Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/pLrG1Jk8y_PSHcBjqwFvnPBrCfk.roa
File: pLrG1Jk8y_PSHcBjqwFvnPBrCfk.roa (raw, json)
Hash identifier: L3xcP7+zXuAEnHkbFJ8G7AgoW2gbRSxFSqISwohVgeo=
Subject key identifier: A4:BA:C6:D4:99:3C:CB:F3:D2:1D:C0:63:AB:01:6F:9C:F0:6B:09:F9
Certificate issuer: /CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Certificate serial: 0197B09B61B6D2DB3263494E08B3296ABC28
Authority key identifier: AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/pLrG1Jk8y_PSHcBjqwFvnPBrCfk.roa
Signing time: Fri 27 Jun 2025 08:57:42 +0000
ROA not before: Fri 27 Jun 2025 08:57:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62442
IP address blocks: 78.157.32.0/19 maxlen: 19
78.157.32.0/24 maxlen: 24
78.157.34.0/24 maxlen: 24
78.157.35.0/24 maxlen: 24
78.157.36.0/24 maxlen: 24
78.157.37.0/24 maxlen: 24
78.157.38.0/24 maxlen: 24
78.157.39.0/24 maxlen: 24
78.157.40.0/24 maxlen: 24
78.157.41.0/24 maxlen: 24
78.157.42.0/24 maxlen: 24
78.157.43.0/24 maxlen: 24
78.157.44.0/24 maxlen: 24
78.157.45.0/24 maxlen: 24
78.157.46.0/24 maxlen: 24
78.157.47.0/24 maxlen: 24
78.157.48.0/21 maxlen: 21
78.157.48.0/24 maxlen: 24
78.157.49.0/24 maxlen: 24
78.157.50.0/24 maxlen: 24
78.157.51.0/24 maxlen: 24
78.157.52.0/24 maxlen: 24
78.157.53.0/24 maxlen: 24
78.157.54.0/23 maxlen: 23
78.157.54.0/24 maxlen: 24
78.157.55.0/24 maxlen: 24
78.157.56.0/21 maxlen: 21
78.157.56.0/24 maxlen: 24
78.157.57.0/24 maxlen: 24
78.157.58.0/24 maxlen: 24
78.157.59.0/24 maxlen: 24
78.157.60.0/23 maxlen: 23
78.157.60.0/24 maxlen: 24
78.157.61.0/24 maxlen: 24
78.157.62.0/24 maxlen: 24
78.157.63.0/24 maxlen: 24
89.221.84.0/22 maxlen: 22
89.221.88.0/21 maxlen: 21
89.221.88.0/24 maxlen: 24
2a10:8180::/29 maxlen: 29
2a10:8180::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b0:9b:61:b6:d2:db:32:63:49:4e:08:b3:29:6a:bc:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Validity
Not Before: Jun 27 08:57:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4bac6d4993ccbf3d21dc063ab016f9cf06b09f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ae:e4:70:df:24:72:e3:5e:d6:31:b1:3f:3f:
72:38:ca:db:0f:14:d9:68:02:b6:75:9b:86:cc:1e:
86:7f:0b:7e:84:99:aa:62:af:3f:01:18:3c:0c:ed:
8e:c3:af:55:9f:47:8a:e1:35:8b:9e:cc:83:96:3d:
cb:b7:bf:80:db:e2:ff:b4:71:4e:11:ac:dc:e6:75:
8a:f5:d8:4b:6d:b6:0d:b4:60:93:01:52:db:41:bc:
06:84:b0:af:1d:21:bf:3d:fa:d4:6a:71:99:87:d7:
cc:c3:06:89:c5:c1:d8:ad:a7:56:e9:02:c2:7b:d7:
81:d1:6e:63:3e:24:5e:79:88:40:21:db:bc:ad:c4:
03:4d:d8:ec:18:b3:05:ec:22:f6:88:6c:ba:68:fb:
02:db:c7:1a:90:2b:03:6e:28:4b:41:b9:88:8e:f9:
60:1e:5d:6a:c6:83:f5:e2:77:78:a7:1d:76:0d:8b:
ac:d0:6d:04:26:ce:3e:d0:b4:c9:b4:f7:e2:11:55:
47:f1:09:49:25:c3:e0:63:e6:17:09:44:51:7a:78:
b3:c4:7b:6c:f7:d3:ca:08:56:db:94:15:f6:85:9c:
01:e1:8d:07:43:ea:24:75:c2:26:44:58:13:f8:0d:
65:16:76:91:71:ee:0a:09:d1:40:47:27:78:28:31:
95:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BA:C6:D4:99:3C:CB:F3:D2:1D:C0:63:AB:01:6F:9C:F0:6B:09:F9
X509v3 Authority Key Identifier:
keyid:AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/pLrG1Jk8y_PSHcBjqwFvnPBrCfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.157.32.0/19
89.221.84.0-89.221.95.255
IPv6:
2a10:8180::/29
Signature Algorithm: sha256WithRSAEncryption
2e:b7:17:c1:8e:d2:a3:69:3c:7e:8b:89:49:12:6a:71:29:e5:
07:e4:3f:77:7c:12:ec:88:0a:c6:ab:26:42:6f:5a:b6:89:90:
e2:90:d1:09:14:ef:38:41:26:7b:d0:b5:9b:e3:d0:09:07:b2:
68:2c:80:22:33:9e:4c:5b:df:71:52:9d:4a:46:6a:b5:13:07:
82:6a:34:92:dd:83:8a:30:1b:79:e9:43:4b:11:f7:37:8f:5f:
b1:cb:97:c4:0e:4f:43:44:7e:89:be:7f:0f:dc:38:f6:24:88:
fc:96:9d:00:27:e1:c3:79:e7:32:0c:46:b0:1d:2e:e2:e0:98:
83:6d:2b:f5:eb:90:82:4a:83:eb:ad:4f:df:18:25:55:cb:b4:
22:5e:54:43:97:23:01:19:46:b4:0f:2c:01:04:64:1c:c0:47:
47:ff:d9:99:5a:ca:fa:6d:1e:50:bf:8f:25:b3:9e:05:0b:66:
d8:f0:3d:d1:8c:81:f3:11:a5:1a:6c:66:e8:46:5f:bf:63:f1:
d9:9d:c4:aa:0d:d6:2f:03:12:01:73:54:ca:71:04:2c:6e:dc:
8f:25:04:a0:31:2c:e1:45:4a:82:c2:9c:77:a4:0c:cf:90:f7:
65:e4:e6:dc:ad:8f:03:28:e8:8a:c9:4e:5c:8d:8f:b6:25:71:
50:8e:c2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 03:10:15 2025 by rpki-client