Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/PPSqCB6yaGdvCZ-tsYoPWq8l0VU.roa
File: PPSqCB6yaGdvCZ-tsYoPWq8l0VU.roa (raw, json)
Hash identifier: LL8gW3Q1TN3/WR1DSBlXf67Lrrr8/Z0DptcYdMs1Ro4=
Subject key identifier: 3C:F4:AA:08:1E:B2:68:67:6F:09:9F:AD:B1:8A:0F:5A:AF:25:D1:55
Certificate issuer: /CN=f4fa758ee1d32a1cbd94646faf436d7b8d809ea4
Certificate serial: 019927F7EE8E81EEE4DD9FFEE08858D5371B
Authority key identifier: F4:FA:75:8E:E1:D3:2A:1C:BD:94:64:6F:AF:43:6D:7B:8D:80:9E:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Pp1juHTKhy9lGRvr0Nte42AnqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/PPSqCB6yaGdvCZ-tsYoPWq8l0VU.roa
Signing time: Mon 08 Sep 2025 06:16:23 +0000
ROA not before: Mon 08 Sep 2025 06:16:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60577
IP address blocks: 193.39.70.0/24 maxlen: 25
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Pp1juHTKhy9lGRvr0Nte42AnqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:f7:ee:8e:81:ee:e4:dd:9f:fe:e0:88:58:d5:37:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4fa758ee1d32a1cbd94646faf436d7b8d809ea4
Validity
Not Before: Sep 8 06:16:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3cf4aa081eb268676f099fadb18a0f5aaf25d155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:53:89:00:8a:7d:11:0e:c0:e6:e4:79:21:d8:
9e:22:a7:0d:61:c7:da:ce:74:6c:02:bf:4d:07:c6:
91:83:52:ed:ee:73:f9:c8:cd:85:35:88:df:e2:cb:
99:dc:46:9d:d4:e1:a5:2c:08:a0:fe:ba:df:81:d3:
ef:95:d4:fd:0b:42:ee:34:72:56:30:76:c6:11:5c:
0a:7d:ca:96:05:d1:f0:e8:b1:2a:df:8b:c0:c2:f4:
bd:f2:67:2c:5a:c4:cb:37:ae:0d:ad:af:fc:3b:cc:
7a:5b:d3:89:6f:0d:07:4c:7d:4c:bc:07:75:75:f4:
ee:31:cb:8b:c0:c7:63:3b:10:cc:c3:5a:34:49:95:
67:cc:4f:f6:3f:8d:37:76:0f:61:00:47:5e:7b:ed:
8e:f5:70:1e:3e:44:13:8f:4c:9b:15:b7:28:cd:73:
b2:4e:fe:32:fa:97:20:5d:bf:95:3f:90:1c:6d:21:
d6:30:07:ea:6f:8a:13:4b:ae:c5:4b:c6:7b:97:7f:
ca:c5:cb:8e:52:b5:44:33:09:17:bd:5b:60:89:67:
20:e6:11:6f:64:8e:18:a3:41:17:e2:94:ee:cf:64:
38:43:2e:f4:8c:ed:9c:a2:89:31:df:c7:d1:c3:d2:
ee:4c:ad:d8:9b:03:c0:71:a0:d7:43:11:97:c0:ea:
20:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F4:AA:08:1E:B2:68:67:6F:09:9F:AD:B1:8A:0F:5A:AF:25:D1:55
X509v3 Authority Key Identifier:
keyid:F4:FA:75:8E:E1:D3:2A:1C:BD:94:64:6F:AF:43:6D:7B:8D:80:9E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Pp1juHTKhy9lGRvr0Nte42AnqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/PPSqCB6yaGdvCZ-tsYoPWq8l0VU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.70.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:7a:4a:fa:71:f6:fe:56:a9:d4:86:be:a8:cd:2d:27:c8:b8:
34:d1:08:47:46:7d:82:5c:b0:b8:6a:e3:b6:20:a2:0a:3d:68:
4d:19:57:8d:c2:a9:b1:60:35:f5:b9:a3:92:71:8d:bc:19:89:
64:64:2b:5d:ed:01:2d:73:f6:f1:1a:77:08:64:45:8b:40:4d:
99:c6:40:5d:c2:1b:1b:28:39:7e:27:4d:ca:8d:a9:bd:0c:14:
80:06:d9:0b:50:d3:89:09:4c:c6:61:21:03:04:b0:26:d1:1e:
3e:53:64:e0:4d:73:f1:40:ee:88:b5:15:61:2e:5f:5c:fd:7a:
85:e5:d8:93:dc:49:f6:8b:b3:2a:2c:54:57:3a:fc:25:a8:37:
35:8a:3e:f2:d4:79:60:97:0e:c1:db:6c:53:b6:e7:6a:29:f7:
05:54:25:12:40:fc:a7:f2:88:c7:53:cb:09:3d:19:82:35:e0:
1f:7d:fc:54:af:4a:c6:e5:a9:25:3d:60:76:ee:e6:42:36:42:
54:c6:51:b9:0a:40:56:d4:7f:0b:0a:a4:7f:3d:f5:1c:a2:c2:
72:2e:74:b6:5b:79:2f:7c:62:9f:96:05:0c:61:b4:e3:ea:e7:
0c:47:2e:16:e3:a1:53:a2:07:d1:bf:e5:27:62:39:29:5d:57:
b7:77:1f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:57:31 2025 by rpki-client