Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2npRcxOlcuUFMfREqVym5s7nHpA.roa
File: 2npRcxOlcuUFMfREqVym5s7nHpA.roa (raw, json)
Hash identifier: 0izxvaCbsip6XHkBCvRSuz3/fW/NqlY/GY98BDYFXhM=
Subject key identifier: DA:7A:51:73:13:A5:72:E5:05:31:F4:44:A9:5C:A6:E6:CE:E7:1E:90
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0199D453FF0F4B762C75FF2D1B81E367C445
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2npRcxOlcuUFMfREqVym5s7nHpA.roa
Signing time: Sat 11 Oct 2025 17:31:38 +0000
ROA not before: Sat 11 Oct 2025 17:31:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214639
IP address blocks: 5.83.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d4:53:ff:0f:4b:76:2c:75:ff:2d:1b:81:e3:67:c4:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 11 17:31:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da7a517313a572e50531f444a95ca6e6cee71e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c8:e3:be:e1:4f:f4:30:5a:29:69:ae:90:83:
9a:90:e5:79:10:a8:06:bd:d1:68:8b:40:c6:89:93:
b5:90:5f:18:31:f1:dc:35:41:ca:c9:b6:5e:52:14:
95:4f:94:bc:e7:57:01:16:43:e1:fe:d6:d5:b7:45:
ec:f9:f8:a1:50:42:f6:e7:e3:b7:db:30:b6:31:2e:
32:93:2c:62:96:63:33:4a:f0:ca:62:4f:4f:d1:4f:
c1:78:9d:24:df:99:53:fe:3c:3d:cc:b0:aa:82:b8:
2c:9b:d0:a2:37:74:d6:ea:b2:13:3c:3e:09:a7:4d:
d4:07:d1:11:6d:16:a7:6f:9c:7e:c0:5e:14:a9:e5:
ef:fd:00:d1:57:b9:1c:38:6b:5f:11:13:e9:4d:0e:
d1:d6:26:67:00:c4:b7:2c:cd:ab:75:e2:61:ff:5f:
d8:3b:bd:4c:b0:83:bb:f5:da:7a:3c:3f:6c:fe:5a:
4e:10:dd:e2:63:dc:c9:85:d2:63:be:42:dc:08:64:
23:5c:ac:7c:33:e8:74:e7:e2:c6:7c:99:c3:25:71:
6e:39:c4:90:66:e6:5b:ec:38:0f:67:b7:f9:54:56:
6c:f0:7a:26:8f:a9:a1:be:b0:48:33:5a:4d:67:a9:
3c:1f:48:5a:68:85:00:41:30:19:13:04:6a:5f:df:
f1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7A:51:73:13:A5:72:E5:05:31:F4:44:A9:5C:A6:E6:CE:E7:1E:90
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2npRcxOlcuUFMfREqVym5s7nHpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
Signature Algorithm: sha256WithRSAEncryption
12:f6:7a:1f:04:56:02:8a:03:60:5d:0a:11:24:75:98:87:67:
e0:7f:9d:ba:63:1b:62:d6:29:1f:82:6b:a8:33:e6:b6:a8:e7:
e5:35:60:79:18:15:52:be:50:ae:ab:18:80:2e:b3:10:9c:52:
a0:5f:94:57:ad:6e:2e:fd:ac:e6:19:90:94:31:2a:95:ec:5a:
77:0e:b6:2e:eb:fe:20:8c:ec:c8:53:5c:f7:51:fa:bd:0b:8f:
0d:23:96:b3:4b:5f:01:e3:89:ae:b2:84:4c:1f:ab:12:d7:92:
92:64:29:d0:3f:30:7d:28:b6:ff:6f:cb:38:45:cb:1f:37:29:
87:98:6d:62:d3:79:98:ea:d9:c3:bd:e5:41:30:c9:73:cd:ee:
40:a3:fd:f0:65:85:0c:08:29:4d:9a:92:28:35:b1:ce:32:15:
9e:24:bb:64:25:a7:50:e3:1a:b0:dc:60:0b:3b:4d:a6:8c:02:
1e:79:85:32:91:6d:57:e8:9d:33:1f:3a:e8:e9:bd:04:4b:71:
23:2d:d7:56:64:84:18:cd:76:81:af:e9:f2:ed:2f:13:df:56:
1d:d5:f1:60:19:4e:9e:78:f8:85:f2:e6:e6:74:22:ed:8b:6b:
df:d8:08:ad:56:70:0e:24:7b:b1:cf:3a:d8:67:00:7d:21:a9:
61:40:21:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:26:51 2025 by rpki-client