Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/pxwnw1PcgrCjP2FI0u6V3im7xqk.roa
File: pxwnw1PcgrCjP2FI0u6V3im7xqk.roa (raw, json)
Hash identifier: f0v/CDub2SSdoEUZ7uzF5yhPQYzLwuNhqz6tW+qNh1Q=
Subject key identifier: A7:1C:27:C3:53:DC:82:B0:A3:3F:61:48:D2:EE:95:DE:29:BB:C6:A9
Certificate issuer: /CN=d8d089eb701f69fdc7b5a099f1df90e6148c6bcb
Certificate serial: 01995D623E21D10591F2510016CB231D9586
Authority key identifier: D8:D0:89:EB:70:1F:69:FD:C7:B5:A0:99:F1:DF:90:E6:14:8C:6B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/pxwnw1PcgrCjP2FI0u6V3im7xqk.roa
Signing time: Thu 18 Sep 2025 15:12:23 +0000
ROA not before: Thu 18 Sep 2025 15:12:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199320
IP address blocks: 93.180.136.0/23 maxlen: 23
93.180.136.0/24 maxlen: 24
93.180.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5d:62:3e:21:d1:05:91:f2:51:00:16:cb:23:1d:95:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d089eb701f69fdc7b5a099f1df90e6148c6bcb
Validity
Not Before: Sep 18 15:12:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a71c27c353dc82b0a33f6148d2ee95de29bbc6a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4d:4a:e6:53:85:76:66:5f:ff:b5:70:fd:3b:
9e:0f:b4:25:2d:1d:42:29:9b:62:65:61:0f:11:33:
5d:34:dc:9a:56:5c:0c:04:5a:11:ba:54:96:fa:a2:
0b:79:53:ce:ed:d8:f8:2e:da:28:dd:98:0d:9f:38:
73:15:55:8d:25:ea:cb:d7:52:14:9a:a3:46:4f:0e:
b7:46:4e:d9:90:fa:f1:47:67:7a:9e:ff:97:20:a9:
34:d8:0e:de:82:cb:a7:c0:db:05:be:18:cb:6d:f7:
ad:a7:f4:ce:30:e6:d5:3a:e8:9f:57:79:9b:ea:77:
55:45:6b:87:70:21:80:d2:d2:7e:58:d8:be:42:29:
9b:a6:c5:81:95:a0:ce:4c:78:41:87:08:dc:1c:26:
93:fd:f6:8b:95:8f:df:f6:38:5f:3a:35:82:2e:33:
c4:74:92:7d:f1:80:47:08:62:3c:f1:64:c6:13:70:
f9:3d:ba:54:f2:69:f1:12:6d:72:bc:cb:4c:70:a7:
04:f3:f2:dc:b2:97:0a:dd:f7:e0:85:c6:1e:73:9c:
70:f1:4a:cb:14:4c:fe:e5:b1:91:18:b6:e2:18:13:
53:e4:5f:dc:a1:b0:fa:68:e6:3f:bd:e6:30:80:ac:
dd:c8:ad:b6:5b:20:65:7a:b1:f6:41:d5:96:ba:ad:
33:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1C:27:C3:53:DC:82:B0:A3:3F:61:48:D2:EE:95:DE:29:BB:C6:A9
X509v3 Authority Key Identifier:
keyid:D8:D0:89:EB:70:1F:69:FD:C7:B5:A0:99:F1:DF:90:E6:14:8C:6B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/pxwnw1PcgrCjP2FI0u6V3im7xqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.180.136.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:37:33:d6:79:c5:2b:cf:83:58:b3:1d:25:34:9f:f6:e6:c9:
78:82:5d:18:c7:11:3f:ea:53:49:0d:42:ef:d7:f3:f0:06:23:
66:9c:33:75:b0:e0:86:b7:5b:f5:a4:e9:64:d1:c6:88:6a:40:
49:b5:57:18:f0:be:8a:ed:fd:cb:fd:bd:cf:01:4c:b5:90:de:
1f:f9:46:70:1e:88:6e:05:ad:33:91:c0:19:6d:32:76:a1:43:
ba:34:a4:ba:22:02:08:90:3f:a8:09:7f:7d:4c:06:d1:e3:a3:
ba:cc:6a:5f:38:d8:82:ba:7d:16:b7:c8:51:a6:ae:48:01:45:
a9:e9:f4:e6:22:c7:5f:01:25:ca:ae:f4:30:b2:00:d7:ce:64:
ba:fa:5a:fd:7c:be:3f:f9:e4:83:8b:3f:c4:bf:1d:10:38:63:
89:b7:f1:b1:1c:73:6b:2c:1a:0d:ee:af:37:e3:17:f9:5b:68:
34:79:38:5c:2d:b3:f7:e0:e6:c8:4c:24:48:1a:99:65:a6:66:
2f:d3:1c:cb:77:60:f7:eb:b7:a0:59:d5:96:d4:ec:0d:d0:84:
28:f0:50:2f:a3:4a:02:7c:c7:4c:de:98:0c:09:75:8b:3f:d6:
64:df:b7:66:a3:2f:73:20:23:23:7f:7f:7d:c9:eb:21:a5:70:
e0:85:bc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:55:23 2025 by rpki-client