Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/PlrUqIsDqN_UXlJtcv0TuFMt7to.roa
File: PlrUqIsDqN_UXlJtcv0TuFMt7to.roa (raw, json)
Hash identifier: gvM3NFJAC0StecfvAX91NflMOf9EosZ/1h7uV4HHve8=
Subject key identifier: 3E:5A:D4:A8:8B:03:A8:DF:D4:5E:52:6D:72:FD:13:B8:53:2D:EE:DA
Certificate issuer: /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial: 0197AB907D8E867A98315C74E5DA0E87CD13
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/PlrUqIsDqN_UXlJtcv0TuFMt7to.roa
Signing time: Thu 26 Jun 2025 09:27:42 +0000
ROA not before: Thu 26 Jun 2025 09:27:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2541
IP address blocks: 195.78.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ab:90:7d:8e:86:7a:98:31:5c:74:e5:da:0e:87:cd:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Validity
Not Before: Jun 26 09:27:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e5ad4a88b03a8dfd45e526d72fd13b8532deeda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:de:cf:d2:88:19:f9:aa:db:5d:94:28:aa:eb:
e1:3c:c3:f8:39:ad:40:61:53:9f:fd:df:a8:7b:c0:
5c:05:4b:ab:7c:12:d7:ae:d2:2a:d5:f1:5d:b8:59:
66:4c:13:02:89:96:bd:90:f0:76:04:c7:b8:cc:de:
69:66:8f:73:bc:9b:6b:18:42:cb:50:4e:b0:2a:40:
39:5d:c2:97:64:67:27:70:b2:5f:cb:de:35:3b:95:
66:ab:5e:b3:fe:52:00:6f:a3:1d:bd:0a:9d:11:bc:
07:aa:4a:08:b2:d3:b9:2d:ef:c1:7c:dd:39:4a:f5:
38:c0:b3:c1:dc:9f:6d:0a:88:f7:f2:5e:23:54:da:
63:0e:98:88:a2:3e:26:54:2c:e5:6a:6e:23:5e:d2:
19:84:bb:4c:9c:cf:0e:f7:5f:4f:ad:78:99:c7:e9:
37:bd:04:e5:fa:c5:d8:d3:d5:bd:6f:cd:e6:45:3a:
c0:99:1e:7a:f0:99:81:41:0a:20:72:3d:d4:2c:a1:
e0:e8:5d:4f:77:64:91:7f:50:d8:cb:0f:4d:45:89:
37:a7:be:fa:1a:30:76:ae:35:07:fd:07:ee:b8:d9:
74:77:21:21:8a:ef:a4:4e:86:41:3b:a7:67:c2:4d:
69:c6:02:4c:83:24:db:5d:04:2a:de:2e:87:5a:4c:
36:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:5A:D4:A8:8B:03:A8:DF:D4:5E:52:6D:72:FD:13:B8:53:2D:EE:DA
X509v3 Authority Key Identifier:
keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/PlrUqIsDqN_UXlJtcv0TuFMt7to.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.78.124.0/23
Signature Algorithm: sha256WithRSAEncryption
56:6a:49:86:60:bb:af:de:19:3a:da:6d:18:e6:20:ed:3d:0a:
b2:85:86:a9:64:c2:08:37:22:ab:c6:35:52:12:d9:87:f6:ca:
cc:4d:15:ea:b9:44:e4:59:31:d4:9f:96:cd:6e:e8:ff:2f:0c:
43:1a:d5:a8:82:d6:ee:fe:63:e4:12:10:b6:3c:1b:9c:8d:36:
06:39:9d:5c:0c:69:70:f6:e5:c8:38:8b:86:11:68:49:6f:9d:
bb:39:12:d4:dd:ab:2b:c3:7d:d1:5f:cf:1b:0c:bc:fc:8e:ca:
19:7e:0d:26:30:b0:40:98:74:16:d6:1f:0e:35:19:c9:fa:a4:
e3:bd:b4:f9:9a:bd:ca:5b:f3:ee:60:ed:bf:36:5d:1e:9c:aa:
b3:93:a6:85:35:db:d3:27:2a:3c:6a:85:dc:65:98:39:ff:7c:
93:37:9b:72:58:a8:c8:ea:1f:30:98:6e:58:c0:4b:32:b3:85:
99:47:a3:4d:4c:ec:31:b6:2d:20:08:af:d8:e5:56:4d:69:d4:
1a:97:21:63:95:2b:1b:fb:f5:36:d4:82:50:3b:be:14:52:f5:
a0:da:b2:86:d2:f0:83:7f:71:f0:f9:ed:1c:b6:ef:3e:bb:c3:
23:6c:d2:23:75:cd:aa:b2:ae:13:8f:51:ef:ff:2a:0b:26:19:
9a:33:5c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 05:05:32 2025 by rpki-client