Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/PB1BeL4uZ3QF6gY3DHiXfq0456E.roa
File: PB1BeL4uZ3QF6gY3DHiXfq0456E.roa (raw, json)
Hash identifier: yBSu3OCxbV3AaOMypdJ28XmEmDKMRu8A8am1l/di17A=
Subject key identifier: 3C:1D:41:78:BE:2E:67:74:05:EA:06:37:0C:78:97:7E:AD:38:E7:A1
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 019932DF07E652A666368D56BCF8F6A686E0
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/PB1BeL4uZ3QF6gY3DHiXfq0456E.roa
Signing time: Wed 10 Sep 2025 09:05:01 +0000
ROA not before: Wed 10 Sep 2025 09:05:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51396
IP address blocks: 2a0a:e2c0::/29 maxlen: 32
2a12:6740::/29 maxlen: 30
2a12:8ec0::/29 maxlen: 30
2a12:ccc0::/29 maxlen: 30
2a12:d3c0::/29 maxlen: 30
2a12:e240::/29 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:df:07:e6:52:a6:66:36:8d:56:bc:f8:f6:a6:86:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Sep 10 09:05:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c1d4178be2e677405ea06370c78977ead38e7a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:15:9a:4a:83:c6:ac:28:41:f8:b3:50:7f:32:
12:0e:87:59:c4:04:2a:93:d2:36:ba:4c:86:16:ca:
4b:13:d8:82:cc:8b:5c:dc:d9:3d:5f:8a:e4:be:e5:
bc:16:d1:fc:01:61:fb:e5:02:55:7c:b4:4b:b7:a0:
38:6a:af:32:0e:65:0b:0d:1b:9b:c6:a9:02:c5:e5:
f3:0c:0d:25:8f:5b:0e:9e:b0:e5:ae:9d:54:5f:d9:
f7:6b:c5:cd:77:91:b6:3e:31:e1:e3:ca:2e:82:37:
26:aa:5d:75:c9:15:21:f5:5e:cb:b8:a0:2b:c1:30:
04:47:46:98:02:ee:86:4d:97:3a:ec:e9:cc:6e:80:
d2:93:b3:f8:92:16:71:28:82:5e:5c:dc:2b:08:ce:
88:ba:bb:4a:26:6e:a1:cd:0c:eb:b1:c8:49:a3:96:
fc:5b:82:70:42:8c:98:6a:1d:2b:cb:1e:a6:0e:b3:
9d:30:f4:50:46:5d:bb:98:65:8f:d2:08:fa:6a:41:
09:43:45:3b:64:92:e9:84:68:0c:b3:01:28:93:0e:
29:a2:f7:8a:d0:8a:ce:72:3b:4c:13:d1:60:3d:45:
15:53:4a:62:53:de:17:0e:8e:63:bb:b6:ca:e5:37:
e9:11:6d:96:1b:10:ae:82:bb:9d:1d:04:6a:b6:82:
bc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1D:41:78:BE:2E:67:74:05:EA:06:37:0C:78:97:7E:AD:38:E7:A1
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/PB1BeL4uZ3QF6gY3DHiXfq0456E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:e2c0::/29
2a12:6740::/29
2a12:8ec0::/29
2a12:ccc0::/29
2a12:d3c0::/29
2a12:e240::/29
Signature Algorithm: sha256WithRSAEncryption
48:bc:3f:a2:c8:3d:9c:b1:5b:e0:58:ca:55:c6:82:7a:70:a4:
28:f3:0d:34:a2:86:b2:7c:f7:1b:e9:fc:5e:e9:db:d3:df:d2:
99:ef:da:3c:74:6c:c0:94:a2:c6:68:43:e4:29:53:c2:a0:ea:
40:34:1a:1a:18:25:48:bd:69:79:3d:eb:61:4a:e2:04:40:f5:
1b:18:61:98:cc:0d:69:da:b7:ac:e6:a7:b8:13:8e:3d:54:b9:
92:fe:f8:78:87:c5:e6:ba:6f:d9:d7:a5:6e:45:89:ca:15:38:
bb:9a:e8:d0:9a:f3:55:c2:36:3b:92:8f:4e:68:ab:16:18:b8:
c7:7f:01:f8:87:95:50:ad:ee:6d:f6:e6:af:b4:e5:58:75:b6:
9b:96:1a:9b:ca:a9:8d:90:ea:d4:96:c2:94:41:49:1a:e0:69:
a9:86:31:a1:a9:de:a2:f5:b3:7e:9a:fd:13:30:c9:2c:c8:9c:
96:4d:21:12:a5:7a:cc:fa:48:0b:ea:9c:13:74:5d:6a:19:e9:
b7:41:08:fa:37:22:b3:90:4b:65:8e:d3:bf:74:1c:ae:02:30:
84:f1:6f:f5:68:b1:ce:e1:97:9c:70:e8:16:37:c7:a8:07:e2:
61:43:66:29:a9:77:9e:b1:72:f0:14:d4:30:59:52:64:49:75:
c3:0d:37:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 03:36:56 2025 by rpki-client