Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DHCnVFXbQH9Yj_2KaS1mNl6FSJw.roa
File: DHCnVFXbQH9Yj_2KaS1mNl6FSJw.roa (raw, json)
Hash identifier: RWBicb8PLKvnti0c3Q/tqq6AEfxJrQuivlSRa384Fj8=
Subject key identifier: 0C:70:A7:54:55:DB:40:7F:58:8F:FD:8A:69:2D:66:36:5E:85:48:9C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0197B59C37652236D7BE8CA2C64D2751C82A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DHCnVFXbQH9Yj_2KaS1mNl6FSJw.roa
Signing time: Sat 28 Jun 2025 08:16:42 +0000
ROA not before: Sat 28 Jun 2025 08:16:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211780
IP address blocks: 5.231.26.0/24 maxlen: 24
5.231.57.0/24 maxlen: 24
5.231.75.0/24 maxlen: 24
89.144.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:9c:37:65:22:36:d7:be:8c:a2:c6:4d:27:51:c8:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 28 08:16:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c70a75455db407f588ffd8a692d66365e85489c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0c:96:11:8e:5b:be:88:ab:02:f7:d4:68:28:
d2:50:b2:8e:75:1c:d0:02:59:44:23:a1:6f:77:ee:
87:ff:db:f1:91:e9:bb:72:ee:44:19:72:32:d3:90:
12:e4:14:71:25:42:6a:df:36:fe:78:18:7f:b9:5a:
67:d6:2b:65:c1:59:68:bd:c0:57:1e:6e:07:0d:0d:
90:ad:99:5c:6e:bc:61:b0:45:72:e6:d9:d7:63:39:
fb:3f:c8:3c:43:ae:7a:ba:ac:92:da:59:d0:b0:76:
ef:4a:d5:49:eb:b2:5f:0c:0b:3c:f6:9c:a7:11:4a:
94:89:62:24:7e:a1:e6:42:3b:7d:2a:f4:4c:e2:d8:
61:34:8f:ba:19:b0:04:d9:a7:4f:53:44:9d:27:0c:
06:a0:bc:3e:f7:18:86:b2:6e:35:ae:44:f1:ba:1c:
e9:c6:16:a2:79:e5:5d:40:b8:3c:7c:12:bc:06:f3:
73:84:13:41:cd:4b:40:98:78:50:15:52:29:ca:82:
17:93:71:68:e0:d6:83:b6:27:4d:49:6d:24:a2:3e:
d3:d6:52:78:64:76:c3:62:ce:c2:66:f8:47:79:0a:
a4:01:6a:3e:af:cb:52:14:ae:6e:e4:8c:49:69:b9:
1c:37:56:a0:92:19:47:5d:9a:17:d6:2a:fe:4c:c0:
73:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:70:A7:54:55:DB:40:7F:58:8F:FD:8A:69:2D:66:36:5E:85:48:9C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DHCnVFXbQH9Yj_2KaS1mNl6FSJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.26.0/24
5.231.57.0/24
5.231.75.0/24
89.144.3.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:bc:c4:ec:d4:13:47:ec:52:60:b0:01:97:15:80:5c:36:75:
dc:40:c0:de:4c:b8:11:18:53:28:62:97:09:3e:72:54:41:6b:
af:07:4a:e6:06:8a:84:d2:92:ab:c1:d5:2c:ae:7f:f6:8e:e8:
b8:0b:96:b1:fb:0a:d1:e4:45:2d:4e:d0:aa:8e:8e:7f:b6:4a:
b0:f7:73:61:74:47:27:e1:f0:e4:03:4c:f4:2e:25:55:96:10:
04:e8:03:7d:c1:58:b8:02:2a:80:e8:19:74:b3:a9:d1:cd:70:
a6:24:99:c5:a0:f1:00:b4:b4:b6:2e:66:16:b3:e2:c7:36:56:
98:98:66:30:0e:1d:29:b5:ea:f9:91:29:14:64:f1:27:2f:61:
6b:db:db:27:5c:10:a4:c7:5c:79:b0:4f:34:69:c4:93:f1:d5:
f1:89:4e:70:d3:a7:30:0c:46:a3:57:90:77:5a:98:5e:2f:73:
be:43:4b:56:ad:c1:24:5e:41:cd:59:be:62:85:b2:ba:88:96:
40:de:d1:7d:99:3f:88:0f:c8:a1:53:79:66:80:d4:2a:37:3c:
c9:69:d2:7f:bf:08:3d:d5:52:d1:9a:ed:e4:4e:86:2c:83:d5:
84:80:9d:38:56:f9:a5:c6:49:26:e1:19:2e:a6:45:e5:da:c2:
ba:4e:b3:fc
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZe1nDdlIjbXvoyixk0nUcgqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNjI4MDgxNjQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzcwYTc1NDU1ZGI0MDdmNTg4ZmZkOGE2OTJkNjYzNjVlODU0ODljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQyWEY5bvoirAvfUaCjSULKOdRzQ
AllEI6Fvd+6H/9vxkem7cu5EGXIy05AS5BRxJUJq3zb+eBh/uVpn1itlwVlovcBX
Hm4HDQ2QrZlcbrxhsEVy5tnXYzn7P8g8Q656uqyS2lnQsHbvStVJ67JfDAs89pyn
EUqUiWIkfqHmQjt9KvRM4thhNI+6GbAE2adPU0SdJwwGoLw+9xiGsm41rkTxuhzp
xhaieeVdQLg8fBK8BvNzhBNBzUtAmHhQFVIpyoIXk3Fo4NaDtidNSW0koj7T1lJ4
ZHbDYs7CZvhHeQqkAWo+r8tSFK5u5IxJabkcN1agkhlHXZoX1ir+TMBzWwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFAxwp1RV20B/WI/9imktZjZehUicMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvREhDblZGWGJRSDlZal8yS2FTMW1ObDZGU0p3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABecaAwQA
Bec5AwQABedLAwQAWZADMA0GCSqGSIb3DQEBCwUAA4IBAQCNvMTs1BNH7FJgsAGX
FYBcNnXcQMDeTLgRGFMoYpcJPnJUQWuvB0rmBoqE0pKrwdUsrn/2jui4C5ax+wrR
5EUtTtCqjo5/tkqw93NhdEcn4fDkA0z0LiVVlhAE6AN9wVi4AiqA6Bl0s6nRzXCm
JJnFoPEAtLS2LmYWs+LHNlaYmGYwDh0pter5kSkUZPEnL2Fr29snXBCkx1x5sE80
acST8dXxiU5w06cwDEajV5B3WpheL3O+Q0tWrcEkXkHNWb5ihbK6iJZA3tF9mT+I
D8ihU3lmgNQqNzzJadJ/vwg91VLRmu3kToYsg9WEgJ04Vvmlxkkm4RkupkXl2sK6
TrP8
-----END CERTIFICATE-----
Generated at Tue Jul 1 15:28:10 2025 by rpki-client