Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6EXWlbtHVHI51mfqINtfOgpr24g.roa
File: 6EXWlbtHVHI51mfqINtfOgpr24g.roa (raw, json)
Hash identifier: HTdape7vRs4T7o8NzIlkp+i/dZl4OAsTm4pqGL4+98k=
Subject key identifier: E8:45:D6:95:BB:47:54:72:39:D6:67:EA:20:DB:5F:3A:0A:6B:DB:88
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0199A4E21172E897183B99E27C9F7CB09E3C
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6EXWlbtHVHI51mfqINtfOgpr24g.roa
Signing time: Thu 02 Oct 2025 12:25:02 +0000
ROA not before: Thu 02 Oct 2025 12:25:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213850
IP address blocks: 5.175.245.0/24 maxlen: 24
5.231.31.0/24 maxlen: 24
94.249.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a4:e2:11:72:e8:97:18:3b:99:e2:7c:9f:7c:b0:9e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 2 12:25:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e845d695bb47547239d667ea20db5f3a0a6bdb88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8d:4b:4f:37:55:a2:35:2a:ff:8b:c0:8b:05:
01:a9:3a:79:7a:2b:cd:63:48:f8:ab:7a:77:32:84:
e7:f8:9e:ee:2a:40:dc:93:a8:4e:5f:61:56:29:46:
c4:e1:cc:7e:63:c5:7c:11:39:0b:0d:31:0b:d2:4c:
3e:1d:c1:4e:a5:c7:26:da:7d:ac:9b:f6:42:81:15:
7b:4e:4f:95:3f:46:86:4d:08:f5:bb:f3:16:74:f6:
f2:19:83:24:2a:2d:46:79:c1:8d:68:bb:62:77:d4:
11:10:0a:4f:6b:78:9e:ee:44:55:05:fb:61:34:f9:
69:90:df:26:63:cd:54:28:f6:82:36:4b:f8:b5:44:
09:75:a0:3b:75:c9:ca:76:26:e9:53:93:b5:1a:e5:
fd:60:c9:c5:70:12:53:53:47:93:a9:b7:a5:f6:02:
1b:4a:43:c1:5c:72:e7:39:77:fa:2e:ac:c8:21:94:
e8:5e:2b:f2:22:7e:80:b2:73:3b:ad:c7:c6:0c:96:
ff:15:b5:96:32:7b:31:a2:48:a3:47:4b:56:60:70:
d2:71:17:2e:3e:7c:0c:ef:85:1d:a9:f7:a8:97:e0:
4a:92:d5:41:c9:07:21:40:12:35:81:72:2e:d2:b0:
47:69:e3:01:97:1a:ef:e9:86:77:16:7d:c8:db:09:
35:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:45:D6:95:BB:47:54:72:39:D6:67:EA:20:DB:5F:3A:0A:6B:DB:88
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6EXWlbtHVHI51mfqINtfOgpr24g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.245.0/24
5.231.31.0/24
94.249.175.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:6d:5f:c6:4c:fc:79:9f:af:d1:69:9e:f9:3b:dd:6f:3b:c5:
29:57:89:da:b3:cd:b7:18:43:d2:a6:e0:88:5e:88:1c:af:ba:
f5:ab:87:30:22:0e:b1:db:7f:a1:fa:f9:f2:83:33:95:f9:5a:
d7:12:04:fd:04:b8:05:c3:7c:c8:ff:2c:5e:36:ad:66:fc:9d:
68:bb:e8:5d:ea:bd:01:eb:4d:7d:f2:0a:36:7b:9b:4b:49:f3:
b7:5a:6c:f5:4e:ed:42:c8:f3:43:1f:bb:b8:22:12:ea:d8:5d:
e8:3c:8f:0e:86:9c:ba:fd:ed:9b:52:58:c4:5f:ff:c6:e2:bc:
b3:c2:6f:68:43:97:2a:4a:f4:da:bd:27:c0:f1:ba:fb:17:e2:
86:1a:6f:58:03:a8:9b:bd:a2:e2:f1:a7:be:c0:61:7e:56:6b:
03:86:bc:73:4e:c5:fa:1d:be:38:37:7f:47:5c:7f:2e:5f:6e:
7e:5c:96:f9:9a:19:be:27:88:7e:15:98:f8:bf:c8:fd:73:43:
15:fc:a7:18:e1:6d:49:a2:23:a3:d8:c2:64:e8:8e:2c:56:18:
99:74:6f:93:9c:fc:af:45:4c:7b:8b:dd:8f:ae:09:88:9a:93:
d1:5b:7d:24:37:a6:46:db:fd:b5:9e:53:2a:fc:8d:ee:ca:3c:
3e:0a:07:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:00 2025 by rpki-client