Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Pl6_b4ESbhBQwVrjzE07MKHE2CY.roa
File: Pl6_b4ESbhBQwVrjzE07MKHE2CY.roa (raw, json)
Hash identifier: xjan3bQ1OceBM5n08V3cPxCTA3U7Zazmx9IxnGNehfY=
Subject key identifier: 3E:5E:BF:6F:81:12:6E:10:50:C1:5A:E3:CC:4D:3B:30:A1:C4:D8:26
Certificate issuer: /CN=16bfc6576ff4287a88e9de3e210b9ec0e111b5ad
Certificate serial: 019764DF630D7020A9C6AF01CAE358498B26
Authority key identifier: 16:BF:C6:57:6F:F4:28:7A:88:E9:DE:3E:21:0B:9E:C0:E1:11:B5:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fr_GV2_0KHqI6d4-IQuewOERta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Pl6_b4ESbhBQwVrjzE07MKHE2CY.roa
Signing time: Thu 12 Jun 2025 16:00:50 +0000
ROA not before: Thu 12 Jun 2025 16:00:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59766
IP address blocks: 62.69.128.0/21 maxlen: 21
89.148.128.0/18 maxlen: 24
185.51.168.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Fr_GV2_0KHqI6d4-IQuewOERta0.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Fr_GV2_0KHqI6d4-IQuewOERta0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fr_GV2_0KHqI6d4-IQuewOERta0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:df:63:0d:70:20:a9:c6:af:01:ca:e3:58:49:8b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16bfc6576ff4287a88e9de3e210b9ec0e111b5ad
Validity
Not Before: Jun 12 16:00:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e5ebf6f81126e1050c15ae3cc4d3b30a1c4d826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:41:fd:cc:2f:81:4f:89:ae:93:ca:7f:da:f5:
cf:59:94:f2:85:f3:c8:36:7a:bd:5c:24:8d:74:68:
9d:5a:41:06:e3:a9:b7:4e:18:9e:47:24:f0:39:a0:
3a:7e:02:69:5a:58:54:7d:fb:40:84:b3:03:89:9d:
bf:45:98:d3:bd:0d:e6:89:05:96:c3:b5:fd:d4:30:
c9:1f:51:cb:c2:cc:99:20:8d:49:0f:0e:dc:28:99:
a0:62:f5:81:cb:99:23:de:68:3f:03:64:5d:d8:f6:
9c:94:cf:aa:04:22:ee:54:ab:28:cc:01:af:61:aa:
c2:f0:fd:a6:f7:ef:b8:1d:76:77:11:b2:a3:14:bf:
bf:ac:3b:c6:e2:b6:c4:37:8f:d6:f5:32:b5:04:04:
9e:4c:7f:71:36:4c:74:46:c2:88:29:0c:2f:63:64:
b5:6e:06:41:0e:ab:ac:cb:a5:5d:59:6b:fa:77:34:
bc:af:75:50:48:33:92:8f:5e:18:25:68:52:81:1b:
a9:1a:d9:34:af:e7:ab:3c:94:42:5b:6d:63:09:08:
61:7d:54:6a:76:05:e9:51:75:28:e5:b4:8c:cb:98:
b8:31:ed:b4:84:83:b7:b0:f6:66:c0:2f:5e:5e:92:
ca:3e:d3:9b:19:5a:70:3f:84:e7:e0:1e:c9:c9:a9:
8e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:5E:BF:6F:81:12:6E:10:50:C1:5A:E3:CC:4D:3B:30:A1:C4:D8:26
X509v3 Authority Key Identifier:
keyid:16:BF:C6:57:6F:F4:28:7A:88:E9:DE:3E:21:0B:9E:C0:E1:11:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fr_GV2_0KHqI6d4-IQuewOERta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Pl6_b4ESbhBQwVrjzE07MKHE2CY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Fr_GV2_0KHqI6d4-IQuewOERta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.69.128.0/21
89.148.128.0/18
185.51.168.0/22
Signature Algorithm: sha256WithRSAEncryption
53:0d:0d:f4:a8:03:74:32:ea:e4:8a:17:20:23:61:27:6d:55:
f8:e9:28:af:50:5c:68:88:f4:d2:8d:cb:d5:ac:5e:70:5e:32:
0c:25:5f:5e:7a:1a:89:5c:7b:3e:5a:05:33:f2:b8:de:64:6b:
86:c1:37:b3:99:cf:f7:6f:3a:e0:f2:2a:53:37:93:04:36:57:
3e:a7:6b:32:5a:40:1d:55:59:ec:37:76:ac:8b:17:6e:e1:59:
16:2d:ae:f7:35:b4:0e:ce:28:44:39:02:c3:c2:17:7f:78:6a:
f7:f2:ba:40:e1:18:16:a6:97:68:08:70:26:56:c4:76:38:3d:
ce:0b:67:16:90:84:b7:3d:ee:5f:85:b7:5e:f1:d8:c2:e9:e1:
2a:13:53:c7:c6:3b:f6:10:27:91:64:d4:a8:b5:80:ac:28:b7:
01:ac:09:1d:94:3e:6a:d4:cb:a3:05:f7:93:66:4d:8b:a1:c4:
25:29:7c:db:a2:2a:60:05:97:82:27:26:52:9a:eb:6b:8c:f4:
a9:ba:bc:30:65:26:23:40:44:39:eb:39:66:28:5d:a1:ed:56:
49:94:5c:f5:9d:a2:a2:39:42:60:ab:d0:96:b4:3e:94:55:1b:
51:c8:04:62:35:03:74:d1:45:c1:53:32:3f:e2:21:ad:71:19:
cf:a3:94:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:24:03 2025 by rpki-client