Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/PJRRVcK78klZoVqYctO4XO5dC-4.roa
File: PJRRVcK78klZoVqYctO4XO5dC-4.roa (raw, json)
Hash identifier: Yba/TOmfw1+fD2+UqL9D+7PRggQ1rfdbgYbA+uH+B2E=
Subject key identifier: 3C:94:51:55:C2:BB:F2:49:59:A1:5A:98:72:D3:B8:5C:EE:5D:0B:EE
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019883DAC69C6E070AE296083A599398C619
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/PJRRVcK78klZoVqYctO4XO5dC-4.roa
Signing time: Thu 07 Aug 2025 09:26:49 +0000
ROA not before: Thu 07 Aug 2025 09:26:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197537
IP address blocks: 185.220.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:da:c6:9c:6e:07:0a:e2:96:08:3a:59:93:98:c6:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 7 09:26:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c945155c2bbf24959a15a9872d3b85cee5d0bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d9:98:51:58:27:dd:b5:cc:f8:31:9c:1d:49:
9d:e6:d6:27:f9:99:13:cb:f2:41:60:0c:d6:39:87:
56:f6:d2:fa:63:4f:06:6a:68:ad:54:7c:eb:c5:83:
47:16:18:d6:f2:93:53:f5:92:ee:24:a0:8c:cd:d7:
67:3c:cb:76:fd:f1:80:2f:26:c5:ff:c4:ba:94:27:
df:84:16:c4:ec:83:85:36:6b:fa:3b:99:ed:69:5b:
81:2d:11:e9:f2:23:f6:a1:78:bb:c5:ef:c0:9d:62:
6c:b4:6f:92:4c:5c:7e:8e:81:3a:a6:80:97:4c:8a:
b6:08:81:c2:2d:62:ed:06:fb:94:4a:04:19:82:e7:
d3:eb:75:93:aa:a1:a0:aa:02:22:77:8c:a6:81:00:
5f:30:7e:e6:20:54:f4:bb:2e:ee:db:91:c5:2a:05:
8e:af:48:90:06:2c:0f:bc:fc:12:e5:05:cc:b1:5b:
c9:50:ef:53:c3:13:e5:fd:44:c9:ec:1c:d9:65:36:
5a:ad:ed:b3:e3:c0:c8:f1:89:74:9b:5d:02:d9:2b:
e2:33:4b:dd:e4:54:25:20:fb:58:c4:49:79:08:8f:
10:22:e4:2e:92:81:80:27:04:01:53:ae:69:18:b4:
8e:73:e4:fa:c6:0c:57:2f:30:5c:44:8a:bc:f0:de:
2e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:94:51:55:C2:BB:F2:49:59:A1:5A:98:72:D3:B8:5C:EE:5D:0B:EE
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/PJRRVcK78klZoVqYctO4XO5dC-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.248.0/24
Signature Algorithm: sha256WithRSAEncryption
94:a3:fd:cc:a0:c0:64:4c:1a:48:ed:4a:9f:96:d6:60:df:91:
18:8e:6b:ce:40:1d:7e:8b:76:af:4b:0e:34:85:58:3d:f7:82:
76:b8:0b:49:91:b4:cd:1c:5c:31:67:d3:24:7c:e1:9b:e0:e5:
7b:70:27:31:b4:d2:f0:af:9a:20:7c:2c:10:21:5b:f1:2b:54:
48:88:85:fd:e0:dd:f4:a2:f3:89:7f:01:28:bf:e2:99:64:30:
c7:36:6b:6f:6c:ef:f0:c9:1b:d0:90:a2:2b:bf:2a:e0:4a:b2:
f7:68:6a:41:58:e3:f3:e4:98:50:f0:39:de:56:87:03:21:c9:
cb:bb:8c:3b:46:17:0e:f0:94:b8:b3:07:2e:22:e5:93:8c:da:
22:06:31:9a:10:73:45:43:f9:ee:5b:a2:3a:f7:22:92:86:bb:
ff:c6:f5:c9:87:06:f8:b7:7e:96:c1:b9:88:09:b5:b1:66:cb:
f0:31:f8:11:4d:4b:53:28:44:b8:1b:d9:a0:b6:9e:dc:c1:30:
87:d4:ca:a7:14:3f:cc:58:6b:9c:73:0f:2b:61:d3:29:9d:68:
90:dc:96:95:64:2d:2e:e2:f9:1f:3f:25:a3:b2:3c:a1:e5:4b:
56:26:47:f2:c5:f2:b5:06:08:66:7e:57:04:dd:0d:98:84:28:
1c:5d:0a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:37:43 2025 by rpki-client