Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/PFluydWOaBTgnh4o2FnGy8AoCI0.roa
File: PFluydWOaBTgnh4o2FnGy8AoCI0.roa (raw, json)
Hash identifier: dYpglGU9LkXsNL5grxQDMbO9Dj9URsF+c2voMiQoHR0=
Subject key identifier: 3C:59:6E:C9:D5:8E:68:14:E0:9E:1E:28:D8:59:C6:CB:C0:28:08:8D
Certificate issuer: /CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Certificate serial: 0199E1EAA960F7ED28C1451C1E9D71E75D9B
Authority key identifier: 2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/PFluydWOaBTgnh4o2FnGy8AoCI0.roa
Signing time: Tue 14 Oct 2025 08:51:16 +0000
ROA not before: Tue 14 Oct 2025 08:51:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13250
IP address blocks: 212.117.192.0/19 maxlen: 29
212.117.204.0/24 maxlen: 24
2a03:380::/32 maxlen: 117
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e1:ea:a9:60:f7:ed:28:c1:45:1c:1e:9d:71:e7:5d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Validity
Not Before: Oct 14 08:51:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c596ec9d58e6814e09e1e28d859c6cbc028088d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ed:80:19:27:3c:b4:54:74:31:d7:d8:1b:10:
96:74:1c:d2:3a:18:b7:13:27:fa:b1:8a:04:f0:56:
a7:0b:f2:7b:2c:38:fd:b8:14:ca:16:79:0d:4b:95:
2e:65:78:4b:99:23:c6:b3:9c:ea:49:f0:28:97:e9:
99:e4:30:65:31:2d:0f:a0:e5:a9:5a:d0:d6:93:c0:
7b:e6:d4:d1:59:85:ed:66:dd:d7:13:a2:49:3c:de:
2d:83:9b:ac:85:00:b0:47:88:22:4a:97:16:35:1c:
3b:78:3d:7d:0d:93:1b:12:c0:cf:66:af:bf:a7:45:
4a:dd:ff:dd:13:40:bd:1e:2b:4c:52:29:13:c1:01:
38:45:ff:13:c0:83:a5:b8:78:56:67:07:d1:95:69:
ee:c4:27:c7:a3:47:11:f8:cf:0c:32:7b:ff:d3:49:
81:c0:d4:6c:ac:a7:05:d8:cc:e7:ec:88:c1:e7:af:
0e:ab:59:d8:7f:62:86:bf:6b:1b:f3:72:65:0c:7d:
b8:5f:71:ca:d5:7f:f9:60:76:b4:23:fa:ff:59:c3:
27:21:eb:cd:0f:83:68:89:3e:2b:40:10:3c:20:5b:
08:9c:9f:a8:5f:6b:d7:6e:d7:9a:60:a3:61:40:00:
9b:f2:e3:12:67:53:cf:ca:f2:30:3e:65:7a:0b:67:
e3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:59:6E:C9:D5:8E:68:14:E0:9E:1E:28:D8:59:C6:CB:C0:28:08:8D
X509v3 Authority Key Identifier:
keyid:2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/PFluydWOaBTgnh4o2FnGy8AoCI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.117.192.0/19
IPv6:
2a03:380::/32
Signature Algorithm: sha256WithRSAEncryption
64:47:cb:32:8a:e3:77:ad:12:fe:0e:fe:92:53:41:5f:37:9e:
36:2b:89:a3:5f:4a:9c:df:0f:ff:c0:b0:a3:12:00:dd:8a:29:
c2:84:1e:29:29:a9:31:0b:c5:78:11:95:73:9d:fb:ef:34:7a:
4f:2e:fd:41:7e:53:2d:22:30:00:f3:c2:15:d0:73:d9:ba:4f:
c6:77:80:67:5a:2a:52:e7:0d:e3:79:8d:e2:75:17:1b:6d:63:
1a:84:d0:70:49:a6:40:e0:52:32:8e:4f:6c:c2:07:97:f2:fe:
d9:fc:7f:61:9d:15:66:1e:2e:19:dd:40:ae:7a:55:d9:dd:c6:
1d:3f:69:d3:f8:40:81:dc:78:7a:6f:64:7a:9b:c1:c0:ff:38:
e1:ff:b2:86:69:66:51:1e:1e:03:a0:4e:02:d8:bd:07:8c:21:
43:7c:5e:54:1c:00:21:a4:15:ac:9d:04:8b:1e:28:c7:6a:b0:
75:55:a6:de:ba:6a:8f:80:29:97:dd:5b:f1:9c:41:ce:84:07:
00:d2:1c:fb:76:b6:49:df:2c:4c:50:14:42:24:a7:96:07:9a:
ae:99:10:3c:24:a1:1e:03:be:e8:5a:e8:5d:05:4a:b0:a8:93:
02:aa:55:31:90:23:05:45:57:0d:1e:33:f6:12:8c:c8:12:23:
4d:91:8a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:20 2025 by rpki-client