Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/pudWPRPK-Wa6m4Pmer93cIZQrII.roa
File: pudWPRPK-Wa6m4Pmer93cIZQrII.roa (raw, json)
Hash identifier: o79B3cprgcfu6XLm8f0k9H9gQI2spOpkuG4dS9wCxDo=
Subject key identifier: A6:E7:56:3D:13:CA:F9:66:BA:9B:83:E6:7A:BF:77:70:86:50:AC:82
Certificate issuer: /CN=046acac713123856d4ae6c16054602684dfd07cb
Certificate serial: 0197AC8146385597215E136D64BA2841EDB1
Authority key identifier: 04:6A:CA:C7:13:12:38:56:D4:AE:6C:16:05:46:02:68:4D:FD:07:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/pudWPRPK-Wa6m4Pmer93cIZQrII.roa
Signing time: Thu 26 Jun 2025 13:50:42 +0000
ROA not before: Thu 26 Jun 2025 13:50:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214718
IP address blocks: 217.171.208.0/20 maxlen: 20
2a14:6440::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ac:81:46:38:55:97:21:5e:13:6d:64:ba:28:41:ed:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046acac713123856d4ae6c16054602684dfd07cb
Validity
Not Before: Jun 26 13:50:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6e7563d13caf966ba9b83e67abf77708650ac82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b9:49:18:e5:3d:91:a6:65:c2:a0:fc:6b:12:
f4:0e:22:5e:de:0f:34:db:84:9e:5c:0f:31:be:bb:
14:75:b4:a9:5f:a3:02:4a:6b:31:0c:ab:ab:97:c1:
c3:e2:a9:5b:ab:44:80:09:67:02:70:31:80:03:f2:
fa:f6:ee:26:69:e4:cb:05:35:2b:34:5b:fe:55:10:
10:42:00:a7:3d:b2:f1:ff:73:6c:3a:74:9c:e0:61:
ae:b4:66:c6:cc:21:74:fc:18:f8:bc:d7:e8:e2:ae:
ad:21:35:9c:e7:ac:f5:41:85:30:9d:3f:2f:32:d1:
da:c2:b6:0e:9f:89:39:8a:06:63:17:7c:93:fd:71:
00:ab:64:f9:5f:c4:9d:f0:fc:43:e5:8a:22:c5:61:
7c:93:15:9d:74:04:de:78:65:24:53:f0:fb:d1:dc:
0b:d7:0b:4b:65:a4:ea:3f:f4:18:f7:dc:10:59:ae:
f2:25:48:62:76:2a:13:4b:8b:82:a4:ff:8f:36:c1:
87:07:41:34:47:7d:80:51:cf:f0:d3:7f:cf:b9:82:
73:05:7a:9a:6e:ec:b3:55:e9:17:6e:76:b9:cc:31:
3c:80:30:dc:3b:0f:0b:b2:f5:8c:f1:c5:c5:e6:87:
10:dd:6d:0a:12:d8:65:26:24:2d:f6:50:ec:9b:8f:
4e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E7:56:3D:13:CA:F9:66:BA:9B:83:E6:7A:BF:77:70:86:50:AC:82
X509v3 Authority Key Identifier:
keyid:04:6A:CA:C7:13:12:38:56:D4:AE:6C:16:05:46:02:68:4D:FD:07:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/pudWPRPK-Wa6m4Pmer93cIZQrII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.171.208.0/20
IPv6:
2a14:6440::/32
Signature Algorithm: sha256WithRSAEncryption
5c:aa:d0:67:ad:ab:c9:a2:17:56:99:10:d2:3e:ee:7b:7f:cd:
7b:56:2d:26:57:17:b6:31:82:bf:08:7f:63:37:fb:90:1b:e2:
66:8b:c3:0d:ed:e9:60:0a:f6:db:06:1e:19:7f:6e:55:2c:66:
11:a5:eb:47:bd:a4:25:50:8d:5b:44:46:4a:09:88:9a:42:a1:
53:04:50:49:b9:04:1f:18:2e:0f:15:5e:d9:48:0c:fa:ad:ff:
90:4d:f0:9f:e0:2a:28:fb:ca:17:23:a2:8f:9f:c8:5f:fc:7d:
bd:09:16:1f:b9:49:90:c0:48:bd:20:66:80:e4:8c:c8:b7:43:
e1:1a:f5:92:46:4b:84:38:e1:c8:be:b6:ea:2c:c0:fe:8d:4a:
70:16:a1:d4:4d:e7:1a:d1:a9:29:a8:bb:e4:72:49:0b:02:64:
75:5c:a8:d1:b1:99:a7:e4:bc:36:36:0a:e8:ba:9a:00:27:0b:
34:1c:36:1a:10:21:3b:60:e6:89:06:fe:a1:3f:11:a9:5d:44:
ae:af:8f:9a:ee:8a:d0:cd:37:77:89:0c:be:93:97:b3:1f:4c:
5a:31:1e:c3:b9:c6:9d:4e:da:d6:89:d0:0e:51:c3:15:ec:49:
b3:f1:d2:84:a4:97:18:2d:84:db:30:51:2d:85:a6:c6:32:45:
45:b6:4a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:20:09 2025 by rpki-client