Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/pWtbtMqs_9aJQ0KT8UAl4XExZLI.roa
File: pWtbtMqs_9aJQ0KT8UAl4XExZLI.roa (raw, json)
Hash identifier: WNvv2z5ka9H0FOvY11NFaV4Er6oN7s2ejAsfJawgadw=
Subject key identifier: A5:6B:5B:B4:CA:AC:FF:D6:89:43:42:93:F1:40:25:E1:71:31:64:B2
Certificate issuer: /CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Certificate serial: 0198C190CFCD3AEB3F6B5D98E42D7A8FE304
Authority key identifier: 3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/pWtbtMqs_9aJQ0KT8UAl4XExZLI.roa
Signing time: Tue 19 Aug 2025 09:02:29 +0000
ROA not before: Tue 19 Aug 2025 09:02:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53850
IP address blocks: 86.109.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c1:90:cf:cd:3a:eb:3f:6b:5d:98:e4:2d:7a:8f:e3:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Validity
Not Before: Aug 19 09:02:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a56b5bb4caacffd689434293f14025e1713164b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d7:65:51:86:90:00:75:07:8e:9a:71:1e:74:
76:f0:71:cc:88:d9:c0:5b:9e:5d:07:8a:d6:64:b4:
d3:04:5e:8a:dc:bd:bd:92:bb:bf:cb:68:75:ef:d6:
a8:13:d6:23:f3:0d:86:fa:3d:b8:12:08:11:ce:c4:
e9:d9:54:8d:a7:47:7a:63:a3:ad:b5:17:e4:65:4a:
6e:a0:2a:d3:d0:0c:ff:84:15:3e:20:8a:17:e2:83:
f4:c9:26:8e:1a:6a:59:67:1c:b7:28:63:d5:a0:1f:
13:b0:98:29:f3:6d:e9:78:a8:0f:61:9f:7b:d1:26:
71:be:00:49:1e:e5:fe:3b:ae:95:e3:ee:89:f0:1d:
6c:38:50:7b:80:2a:4d:4c:be:f7:8c:29:5b:bc:cb:
81:6a:cb:b9:c7:7c:79:ec:37:63:35:ed:36:26:99:
48:bf:ad:8d:6e:10:7d:c5:14:a7:fe:27:e3:63:5d:
1f:a8:01:6d:e6:93:e2:8a:24:28:73:c4:2f:8a:1e:
70:28:48:ab:7c:c8:e8:da:8f:62:4b:0b:fd:1a:c6:
26:bb:06:65:51:ee:9a:80:b9:36:16:11:5a:c9:01:
67:a3:f6:23:ba:23:87:5a:c7:d2:d0:f1:ef:c4:d7:
20:c2:99:0d:3e:64:12:64:25:77:f8:31:49:d6:33:
18:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6B:5B:B4:CA:AC:FF:D6:89:43:42:93:F1:40:25:E1:71:31:64:B2
X509v3 Authority Key Identifier:
keyid:3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/pWtbtMqs_9aJQ0KT8UAl4XExZLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.109.75.0/24
Signature Algorithm: sha256WithRSAEncryption
57:1f:7e:b4:19:4c:c8:7b:b7:38:ff:0d:f0:95:3e:7d:d7:cd:
ce:7a:a6:ce:d6:4d:10:c6:9b:12:90:e8:14:e4:bc:3b:d9:74:
ac:56:bf:8a:5d:f4:26:5a:fa:df:33:42:14:a6:00:43:1a:0f:
d0:11:2c:95:9d:8d:74:25:09:b5:ef:32:4f:ea:6f:f6:3e:62:
f9:b8:dd:81:52:0d:64:3e:a8:fa:5d:99:00:75:f0:5d:dc:bf:
c5:86:f6:9e:58:13:14:4b:0a:3c:24:cb:39:10:90:24:bd:34:
24:58:8c:e2:27:93:79:7a:10:cf:69:e8:0f:b4:9a:2c:6c:66:
cd:c6:68:5d:a0:9d:04:a6:18:5b:d4:5e:f6:39:7a:f0:38:9b:
23:2c:15:52:5e:cb:d8:a2:d0:4d:69:60:08:48:ee:b8:e1:1f:
59:b9:7f:32:cf:10:5a:18:12:39:de:39:74:90:a2:4c:00:53:
e4:f9:07:34:4f:9f:98:04:1e:2b:1b:9e:9b:0b:53:b4:de:1a:
86:04:a8:62:cd:d2:db:c6:4a:25:ca:2c:71:ff:85:db:3b:01:
b8:5f:3b:75:ee:35:ff:2f:19:51:44:6c:96:ec:11:2d:24:5e:
22:eb:f9:79:e5:c2:1b:c8:89:d5:ff:67:53:a5:fb:c2:a8:38:
7b:ed:d2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:30:51 2025 by rpki-client