Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/AI7OjceMDxUybpPbsnc799OBu5M.roa
File: AI7OjceMDxUybpPbsnc799OBu5M.roa (raw, json)
Hash identifier: mWlx3sA1BUrW9828W7N1xkpBFf7AOqDF59A1H508YOE=
Subject key identifier: 00:8E:CE:8D:C7:8C:0F:15:32:6E:93:DB:B2:77:3B:F7:D3:81:BB:93
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019954CCDCB740FD37D4417F39F89B6B8897
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/AI7OjceMDxUybpPbsnc799OBu5M.roa
Signing time: Tue 16 Sep 2025 23:12:15 +0000
ROA not before: Tue 16 Sep 2025 23:12:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48835
IP address blocks: 5.231.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:54:cc:dc:b7:40:fd:37:d4:41:7f:39:f8:9b:6b:88:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 16 23:12:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=008ece8dc78c0f15326e93dbb2773bf7d381bb93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4f:f3:a1:2d:9a:68:33:33:a3:e4:bd:c4:52:
c6:27:e8:fd:ca:99:8d:1c:a2:12:21:38:00:d7:50:
e4:e5:90:cf:1a:fe:38:14:a0:b3:8a:21:f5:5d:05:
e9:d3:00:cd:75:59:7c:89:e1:c1:1c:f2:0f:fd:20:
c2:c7:8a:59:9a:65:b6:8a:33:23:62:94:7a:ab:e0:
40:27:ce:d6:21:7a:4b:a8:2b:fb:85:8f:f8:a5:f8:
75:b3:c2:42:52:a8:19:0d:36:b0:e0:ad:bb:46:36:
c7:20:68:88:72:fa:cf:ac:4f:6d:6a:27:1b:b2:83:
0e:6a:bf:d0:cf:de:fb:1f:b2:c0:b6:7d:71:0c:b8:
5f:ad:81:c2:19:f8:2d:40:5a:ae:1f:66:df:60:7f:
29:69:47:90:58:4b:45:22:bb:de:1f:bc:83:d8:67:
81:8b:0a:ea:da:0b:ae:9c:84:12:84:74:13:c2:ad:
f0:f4:9b:7b:10:9e:b6:c5:33:60:e4:76:3d:ff:73:
ad:71:00:60:af:3a:a3:40:69:2a:f8:e7:17:73:c5:
e7:43:cd:0e:9e:3f:cf:b8:64:4d:dc:97:5c:60:09:
c1:2f:1a:b8:53:93:71:09:55:d9:52:b3:71:b3:70:
10:6f:9c:a6:04:a4:6f:07:cf:5f:58:20:a3:3f:4d:
e4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8E:CE:8D:C7:8C:0F:15:32:6E:93:DB:B2:77:3B:F7:D3:81:BB:93
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/AI7OjceMDxUybpPbsnc799OBu5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.42.0/24
Signature Algorithm: sha256WithRSAEncryption
82:dc:ed:73:ff:6d:a7:62:14:ca:77:ad:3f:12:4b:5c:c1:85:
97:23:94:e6:2a:2e:ae:07:74:ad:fa:43:ab:fe:28:c3:1b:b7:
51:2a:70:dc:b4:d4:73:dc:ad:7d:25:ca:92:10:e7:fd:e7:fc:
40:ca:3f:84:19:b2:ba:71:0d:8f:f6:f5:91:b7:de:2a:8d:be:
53:41:0d:b8:c4:07:a3:29:85:d9:09:dd:bc:f8:a1:68:58:ed:
65:95:c5:48:d4:29:6e:a8:e1:80:32:ac:8e:21:ba:3d:77:38:
99:39:38:05:e6:b9:8c:49:d3:32:d4:7a:6e:1e:33:ba:c0:92:
41:48:1e:d2:a0:e8:61:b3:02:34:84:91:42:0b:9a:04:bf:0f:
6e:11:1e:ca:4d:c7:f8:e4:d4:31:e3:ff:ed:48:fa:cc:e1:97:
f2:a6:08:ea:6a:08:1d:f1:07:af:76:da:dc:1f:ea:0f:a3:91:
f1:36:be:56:53:96:bb:06:81:56:4e:76:0a:86:8b:ca:b5:61:
08:e0:94:4f:f0:d2:42:68:92:9a:49:de:ac:34:49:33:f6:7d:
47:61:b1:67:6a:cc:5d:08:35:44:00:c0:70:c4:ce:43:11:62:
4a:23:5f:c7:0d:78:51:25:a7:25:79:37:33:d8:32:8b:a9:71:
85:86:66:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:27:29 2025 by rpki-client