Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/pxrczszu4gk7oPsVsfTnGAHE-EY.roa
File: pxrczszu4gk7oPsVsfTnGAHE-EY.roa (raw, json)
Hash identifier: e7fxLeat8zBves10MZjMVqSmM3nHW7bHuvHyNqARg3c=
Subject key identifier: A7:1A:DC:CE:CC:EE:E2:09:3B:A0:FB:15:B1:F4:E7:18:01:C4:F8:46
Certificate issuer: /CN=63f14f8e144c6d50c38ab4faff5ac6e547fe1d47
Certificate serial: 0199CDAB46A65DDAB4615E8662AFFB33264C
Authority key identifier: 63:F1:4F:8E:14:4C:6D:50:C3:8A:B4:FA:FF:5A:C6:E5:47:FE:1D:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/pxrczszu4gk7oPsVsfTnGAHE-EY.roa
Signing time: Fri 10 Oct 2025 10:29:37 +0000
ROA not before: Fri 10 Oct 2025 10:29:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43926
IP address blocks: 46.253.32.0/21 maxlen: 21
185.58.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cd:ab:46:a6:5d:da:b4:61:5e:86:62:af:fb:33:26:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63f14f8e144c6d50c38ab4faff5ac6e547fe1d47
Validity
Not Before: Oct 10 10:29:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a71adccecceee2093ba0fb15b1f4e71801c4f846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:63:d9:f4:08:72:12:6b:b2:78:7d:04:28:86:
9e:b1:58:56:b3:4d:b5:0b:13:af:81:0f:43:5a:6c:
d4:78:78:0c:2c:68:1b:3c:a6:9d:f0:57:7a:5e:d5:
0e:e3:05:a6:a5:9a:8c:f1:96:07:aa:0f:b7:c1:b4:
0d:d9:9c:16:7f:15:12:d3:da:ba:ea:d9:60:53:b2:
a8:fc:8b:04:b9:98:81:cd:bb:03:4b:21:d1:bf:ef:
6f:6f:d5:f3:80:48:2c:ed:2c:a3:d5:e1:ab:aa:e2:
32:1f:ea:bf:f1:08:7a:5a:e0:eb:f9:62:89:ae:27:
78:67:dc:0a:a9:35:d0:53:6d:83:42:02:6f:a7:45:
c8:aa:1e:d6:5a:d4:8f:27:47:01:86:65:3c:90:62:
2a:fb:40:2e:f3:b5:2f:8f:8c:2d:93:bc:00:0c:01:
ca:46:ab:b6:7f:17:4c:4f:a7:d1:fa:3e:55:39:43:
16:94:a7:1e:bc:19:e0:96:6c:3d:12:82:b8:14:9b:
d3:6d:dd:83:bc:1b:e7:aa:dd:55:05:76:30:0a:a7:
34:2e:e7:14:d6:90:48:32:6e:53:04:24:4e:1b:e5:
0b:50:7f:64:31:be:cd:b3:1b:da:79:8e:b1:8d:1a:
01:0f:5a:07:69:c7:0e:95:45:74:f4:18:6a:cb:e3:
41:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1A:DC:CE:CC:EE:E2:09:3B:A0:FB:15:B1:F4:E7:18:01:C4:F8:46
X509v3 Authority Key Identifier:
keyid:63:F1:4F:8E:14:4C:6D:50:C3:8A:B4:FA:FF:5A:C6:E5:47:FE:1D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/pxrczszu4gk7oPsVsfTnGAHE-EY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.32.0/21
185.58.172.0/22
Signature Algorithm: sha256WithRSAEncryption
69:12:ea:d0:5c:f7:be:85:9a:2e:25:63:bf:82:a0:ce:3f:5f:
f4:25:d2:aa:e2:c4:3d:dd:a9:d0:a1:49:2a:4a:3d:24:67:cc:
42:e7:d5:01:6a:fc:45:f8:5b:60:51:63:8d:3d:96:44:91:e8:
e5:34:28:dc:48:65:90:ab:da:b5:43:43:f9:44:97:36:9e:19:
20:53:15:24:38:69:69:e8:17:c1:7e:ea:85:01:31:af:b4:d6:
22:72:96:6a:4b:bc:90:65:92:60:61:0c:33:95:49:09:9b:fe:
b6:ff:d3:5d:f7:a6:54:20:7e:7b:e9:ac:69:37:46:3e:68:35:
34:3b:94:f0:db:f4:60:99:de:6f:8c:96:99:38:d7:35:70:4d:
fe:e8:1e:ee:f4:b4:64:51:29:44:a8:40:bd:54:3c:fe:43:08:
00:e1:89:91:f9:5d:0b:97:b8:44:a8:dd:77:66:ab:a4:75:55:
ab:2b:bb:0e:26:aa:69:d8:9c:a7:d2:7a:d8:5f:0a:52:9c:b6:
fb:5c:eb:21:71:18:6a:4a:0c:cc:c9:4e:83:1b:32:06:b1:dd:
cb:e6:45:91:97:b9:f1:95:e8:b3:37:be:68:bf:76:ef:84:07:
68:79:20:06:56:f2:80:ab:80:4e:ee:b7:ef:25:2f:55:9e:9b:
ff:27:e1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:45:48 2025 by rpki-client