Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/pvsSuq2_ISueFX_CCuNovFb8QGg.roa
File: pvsSuq2_ISueFX_CCuNovFb8QGg.roa (raw, json)
Hash identifier: fa+ELqCcEOm8djRQuSiQu6ZPzxIh7taBxjF45f55b+I=
Subject key identifier: A6:FB:12:BA:AD:BF:21:2B:9E:15:7F:C2:0A:E3:68:BC:56:FC:40:68
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0198A2824BC6BF56434ECA56638E46242F34
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/pvsSuq2_ISueFX_CCuNovFb8QGg.roa
Signing time: Wed 13 Aug 2025 08:18:24 +0000
ROA not before: Wed 13 Aug 2025 08:18:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398704
IP address blocks: 79.175.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a2:82:4b:c6:bf:56:43:4e:ca:56:63:8e:46:24:2f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Aug 13 08:18:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6fb12baadbf212b9e157fc20ae368bc56fc4068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4b:61:ac:09:15:6b:bd:da:5b:70:e8:19:12:
fc:6a:0c:8b:b5:58:66:1a:5c:64:05:91:74:6c:85:
f3:5c:b3:98:b0:83:46:e2:bc:90:61:69:c2:cb:05:
58:11:ef:80:8d:0e:ea:55:27:e2:97:9b:42:bc:c3:
7f:8b:be:6b:95:c9:cb:a7:b9:6e:aa:cd:40:2d:80:
ac:92:5c:fb:a5:c6:cd:1b:19:9b:7c:78:a3:8b:f3:
d8:af:8d:f2:93:87:87:f0:91:b8:8d:d1:24:6a:35:
05:6a:15:3a:af:e3:10:05:dd:f3:5a:f2:34:d4:f1:
4b:d3:b6:a7:6f:36:73:7f:06:a9:57:10:36:d2:e0:
e0:b9:ab:8c:8c:09:21:c7:98:52:8f:b7:a8:1b:9d:
db:ae:7a:2f:f4:6f:dd:b8:13:6c:b1:e7:91:b6:2e:
d2:39:fe:2e:61:c2:d3:da:15:59:8c:85:78:a6:09:
f3:55:34:ab:f9:e8:d0:03:68:d9:ae:d2:12:6a:de:
5a:f5:f1:cc:73:14:bc:2d:0a:34:60:1f:27:cf:af:
6f:38:f8:b3:1f:60:2d:5e:71:04:52:ab:4b:d8:e8:
51:cc:38:21:81:c0:25:2d:e4:f0:ac:8e:41:50:07:
47:65:68:92:7d:65:1a:66:59:38:85:cb:3e:9b:74:
74:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FB:12:BA:AD:BF:21:2B:9E:15:7F:C2:0A:E3:68:BC:56:FC:40:68
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/pvsSuq2_ISueFX_CCuNovFb8QGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.93.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:68:1d:96:d3:ec:da:b3:98:d2:ec:85:c6:89:df:f5:1e:e7:
f8:d1:24:af:15:b7:03:52:09:54:cc:a8:b5:b6:20:5d:73:d7:
47:59:01:08:49:6f:98:17:90:c6:9a:bb:dc:64:e5:4b:b2:3d:
8a:89:f4:d2:70:03:6c:0a:4f:d7:ff:00:85:74:49:92:7e:03:
05:d1:1c:7f:08:c1:9b:5f:45:25:fb:a0:44:95:5d:c8:75:4d:
6a:6b:e8:a1:99:8e:92:53:72:26:4a:3f:cd:e4:3b:2d:7d:86:
e9:2c:5e:5f:ab:e8:a3:40:7b:97:67:f9:f6:f9:74:f1:ce:06:
0e:48:bf:2a:83:c2:2b:12:da:59:54:34:e0:b4:6e:3e:1e:3a:
ea:03:30:ff:f4:3b:9d:47:9b:52:96:62:1d:45:a9:7f:0d:e0:
bb:98:28:df:5d:1c:5d:4c:6c:0d:c4:13:74:ee:ea:a0:81:3d:
15:d1:51:bf:26:c7:1d:aa:e4:e1:21:f3:29:11:22:14:cc:2a:
ee:6a:78:a5:c5:b3:95:26:d2:c0:ac:4e:b7:97:45:c0:f6:0b:
8a:3e:8e:71:cc:b9:6d:83:27:72:e4:82:29:9f:18:a4:7c:c5:
35:fe:1d:bf:21:fa:a0:0b:1b:34:2a:23:ca:9b:81:aa:38:86:
22:ab:37:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:47:10 2025 by rpki-client