Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/Pmf-L-GSiR5hr9d7p5bzWs1gbK8.roa
File: Pmf-L-GSiR5hr9d7p5bzWs1gbK8.roa (raw, json)
Hash identifier: 0breW1RwWZFF/YszwK9updGRsLhme1lrDLPYi3gsl6Y=
Subject key identifier: 3E:67:FE:2F:E1:92:89:1E:61:AF:D7:7B:A7:96:F3:5A:CD:60:6C:AF
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 01986E7132C5E0785EAB52069025D79D1689
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/Pmf-L-GSiR5hr9d7p5bzWs1gbK8.roa
Signing time: Sun 03 Aug 2025 05:39:29 +0000
ROA not before: Sun 03 Aug 2025 05:39:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 84.55.8.0/22 maxlen: 24
84.55.10.0/24 maxlen: 24
84.55.14.0/24 maxlen: 24
84.55.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:6e:71:32:c5:e0:78:5e:ab:52:06:90:25:d7:9d:16:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Aug 3 05:39:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e67fe2fe192891e61afd77ba796f35acd606caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b8:c2:94:cd:f6:15:8a:74:0f:8d:7c:1c:96:
8f:d2:37:f6:b7:ee:0a:0e:ed:f0:e3:f8:fa:ea:c1:
b6:c8:bc:63:a2:e5:bc:1c:d8:a5:c5:72:7c:97:3d:
a3:8d:32:d5:ce:83:bd:35:85:f3:37:29:4d:d2:13:
dd:9e:a4:6a:27:3b:a4:e3:e7:a1:8a:b1:52:de:0c:
ee:ec:c5:5c:ee:55:eb:5d:d8:ae:b2:b0:e5:06:15:
52:5e:81:c7:95:8e:ba:2f:c7:fd:0a:b5:6d:cd:5a:
8e:ba:3b:fc:75:73:03:fc:1d:21:2f:83:ba:03:86:
72:1a:ca:92:ee:72:17:45:b4:33:6b:a3:f2:c1:01:
10:2f:03:40:18:31:2f:10:ea:82:08:7f:fe:45:19:
3e:e3:66:80:bf:fa:9a:3a:63:84:a0:3a:a1:81:49:
e1:e0:8d:a5:7c:3d:72:63:6c:0e:1a:ba:e5:66:a0:
2a:69:2b:5b:4c:49:9a:54:68:c8:df:f9:91:8c:80:
b7:ab:10:02:69:4e:8c:e2:53:f7:4d:1b:ad:f2:00:
1d:f5:d1:f9:f0:31:de:c8:46:57:68:f2:62:5e:ae:
c0:71:62:8f:de:b6:a6:ef:39:4e:d6:94:16:b8:68:
77:ff:36:6b:a7:05:e8:ef:4f:8e:63:9d:c4:08:51:
04:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:67:FE:2F:E1:92:89:1E:61:AF:D7:7B:A7:96:F3:5A:CD:60:6C:AF
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/Pmf-L-GSiR5hr9d7p5bzWs1gbK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.8.0/22
84.55.14.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:8f:1a:86:99:a7:25:38:8d:fb:b1:7b:b8:c1:67:2d:d0:eb:
e7:40:09:91:54:b1:b1:5c:ac:ec:23:ca:c3:d1:45:31:4c:be:
cf:94:45:bb:7c:a6:fc:44:34:ce:13:00:e3:36:e6:9c:e0:bd:
c6:c7:6b:2f:25:13:a7:9f:9a:77:ac:42:6f:6b:52:c7:42:60:
8a:05:45:b9:54:eb:11:e4:0c:c0:fa:3d:35:af:1f:5f:0f:37:
ac:38:49:68:c3:c3:e8:78:c8:38:99:c8:a2:07:3c:5e:ce:19:
c7:8a:96:be:24:d7:8f:56:60:6e:45:c3:c5:a0:5f:88:62:4a:
af:02:16:17:e7:9a:f1:a7:d7:3a:70:e8:28:86:60:c5:6a:2a:
08:09:6a:e4:b7:8d:fd:78:2f:b9:6a:30:d4:44:c5:80:2a:f5:
bf:56:5b:26:75:89:06:0f:d4:1d:4f:04:de:4e:b2:93:75:6a:
6a:4f:47:37:53:10:c7:9a:74:ad:68:36:e7:43:5a:32:f6:fd:
a6:af:9c:ff:9c:5b:17:01:30:a2:9a:72:2f:43:e5:3f:5a:98:
95:f5:55:b7:73:7d:d6:61:28:5e:e4:55:50:0f:c0:b0:9a:41:
bc:c1:47:95:9b:ba:98:e4:55:25:1f:f9:96:e4:54:c5:00:8d:
f5:62:53:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:53:09 2025 by rpki-client