Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/6PCU3cO78vRfN1wZw3JPqFUpklQ.roa
File: 6PCU3cO78vRfN1wZw3JPqFUpklQ.roa (raw, json)
Hash identifier: eff/v1rdC28VDXM+608QCV+xjPWxDUMbjhPzXgxHkuc=
Subject key identifier: E8:F0:94:DD:C3:BB:F2:F4:5F:37:5C:19:C3:72:4F:A8:55:29:92:54
Certificate issuer: /CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a
Certificate serial: 019A01A41A15C9B5A178A9DA16E71C5125E6
Authority key identifier: BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/6PCU3cO78vRfN1wZw3JPqFUpklQ.roa
Signing time: Mon 20 Oct 2025 12:42:03 +0000
ROA not before: Mon 20 Oct 2025 12:42:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56648
IP address blocks: 89.207.157.0/24 maxlen: 24
185.20.5.0/24 maxlen: 24
2a13:2900::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:a4:1a:15:c9:b5:a1:78:a9:da:16:e7:1c:51:25:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a
Validity
Not Before: Oct 20 12:42:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8f094ddc3bbf2f45f375c19c3724fa855299254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8f:cd:63:2d:f7:41:a0:2a:89:37:f4:e7:3f:
8f:f2:22:b2:25:1f:20:2d:b9:e6:ed:26:e1:31:fa:
3b:9b:c1:b7:97:df:b3:3f:db:aa:f2:24:4d:44:e6:
97:bc:75:d7:23:9f:fc:bb:e2:b9:91:2d:78:1b:c7:
a3:03:0d:bd:23:a4:87:25:aa:0c:78:a9:a7:5b:37:
96:d0:15:01:36:63:97:40:4a:e1:d6:c9:a1:d8:dd:
37:69:eb:b0:bf:2b:ea:b3:fb:d7:89:07:b9:ef:2a:
0f:54:68:53:18:80:7f:30:ae:32:50:2b:e3:df:ea:
81:7d:c9:59:86:7b:b9:7d:e5:2b:06:aa:0f:e7:b4:
6f:2c:05:72:25:40:61:29:8f:9e:82:2c:36:d1:5a:
67:71:05:e5:55:f4:7c:4c:7a:ef:a4:e5:11:22:d0:
a3:d8:f4:30:ae:79:ef:78:aa:3d:cb:e9:a2:90:17:
dc:d5:de:c4:08:c9:4f:b2:98:ca:dd:d5:cd:10:c5:
cf:72:60:23:df:61:e4:60:8e:1e:61:3b:40:96:5c:
7f:c5:28:37:98:b0:32:1b:f5:d0:f5:1d:ee:89:d7:
c9:53:70:7a:95:11:30:8b:55:37:71:2e:fe:b5:f4:
24:75:29:41:0c:64:79:7e:f0:b9:67:1b:06:15:ed:
4e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F0:94:DD:C3:BB:F2:F4:5F:37:5C:19:C3:72:4F:A8:55:29:92:54
X509v3 Authority Key Identifier:
keyid:BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/6PCU3cO78vRfN1wZw3JPqFUpklQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.207.157.0/24
185.20.5.0/24
IPv6:
2a13:2900::/29
Signature Algorithm: sha256WithRSAEncryption
1f:4b:e5:c5:51:5b:09:6d:e1:b4:f7:50:44:21:17:30:2a:95:
2e:c7:f3:cd:f9:af:4f:7b:70:2e:f5:40:14:19:1c:2b:ae:d3:
82:22:70:3d:36:3a:b9:e8:a1:b9:2d:8c:0e:ba:d2:39:de:83:
27:57:f4:83:ed:93:72:ac:d3:7d:8a:c7:ac:91:09:20:33:fe:
38:ad:6b:0c:0b:ef:72:53:25:43:34:af:9d:74:5e:3f:6d:36:
4d:b2:c7:3e:31:b3:6b:ad:73:10:25:12:78:6e:92:1b:74:a1:
a4:10:0c:8e:dd:2b:ec:99:e1:94:58:eb:66:50:17:7d:be:2b:
60:2a:79:7c:5a:4b:67:7b:42:16:b7:02:13:99:b0:22:85:1b:
b1:f4:0d:62:a0:90:7e:bf:db:99:26:d1:ae:fe:2b:11:41:95:
e0:3b:f5:d8:28:0f:fa:f5:be:e0:a3:25:7b:aa:4a:73:44:3f:
cb:c2:45:57:91:dd:71:bb:6f:70:28:9e:45:42:bc:41:81:70:
71:09:b9:27:c5:c1:22:c9:74:26:9a:44:40:da:40:50:aa:50:
6c:39:c9:9f:77:f3:d6:73:df:0d:6a:99:8a:b1:f2:8e:96:64:
8a:22:ac:ae:c0:e3:7b:2d:e0:79:2a:93:0a:74:53:3c:b7:8b:
f3:35:10:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:55:28 2025 by rpki-client