Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/PHmIlcJAMKaUCf176lVhWz-T4Wc.roa
File: PHmIlcJAMKaUCf176lVhWz-T4Wc.roa (raw, json)
Hash identifier: bNQSW/1JZ77X2TCkKdD1g52s5lNQ368QaQCo0ZhUqTw=
Subject key identifier: 3C:79:88:95:C2:40:30:A6:94:09:FD:7B:EA:55:61:5B:3F:93:E1:67
Certificate issuer: /CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
Certificate serial: 01978BD9E8693F6FFC4733528499E381369E
Authority key identifier: 93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/PHmIlcJAMKaUCf176lVhWz-T4Wc.roa
Signing time: Fri 20 Jun 2025 05:40:03 +0000
ROA not before: Fri 20 Jun 2025 05:40:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31898
IP address blocks: 185.181.12.0/24 maxlen: 24
2a0a:bb80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8b:d9:e8:69:3f:6f:fc:47:33:52:84:99:e3:81:36:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
Validity
Not Before: Jun 20 05:40:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c798895c24030a69409fd7bea55615b3f93e167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b4:a7:8a:d3:35:3e:25:02:cb:8b:be:ea:40:
8a:dc:a1:a2:f6:1f:d0:de:3b:15:a9:bc:47:81:a0:
a1:a7:b3:bf:33:85:63:fc:c0:26:ca:72:23:b8:7c:
86:60:31:e3:de:04:d6:b5:15:e9:8e:9b:d1:07:86:
ea:5d:b0:bc:a1:97:fb:5d:b6:c3:56:bf:34:4a:56:
27:10:02:ff:6a:91:cd:bc:4d:be:27:4d:e4:2c:eb:
bf:41:80:69:82:60:4e:94:a6:2b:8d:13:bf:ae:32:
22:f1:42:7a:3d:09:36:0e:d3:d4:0d:ea:ec:1e:49:
7d:c0:43:86:b4:85:a6:52:71:9a:a0:cd:93:2e:f7:
5a:f8:16:3c:12:01:be:40:fe:d1:b8:12:a1:80:25:
5a:46:ff:9f:df:14:a0:8e:2b:04:46:9c:5e:0f:da:
a9:c1:6e:e0:5e:07:e1:6e:3c:c3:82:04:d3:20:ab:
42:73:14:f2:c6:85:6b:80:48:37:fe:5a:39:e5:0b:
b1:fe:8c:6a:9d:fd:d4:97:09:68:82:b5:31:12:3d:
fb:83:ab:f0:74:93:79:1e:b3:89:aa:c5:56:eb:b0:
f9:7a:99:2a:bb:57:c1:0c:90:3c:1b:38:44:e2:10:
ce:8b:e3:f4:96:03:5d:43:17:d5:3a:ef:13:bc:e3:
5f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:79:88:95:C2:40:30:A6:94:09:FD:7B:EA:55:61:5B:3F:93:E1:67
X509v3 Authority Key Identifier:
keyid:93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/PHmIlcJAMKaUCf176lVhWz-T4Wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.12.0/24
IPv6:
2a0a:bb80::/48
Signature Algorithm: sha256WithRSAEncryption
4c:6c:14:61:51:cc:0f:6a:c0:01:23:0c:52:c2:f3:68:29:c2:
8d:f3:93:73:1a:2d:a7:b2:6a:f0:0c:b7:9c:06:1b:f7:86:d2:
22:92:49:49:6a:25:bb:9f:92:3a:be:00:81:45:0c:95:f0:77:
68:35:c9:9c:56:34:1d:2d:04:13:a4:94:e7:09:d9:8a:a2:d6:
c0:d8:50:7a:ce:42:ee:ee:4a:50:0d:68:fb:c2:fc:cd:71:65:
56:45:48:04:d2:d6:cc:01:a0:be:22:24:02:e6:d2:71:b2:c8:
2b:84:1e:4e:fd:f6:24:f2:ef:da:df:ec:eb:72:96:40:6c:52:
8d:d6:af:42:03:86:b6:f8:79:03:eb:65:e7:8b:ca:b7:49:e5:
4b:40:a2:57:91:a7:ff:fa:26:a3:ec:db:ca:b1:16:f4:ac:98:
83:17:70:0b:61:57:46:6c:0e:a4:1f:68:5f:0e:67:83:dd:2c:
b5:16:20:63:43:05:3d:52:a9:71:b9:4b:7e:3b:af:3c:f1:5b:
80:b3:c7:3a:8d:f1:e8:95:95:54:ab:d3:07:53:96:c8:fe:36:
96:70:b6:c1:c0:ab:ea:52:47:c2:31:5a:42:5b:79:d4:ef:7c:
45:8a:c5:ed:5b:f8:04:61:bd:8e:30:16:fa:0a:cd:64:38:47:
2e:d8:45:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:15:46 2025 by rpki-client