Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/PZ4VVKcxrMc7oYvh3zWOLIPD9xI.roa
File: PZ4VVKcxrMc7oYvh3zWOLIPD9xI.roa (raw, json)
Hash identifier: YRFQiony92NXWZK+Luws0NaTyMsVloeoGrQea5zGfWQ=
Subject key identifier: 3D:9E:15:54:A7:31:AC:C7:3B:A1:8B:E1:DF:35:8E:2C:83:C3:F7:12
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0198E655E04621C14B41C3E881B2425BDC4B
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/PZ4VVKcxrMc7oYvh3zWOLIPD9xI.roa
Signing time: Tue 26 Aug 2025 12:24:04 +0000
ROA not before: Tue 26 Aug 2025 12:24:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205418
IP address blocks: 178.253.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e6:55:e0:46:21:c1:4b:41:c3:e8:81:b2:42:5b:dc:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Aug 26 12:24:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d9e1554a731acc73ba18be1df358e2c83c3f712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3f:46:e1:95:47:e4:d3:66:b0:21:54:45:94:
b1:c9:02:fc:78:68:03:ca:c1:67:55:69:f3:ca:c5:
2f:ea:a3:10:5b:b3:5e:3c:3c:62:5f:60:2a:a3:97:
5f:30:76:12:31:c7:d3:56:8c:e6:16:8f:fe:90:91:
45:69:27:51:65:d7:da:6e:bb:4f:ac:2d:e8:a2:10:
5a:37:da:ae:96:45:28:04:23:38:a8:bd:5a:d0:41:
01:60:c2:ae:f5:26:40:39:75:37:da:3a:ce:ef:1a:
ab:c5:74:d5:b2:40:21:68:1e:76:60:8e:31:fb:82:
c1:25:ae:c7:3e:88:79:7e:ca:94:60:87:c2:da:90:
97:83:9d:73:43:1f:f8:6d:ef:55:d5:df:97:b6:0f:
13:70:b3:cb:a6:50:eb:a4:dd:a2:23:c2:dc:f5:78:
4a:9e:85:8d:da:01:70:2b:ab:35:dd:37:58:1b:5a:
c9:59:a3:1c:f3:d4:47:9e:3f:5b:83:23:26:92:f9:
8d:d6:00:10:08:b1:9b:09:8b:fa:5d:29:bc:fa:2a:
2c:f5:f3:e6:04:6f:5c:94:c1:b6:a5:11:78:e4:68:
be:4f:96:61:bc:4e:20:ad:76:e1:a2:73:99:3d:22:
e5:82:e6:d4:e5:12:2b:52:4a:fb:5a:1d:2d:b8:6e:
c1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9E:15:54:A7:31:AC:C7:3B:A1:8B:E1:DF:35:8E:2C:83:C3:F7:12
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/PZ4VVKcxrMc7oYvh3zWOLIPD9xI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.239.0/24
Signature Algorithm: sha256WithRSAEncryption
94:56:87:8f:23:10:39:7a:f9:2f:5c:9b:c6:99:4d:f5:ea:e6:
d9:fa:aa:d7:0f:74:60:ce:6c:10:72:da:1d:86:17:aa:52:72:
70:50:8a:17:c8:57:2b:bf:85:2a:1c:ab:e0:ac:e8:6d:b8:d1:
cb:70:e6:46:4d:ea:00:ac:c3:15:fb:09:a1:87:f3:69:7d:2e:
9f:c1:5f:c6:8a:48:6b:cf:7d:75:3a:dd:63:f7:40:d0:b0:cf:
86:78:33:a4:19:85:7b:d5:23:63:5a:ad:8d:fa:75:16:0f:a7:
19:16:aa:0b:66:7b:90:ba:48:f5:64:14:db:bf:4d:cc:5a:1d:
6c:5b:91:33:de:82:76:5f:eb:7d:20:18:f6:89:2b:be:d5:de:
a5:15:37:30:2f:54:59:4c:e1:43:64:6a:da:1f:77:a6:d5:67:
e2:3f:37:fd:09:10:6d:25:9f:48:c8:68:41:b4:36:4a:ca:03:
fa:95:d6:f1:43:d9:ce:ca:77:98:13:26:a6:f6:e9:52:22:30:
98:09:1c:f9:fb:e3:75:e2:0a:89:82:d5:46:ef:d6:bc:1d:39:
52:5e:27:a8:9a:7e:ea:8a:7b:6a:94:12:a0:ed:e6:48:c4:2b:
89:ae:a4:22:25:bc:19:b3:e6:27:d1:49:18:9f:3f:dc:f6:97:
05:94:7b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:52 2025 by rpki-client