Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Pt_kqhUVP7qzgFhuBfbUwor6518.roa
File: Pt_kqhUVP7qzgFhuBfbUwor6518.roa (raw, json)
Hash identifier: nfZ0mrw1nnxJ9QFducx2cIWx34EQtCuHgVGws4THm6A=
Subject key identifier: 3E:DF:E4:AA:15:15:3F:BA:B3:80:58:6E:05:F6:D4:C2:8A:FA:E7:5F
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0199A90554BF5F663E17820936D38F59FF86
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Pt_kqhUVP7qzgFhuBfbUwor6518.roa
Signing time: Fri 03 Oct 2025 07:42:02 +0000
ROA not before: Fri 03 Oct 2025 07:42:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 178.253.210.0/24 maxlen: 24
188.255.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a9:05:54:bf:5f:66:3e:17:82:09:36:d3:8f:59:ff:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Oct 3 07:42:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3edfe4aa15153fbab380586e05f6d4c28afae75f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d4:ed:59:f9:75:ca:78:a9:23:2c:d6:2d:92:
cc:73:cf:3f:f9:26:e5:8d:5c:ce:7e:54:74:57:a7:
45:dc:87:22:ca:b6:57:71:80:eb:7f:a2:24:7d:10:
df:3f:6f:c4:d9:91:db:8d:8d:ba:3b:d8:d9:07:05:
96:59:9b:1d:3c:02:72:cf:66:68:c0:51:c0:91:54:
2f:37:44:98:ed:37:e8:8c:0e:9f:a8:77:b8:24:59:
79:c2:54:6a:34:94:03:0e:09:43:19:64:36:09:23:
ff:4c:0a:9c:e6:6b:ab:e7:6b:c8:ad:a6:99:f3:83:
c4:8b:a3:83:fb:d5:ff:f3:7d:e2:fc:fc:ec:1d:3b:
9b:04:da:08:2d:17:43:9a:45:a4:c4:2a:50:41:c5:
bb:57:52:84:f5:85:8b:96:7d:64:bb:9d:02:4a:c2:
b4:8a:cb:59:02:d4:c2:2b:d5:95:f9:4b:05:52:a3:
a0:01:d4:45:fc:30:84:04:85:b8:14:ce:1a:f7:3a:
2f:23:95:6b:83:d2:11:af:01:cc:7e:a1:bc:f4:10:
50:4d:0a:85:f6:f6:7d:cb:bd:e5:7a:ee:ad:a5:3b:
6e:d2:6d:ef:8c:0c:05:2d:57:17:dc:99:26:08:f3:
93:b4:f8:60:08:ba:a7:1c:66:3e:5f:02:b8:d9:a3:
28:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DF:E4:AA:15:15:3F:BA:B3:80:58:6E:05:F6:D4:C2:8A:FA:E7:5F
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Pt_kqhUVP7qzgFhuBfbUwor6518.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.210.0/24
188.255.193.0/24
Signature Algorithm: sha256WithRSAEncryption
79:4b:36:a3:10:45:d6:fe:96:c0:ae:e8:8c:4f:1e:46:0b:3e:
9e:60:73:0b:7b:05:89:8f:21:83:1f:b5:1e:87:e9:f5:b6:78:
e3:98:76:ac:59:fe:c5:c2:df:21:bc:8b:cb:95:fd:de:8e:50:
e7:a4:57:b0:40:38:2b:7b:f1:da:09:3c:86:bf:4f:76:71:94:
8a:6b:f0:42:4a:36:a8:f9:4c:5b:3e:e2:f6:26:dc:85:28:00:
79:3c:6c:ed:22:d8:93:15:15:bd:78:fe:32:98:a6:05:18:35:
90:ca:a5:3f:03:b3:91:5e:0e:5f:6c:26:09:26:42:48:f1:6e:
3b:7a:51:5e:f7:c8:ad:86:6b:1c:6d:d5:1d:bd:18:75:af:46:
4a:03:3a:8d:2e:ab:bf:b9:1d:77:de:22:ad:e7:b6:58:f2:84:
85:60:37:0a:3a:76:df:a8:a7:4a:45:98:b1:e4:3f:ca:57:ca:
37:a2:fe:b8:12:95:a9:ff:17:88:6c:cb:f8:e0:bd:5a:c9:aa:
32:4b:12:7e:0b:59:b6:97:d4:5f:19:12:b5:58:a8:e8:3c:85:
18:1f:95:0c:a8:35:83:f5:68:4d:c6:d6:f2:24:34:8c:dd:af:
19:2c:ff:fd:5a:0e:9e:b9:73:f0:c4:20:6e:19:7a:0c:28:ae:
48:71:c5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:55:29 2025 by rpki-client