Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/PNqLkZolFE-nbQkO_6muHe9SeaA.roa
File: PNqLkZolFE-nbQkO_6muHe9SeaA.roa (raw, json)
Hash identifier: Gal/fe+4IR2MPMSFBjUaz/ftVvLiPlkLRd02XNWJeOs=
Subject key identifier: 3C:DA:8B:91:9A:25:14:4F:A7:6D:09:0E:FF:A9:AE:1D:EF:52:79:A0
Certificate issuer: /CN=29766d1ae6eb21849bc3a3b2d18e863d273d2404
Certificate serial: 01991A038B8D7F73F4731F4B5490B1741C1C
Authority key identifier: 29:76:6D:1A:E6:EB:21:84:9B:C3:A3:B2:D1:8E:86:3D:27:3D:24:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/PNqLkZolFE-nbQkO_6muHe9SeaA.roa
Signing time: Fri 05 Sep 2025 13:14:23 +0000
ROA not before: Fri 05 Sep 2025 13:14:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206099
IP address blocks: 94.156.70.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1a:03:8b:8d:7f:73:f4:73:1f:4b:54:90:b1:74:1c:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29766d1ae6eb21849bc3a3b2d18e863d273d2404
Validity
Not Before: Sep 5 13:14:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3cda8b919a25144fa76d090effa9ae1def5279a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:09:e2:81:3a:9e:ac:0d:0b:1b:32:1b:cf:63:
d1:c3:5d:1f:47:19:f6:17:15:f0:51:87:19:77:0d:
f7:3c:0e:f1:e8:b0:cf:12:e2:74:89:f7:bc:fb:44:
7b:69:c3:83:0c:7a:32:d1:4a:77:77:cc:e7:25:3b:
42:ed:f3:f3:6f:df:0b:e6:10:a7:0e:f8:fc:52:e5:
9a:e2:ca:20:72:4b:76:ac:84:68:62:f9:59:35:b9:
da:0d:e7:e3:1a:43:30:6e:32:48:5b:c6:06:69:fb:
dc:fb:06:e3:be:2f:9a:8c:97:73:77:b8:2d:28:13:
e3:92:a4:ac:0c:11:97:03:81:d2:b6:ab:e0:6f:7e:
d8:35:01:59:dc:aa:36:2e:10:c2:7b:09:ae:02:49:
5e:45:22:ad:7a:fa:49:56:c4:77:2e:ad:32:5e:a5:
56:29:32:5a:73:8f:26:0f:e7:e8:17:fc:1e:d7:78:
75:d2:86:d7:63:ed:31:7f:6c:99:1b:c4:4b:7c:9d:
35:fa:ca:2d:3d:68:6a:08:af:d9:21:e1:31:c7:1e:
a9:b5:dd:37:ad:41:e4:ca:c6:25:7d:98:28:8a:f1:
15:b0:98:1b:ca:95:1b:3b:18:53:ab:ab:d7:99:a3:
69:d5:9b:58:17:34:d9:67:e2:4d:d5:a3:c5:c1:65:
67:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DA:8B:91:9A:25:14:4F:A7:6D:09:0E:FF:A9:AE:1D:EF:52:79:A0
X509v3 Authority Key Identifier:
keyid:29:76:6D:1A:E6:EB:21:84:9B:C3:A3:B2:D1:8E:86:3D:27:3D:24:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/PNqLkZolFE-nbQkO_6muHe9SeaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b711fb-e584-4f35-a0ec-115d68d9b81b/1/KXZtGubrIYSbw6Oy0Y6GPSc9JAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.70.0/23
Signature Algorithm: sha256WithRSAEncryption
05:22:b9:65:bb:17:8a:e6:a0:1b:b1:cd:53:9e:c7:94:ad:2d:
47:57:39:93:67:78:da:37:fa:31:d0:dd:f3:5f:e3:e0:2f:3b:
fb:5d:c9:9e:c4:6d:c5:fa:14:75:41:ae:33:df:c8:d8:cc:8a:
cc:56:d0:a3:20:5c:b4:06:00:e1:2a:4b:15:b3:80:1d:22:a1:
5a:be:ef:cc:88:c9:46:44:0b:06:d7:4f:73:c4:54:07:a5:fe:
fd:be:e2:a5:e1:41:5c:fd:4e:b4:f3:50:97:06:b1:ac:77:f7:
ac:d1:e7:f3:78:35:98:44:f8:78:36:6f:7a:92:65:02:ef:f7:
d9:86:40:cd:cf:db:06:5a:76:cd:bb:5b:52:95:5d:8a:df:a5:
a1:c3:5f:02:3f:47:9a:c6:7c:9c:f9:a1:cb:6a:c2:be:8a:30:
63:cd:a1:fa:59:a7:04:88:03:79:aa:21:24:77:5f:f9:c3:51:
4a:01:63:94:4d:13:0c:bc:c3:1a:95:33:46:9a:c8:2b:75:9e:
c9:0f:6e:a8:46:0e:b5:ff:76:67:33:fc:d5:18:f8:40:73:85:
88:19:4f:69:3b:45:cd:21:af:09:e7:e8:f2:89:95:75:51:b6:
09:23:dd:30:80:10:4d:4b:1d:cf:8f:5c:14:7a:b5:fa:35:f2:
68:60:2b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 20:09:33 2025 by rpki-client