Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/pDnsD5Q1hTzMW2k6uZ4MVh9ZizU.roa
File: pDnsD5Q1hTzMW2k6uZ4MVh9ZizU.roa (raw, json)
Hash identifier: Ug4pqyVy1hepE30KQdlNpPdKYvaVRsEaEW6Bq45BqsI=
Subject key identifier: A4:39:EC:0F:94:35:85:3C:CC:5B:69:3A:B9:9E:0C:56:1F:59:8B:35
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 0197C5E58421CA918ACB08764AB373A7E59E
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/pDnsD5Q1hTzMW2k6uZ4MVh9ZizU.roa
Signing time: Tue 01 Jul 2025 12:10:42 +0000
ROA not before: Tue 01 Jul 2025 12:10:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63023
IP address blocks: 87.254.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:e5:84:21:ca:91:8a:cb:08:76:4a:b3:73:a7:e5:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jul 1 12:10:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a439ec0f9435853ccc5b693ab99e0c561f598b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5d:7a:50:fd:e9:22:3f:0d:80:8f:5e:a3:73:
07:8e:2d:6c:09:fd:b5:77:65:a0:b2:66:5e:6e:ea:
33:1a:d1:f1:2b:88:b3:71:9a:42:54:4a:77:35:8f:
5b:98:4f:dd:f7:eb:5a:5c:58:41:4a:1f:11:da:71:
cb:2e:a0:09:72:81:98:76:3a:c8:a1:18:9d:75:a6:
c8:9b:74:d9:bf:41:65:c8:ce:b5:7b:a8:19:e0:80:
a8:e0:58:fe:c6:44:eb:c4:ff:14:45:39:a5:c3:04:
cd:d1:c2:f6:70:23:15:cf:42:6a:e7:2d:d7:5c:b0:
08:6d:a9:da:1b:b2:4c:62:14:3e:93:c6:ea:71:d8:
1a:54:4e:a4:8c:e9:23:9a:d1:99:d6:b4:44:6a:98:
8d:ec:54:3a:84:5c:20:02:0e:a6:3d:f2:ab:85:55:
5b:bf:08:0a:e5:ca:be:51:3b:32:1a:77:01:86:e3:
35:58:82:1f:c6:0c:f8:b8:0c:ae:b7:be:f7:a1:0c:
16:80:56:2b:f1:51:74:75:f4:8f:23:bd:46:9a:35:
f0:fa:75:2e:f1:00:cb:09:aa:df:5e:e5:9b:9c:cb:
b0:af:38:42:56:25:2b:84:c2:5c:50:f5:00:d9:98:
46:cf:7c:ed:1f:32:ec:7e:8c:14:90:0a:65:85:96:
b7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:39:EC:0F:94:35:85:3C:CC:5B:69:3A:B9:9E:0C:56:1F:59:8B:35
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/pDnsD5Q1hTzMW2k6uZ4MVh9ZizU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.8.0/24
Signature Algorithm: sha256WithRSAEncryption
37:7c:6d:4e:42:57:d4:0f:1a:44:4c:4f:cd:f3:7d:17:65:2b:
35:b8:ed:e9:ec:46:89:86:55:a5:3a:ae:dc:b0:31:52:a2:a8:
f8:73:ed:66:b9:b5:54:ae:0a:db:11:12:ae:65:43:20:4a:04:
1a:93:70:d7:3b:91:04:8d:72:e4:54:5b:d7:9d:fb:9e:e1:7d:
f8:8c:1f:f0:aa:7f:39:a6:84:17:93:2d:27:ab:1f:26:44:29:
f0:fa:af:ad:39:8c:90:29:89:6e:fb:36:7c:81:98:28:bf:13:
0f:2e:5e:37:c4:dc:85:84:80:97:98:4f:0f:d9:02:c7:f9:a4:
dd:7a:b2:09:d5:5e:ae:fc:c4:e7:0a:98:1a:ad:c2:7c:f8:95:
49:5c:a7:27:ea:cf:25:78:5d:e5:ae:0b:06:c0:d2:19:de:11:
72:51:8b:38:fe:c0:fc:fc:1a:15:7f:ff:18:fe:a6:0d:e7:7f:
94:09:b0:b0:3d:b9:e7:2b:c7:89:dd:b1:e0:04:ef:22:ab:2d:
5e:6a:67:cb:9f:1a:a4:18:49:ae:bc:b6:4f:1d:4d:aa:d8:75:
34:1a:fb:aa:5c:f1:bd:f3:4e:42:dd:f8:0f:8e:3d:55:db:b9:
99:1d:7b:e6:ec:29:aa:06:69:50:f3:c9:e6:10:33:73:ff:8e:
7b:04:7f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:03:30 2025 by rpki-client