Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/PIHm_2dfJM_TGdcbwqQtnYwPXVY.roa
File: PIHm_2dfJM_TGdcbwqQtnYwPXVY.roa (raw, json)
Hash identifier: kVHy+yISe5vrX43T3bIZxXbjFq8ypYr+GWkGUxqbMqI=
Subject key identifier: 3C:81:E6:FF:67:5F:24:CF:D3:19:D7:1B:C2:A4:2D:9D:8C:0F:5D:56
Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Certificate serial: 0197D0C4B935B545F781010AA1E81F3C4911
Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/PIHm_2dfJM_TGdcbwqQtnYwPXVY.roa
Signing time: Thu 03 Jul 2025 14:50:42 +0000
ROA not before: Thu 03 Jul 2025 14:50:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12859
IP address blocks: 195.8.208.0/23 maxlen: 24
2a05:1500:fe00::/40 maxlen: 40
2a0b:8f80:201::/48 maxlen: 48
2a0b:8f80:301::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d0:c4:b9:35:b5:45:f7:81:01:0a:a1:e8:1f:3c:49:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Validity
Not Before: Jul 3 14:50:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c81e6ff675f24cfd319d71bc2a42d9d8c0f5d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ed:c2:20:8e:e2:c5:b1:7f:de:20:21:cd:05:
38:da:d8:f3:df:46:ab:9c:05:a7:5c:14:f2:15:ac:
b0:25:25:fd:ee:40:55:15:63:bb:f0:ec:ea:38:e5:
88:e2:29:fe:9d:a5:9a:d2:5b:42:c8:17:62:e8:6b:
75:b8:17:ca:e7:46:43:20:43:2a:7d:e9:b4:43:2a:
79:94:7d:08:33:dd:aa:68:a1:67:8f:ea:9a:05:ee:
fc:1f:10:f2:24:d0:e5:48:e1:1e:6c:13:dc:fe:89:
9f:f0:4d:ec:36:60:e3:eb:18:f7:9a:86:88:16:49:
83:65:e4:1c:7c:f8:48:e1:30:a3:d6:f2:28:18:6c:
03:81:7b:18:19:17:41:0a:a1:d1:1c:2e:18:51:ce:
70:57:6d:7f:62:5b:4e:53:e5:bf:6e:a3:c2:09:67:
85:49:a6:b2:a0:81:ef:82:ce:d3:4a:ca:5f:59:79:
fb:bb:fd:55:2b:92:f8:68:42:f4:f7:37:a3:17:18:
38:2f:31:df:16:60:f7:91:d9:1d:e8:b2:6b:e0:62:
9b:29:f9:5b:5b:d5:eb:6a:30:e3:e0:3c:21:98:90:
75:c0:27:60:ae:ca:35:ca:e9:9c:5a:5a:ea:42:ef:
aa:47:77:d9:c7:e8:31:09:d6:f4:86:5b:cd:80:06:
bc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:81:E6:FF:67:5F:24:CF:D3:19:D7:1B:C2:A4:2D:9D:8C:0F:5D:56
X509v3 Authority Key Identifier:
keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/PIHm_2dfJM_TGdcbwqQtnYwPXVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.208.0/23
IPv6:
2a05:1500:fe00::/40
2a0b:8f80:201::/48
2a0b:8f80:301::/48
Signature Algorithm: sha256WithRSAEncryption
79:d9:5e:16:c6:92:f7:e3:65:45:fa:a6:3e:2f:f0:0d:8b:32:
ef:20:c9:30:6e:b6:35:22:7f:eb:52:d8:eb:2b:19:19:56:ef:
43:ba:02:75:e9:6a:bc:84:e1:40:6b:40:46:24:b9:a3:bc:f9:
4c:d4:81:15:96:0e:63:26:8b:d4:6a:f5:6f:06:ee:b6:7a:9f:
da:3c:3a:01:e0:b9:69:27:a8:4d:d5:9e:2a:0f:bd:50:f8:59:
bf:46:4f:a7:3f:de:73:73:f3:9e:bd:30:c5:9f:a9:49:f5:7e:
1f:dc:d6:b4:37:0b:14:e5:87:bf:cc:c8:90:d5:91:e9:c3:47:
01:43:fd:d6:a3:a9:40:48:fc:76:46:b3:76:56:86:4b:a0:23:
4a:e9:48:60:15:95:0e:06:de:68:d6:95:d5:34:71:ad:70:80:
60:4d:48:ce:ee:ec:0e:c3:78:2a:07:8f:db:30:b5:84:5e:15:
e4:3a:0c:d8:d8:6e:8d:09:16:7f:a3:8d:65:a4:66:c1:04:f5:
c6:3b:e4:81:dd:1b:7e:21:83:71:c5:9b:98:79:37:98:c1:d2:
e3:ea:ab:3a:c2:4a:8f:f0:6f:28:3b:b1:ef:11:aa:1e:da:c8:
6c:fa:43:14:2d:87:9e:f2:3d:db:90:72:c4:bc:2c:22:99:a9:
27:eb:cf:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:36:09 2025 by rpki-client