Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PgSlnEegEKQaLHvb36Z-5Py1Bjk.roa
File: PgSlnEegEKQaLHvb36Z-5Py1Bjk.roa (raw, json)
Hash identifier: U59LsipjdxWMQTFDdzfu7Mx93ggrGFLEaXhqBqGkKGQ=
Subject key identifier: 3E:04:A5:9C:47:A0:10:A4:1A:2C:7B:DB:DF:A6:7E:E4:FC:B5:06:39
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019A61E0356964D4029E3F9BD47A29E60FE0
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PgSlnEegEKQaLHvb36Z-5Py1Bjk.roa
Signing time: Sat 08 Nov 2025 05:11:14 +0000
ROA not before: Sat 08 Nov 2025 05:11:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213711
IP address blocks: 37.202.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Nov 2025 20:52:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:61:e0:35:69:64:d4:02:9e:3f:9b:d4:7a:29:e6:0f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Nov 8 05:11:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e04a59c47a010a41a2c7bdbdfa67ee4fcb50639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:26:30:ac:f1:98:1d:10:5e:0d:8b:e4:a8:dc:
fd:f9:f7:6d:ee:86:eb:f5:b3:e8:ad:76:56:44:ff:
f6:cb:61:a9:b0:61:fa:5b:30:af:44:98:f9:97:23:
7b:ea:c4:f4:32:c8:7d:c9:85:a1:75:2a:24:dc:64:
47:d0:90:78:07:cc:02:2c:8e:d9:95:64:67:1d:dc:
8d:53:a5:e9:4e:d1:a9:9b:d3:92:ee:e5:a8:65:7f:
e0:ce:0b:6a:da:ed:5b:05:40:a2:fd:42:0e:d0:3a:
66:f8:d9:05:67:10:78:24:6d:d7:21:b3:32:09:00:
1b:9e:b0:86:65:14:ee:e3:8d:8d:44:db:d8:e3:76:
25:59:0b:84:df:05:69:84:f7:1e:66:53:0b:97:72:
16:64:1a:7f:9d:17:46:83:8d:06:5f:e0:04:28:bd:
03:8f:00:ac:6c:fe:eb:99:b2:6e:3d:67:7d:69:1c:
90:93:2a:4f:4e:3f:f9:83:a5:35:9a:48:f4:c7:dd:
4d:8a:d7:4c:5e:44:c6:00:96:8a:20:fc:22:b6:b7:
32:cf:4d:1c:9d:a7:49:ec:58:eb:75:8c:9d:94:ef:
d8:97:25:24:01:27:f1:af:bd:d4:da:cc:79:87:b2:
bc:7a:e7:42:dd:bb:8b:9f:de:63:00:ad:33:83:74:
8b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:04:A5:9C:47:A0:10:A4:1A:2C:7B:DB:DF:A6:7E:E4:FC:B5:06:39
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PgSlnEegEKQaLHvb36Z-5Py1Bjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.203.0/24
Signature Algorithm: sha256WithRSAEncryption
16:46:41:5c:3f:af:14:fe:a0:93:63:21:34:45:ee:aa:4c:df:
e3:e2:7f:9d:1e:72:68:f8:5f:b3:a7:a8:4a:4e:76:f7:3d:10:
f7:86:61:99:2b:82:1e:43:28:73:10:e8:b4:e1:5c:be:6d:3d:
88:f0:98:f8:32:35:2a:7b:ec:51:f3:a2:39:69:4f:6c:01:56:
9f:07:7e:1e:69:67:ec:62:7d:93:58:9a:70:04:0a:38:d8:9e:
8c:f1:a6:69:7c:fd:36:05:ab:d9:48:0b:4a:9c:b6:9e:e6:14:
8d:78:b5:5d:61:94:4d:a0:17:d5:3d:8f:05:c9:f0:41:7a:52:
49:7a:1d:66:46:df:7e:ae:55:cb:eb:3f:6f:d0:99:a2:05:bd:
8a:e9:3d:cb:3f:5b:ee:b5:f5:e7:f7:36:a2:f4:1c:1c:09:fa:
d0:a0:3e:67:31:e6:36:6b:e0:bc:86:10:6c:a4:09:d4:cd:86:
bb:6e:0f:56:72:7b:bd:1c:d2:b8:41:11:53:83:de:df:0c:8b:
55:bf:f2:73:65:70:52:a9:0d:b2:ee:42:f2:1b:04:1e:50:48:
da:12:79:66:85:96:0d:0a:05:35:a1:72:ad:65:69:0d:f2:88:
1f:82:bc:46:26:44:31:e0:a7:73:dd:2b:6e:84:69:d4:da:eb:
7b:8f:8e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 14 06:40:04 2025 by rpki-client