:44:28:f3:d3:67:95:60:f2:67:c1:2c:
8a:ab:cc:8a:cc:70:8e:6d:c0:32:83:b3:ce:c1:80:
65:32:6c:30:87:15:3f:9c:1e:77:bc:fd:cb:1a:66:
47:56:48:b6:23:92:8f:88:a5:50:7f:92:93:ce:c3:
51:00:8a:d9:39:cb:f9:26:5c:d7:19:c9:7c:38:af:
c3:a7:f4:7f:c6:0e:e3:ab:84:27:6c:02:62:3c:1c:
d5:96:cc:83:e9:0c:76:6a:72:7b:7d:c5:63:e7:a2:
50:65:20:6f:a6:a6:f6:3c:81:68:d2:0d:ef:76:86:
3b:17:0c:11:58:b4:7b:ef:d9:cd:46:6f:a7:5a:38:
fe:d5:5b:4c:3f:35:bf:d8:d3:74:73:31:1a:e4:fe:
ff:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F9:80:24:13:10:B6:43:49:2C:AE:EE:FA:82:92:D3:17:D4:C0:40
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0PmAJBMQtkNJLK7u-oKS0xfUwEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.158.0/24
82.152.178.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:d9:ad:ac:c3:f9:e9:c7:57:e6:45:99:bb:ff:a0:14:73:3f:
70:25:fd:97:24:1d:9b:2a:84:08:b4:24:9e:f7:c2:15:f8:88:
d0:cc:3d:2b:da:c7:73:5e:8a:11:81:63:43:a0:87:b5:0e:02:
fe:ae:f0:05:97:f8:d9:c4:0e:64:45:88:81:2f:c0:ee:5a:16:
1c:a8:29:6b:8c:62:57:6b:7d:17:cd:1d:41:92:3a:96:c9:7d:
15:ef:43:71:1f:ea:14:39:bd:ce:45:41:5b:83:3d:c3:9c:31:
b7:7b:94:a2:7b:6c:87:96:09:db:77:c4:df:4c:7c:bb:ca:7a:
3a:71:f9:47:f2:0a:ff:98:91:41:35:e2:a8:c3:d3:d1:11:31:
69:0e:8f:1d:43:51:f9:1a:21:4d:8e:20:84:42:9f:27:6a:f7:
cd:78:6f:e3:86:eb:a2:05:77:db:dd:33:3a:fc:13:8d:3f:a4:
ed:98:98:5d:30:59:96:93:f0:76:b7:69:7d:c3:97:76:49:e0:
a7:ff:33:e5:2d:07:f6:25:7a:d9:da:62:05:47:5c:cc:43:d7:
79:f9:ef:53:01:f0:d4:4f:50:5e:5e:04:be:c4:d2:f3:93:70:
28:c7:fe:2a:c3:da:56:2a:e2:36:b9:c5:10:ad:c2:ed:8c:eb:
b9:f7:fe:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 22:49:54 2025 by rpki-client