Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/PMns1VOsYgwIE00G-YHwyc8YaK4.roa
File: PMns1VOsYgwIE00G-YHwyc8YaK4.roa (raw, json)
Hash identifier: ED57tbjfzXLiNIVc9VMOh/zC76BTvelIP+1X+Po1CHI=
Subject key identifier: 3C:C9:EC:D5:53:AC:62:0C:08:13:4D:06:F9:81:F0:C9:CF:18:68:AE
Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Certificate serial: 0198ADEA8377B45F1A5B8CDF74B8F06217D8
Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/PMns1VOsYgwIE00G-YHwyc8YaK4.roa
Signing time: Fri 15 Aug 2025 13:28:04 +0000
ROA not before: Fri 15 Aug 2025 13:28:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214943
IP address blocks: 94.26.38.0/24 maxlen: 24
94.26.105.0/24 maxlen: 24
192.109.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ad:ea:83:77:b4:5f:1a:5b:8c:df:74:b8:f0:62:17:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Validity
Not Before: Aug 15 13:28:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3cc9ecd553ac620c08134d06f981f0c9cf1868ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1a:6e:2c:11:bc:b9:eb:02:b6:a2:7f:95:75:
7f:e1:28:69:60:31:54:13:78:b5:30:29:9d:59:6f:
af:f2:6c:71:a0:58:93:0e:43:19:22:1a:93:2b:94:
26:7b:c6:5b:38:8c:cd:b0:fb:9a:55:0f:c7:e8:7e:
67:d6:0b:85:d2:37:1c:48:c5:35:ac:2c:40:59:f3:
e3:ac:25:96:68:54:97:63:a4:79:2b:a2:f0:ad:c8:
26:90:43:dd:4e:3f:e3:9a:7c:64:bf:5f:f3:25:6d:
06:95:ea:0b:e8:99:cf:73:ba:85:05:5d:eb:3f:00:
2a:1c:49:28:48:60:00:aa:89:42:b8:8b:c7:d1:03:
4b:65:2d:f1:68:be:37:d7:80:a5:02:c6:57:8c:e5:
74:91:96:27:f8:dd:4f:84:d4:d4:dd:5f:8c:68:33:
7c:d5:94:84:aa:f6:26:c6:d6:81:df:df:11:e7:c9:
2f:25:52:ce:49:ee:dc:ef:3f:74:08:70:39:56:35:
26:b2:47:85:b6:c5:fe:38:14:61:3f:09:40:6b:8b:
67:88:d6:81:a9:a5:ec:da:b3:c9:00:45:c9:8f:77:
7a:05:eb:fe:20:9c:a4:ff:34:ed:a9:5d:6e:97:d1:
26:36:10:57:11:74:b2:5f:93:3e:a1:a2:a6:31:07:
f3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C9:EC:D5:53:AC:62:0C:08:13:4D:06:F9:81:F0:C9:CF:18:68:AE
X509v3 Authority Key Identifier:
keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/PMns1VOsYgwIE00G-YHwyc8YaK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.26.38.0/24
94.26.105.0/24
192.109.138.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:55:31:ad:2e:d4:d4:43:03:71:f5:e2:60:74:38:02:52:ab:
64:ad:be:8e:d1:b8:1a:c5:f4:9d:3c:d0:43:b9:d8:27:88:0d:
93:94:d4:ea:d1:8f:5d:98:1e:8f:cc:1e:8c:71:69:b7:ef:c5:
11:6d:6a:2b:27:05:dd:53:7a:dc:da:c7:96:a8:be:61:a1:9b:
4d:9f:3e:a0:b6:ed:d3:c6:d5:3a:e0:49:9b:5a:7a:8c:99:3d:
dc:f5:e3:8e:2c:d8:46:0b:c0:3e:fe:b3:c8:df:e6:bc:69:b0:
f3:63:a5:d9:47:d3:e4:49:30:81:56:ff:29:2b:2c:d6:b0:c6:
2f:66:39:cc:10:4e:62:dd:fa:b1:d2:13:97:16:3f:73:76:15:
e1:80:74:07:a3:ad:37:cc:63:10:5e:84:e9:77:07:b1:2a:12:
c3:99:16:a7:25:72:10:a4:e2:04:97:cb:72:2c:c4:b5:ec:c0:
30:9b:d6:14:31:fc:6a:1e:be:d7:9b:d3:81:c1:35:b4:fc:aa:
8c:5c:3c:87:d8:dd:2d:db:a8:64:16:66:2c:e1:4b:8d:8a:99:
a8:d7:05:ec:61:09:93:ed:26:9a:4b:c5:d4:5d:0e:c3:aa:fe:
fb:22:be:52:85:85:be:3d:45:a4:73:30:e8:49:94:84:1d:5c:
02:e8:dd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:17:04 2025 by rpki-client