Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Hv_2QUCiFsRI-L3R6B-O7PZTxqQ.roa
File: Hv_2QUCiFsRI-L3R6B-O7PZTxqQ.roa (raw, json)
Hash identifier: kH1/9sDDLGeW1o6kxEbqWp7FwizdyCsj9m8hXnO8cNs=
Subject key identifier: 1E:FF:F6:41:40:A2:16:C4:48:F8:BD:D1:E8:1F:8E:EC:F6:53:C6:A4
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0199D996BB2E531088A6C08F5AE900BEC207
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Hv_2QUCiFsRI-L3R6B-O7PZTxqQ.roa
Signing time: Sun 12 Oct 2025 18:02:38 +0000
ROA not before: Sun 12 Oct 2025 18:02:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6517
IP address blocks: 5.231.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d9:96:bb:2e:53:10:88:a6:c0:8f:5a:e9:00:be:c2:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 12 18:02:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1efff64140a216c448f8bdd1e81f8eecf653c6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:75:f7:39:f8:f5:32:bc:c7:01:1e:cf:70:23:
11:70:fc:d2:52:27:ac:4a:12:13:b4:27:47:bf:22:
bf:d2:5a:8c:c3:f3:51:46:59:de:54:64:49:f4:f6:
f0:ca:b1:7e:d3:18:51:0f:19:c4:a7:fb:2e:a8:62:
4b:f4:65:55:68:c7:44:34:ad:b1:1c:f1:b6:d6:b8:
3f:96:f8:36:06:a1:7c:a3:cb:c6:a1:aa:6c:b3:eb:
2b:e8:02:9b:9f:2e:d6:b6:84:72:41:ac:49:28:9c:
4b:ab:f5:da:2b:49:6b:09:2f:6d:39:5e:36:04:7a:
b6:f8:bd:e0:36:dc:c4:80:04:33:8e:a4:17:f6:af:
24:95:ad:40:bc:f5:70:dd:19:a1:9c:21:b6:8b:a7:
8d:b8:fd:0c:9a:fe:a3:38:46:cf:d2:71:6c:cc:a8:
9d:12:7e:94:01:f9:e1:35:ad:77:5b:8b:77:44:47:
0d:13:28:e0:26:93:ee:64:c7:98:07:66:3a:c2:fb:
35:42:96:f7:46:db:62:8a:12:a3:b1:d2:66:ca:51:
94:ec:c4:0e:7f:81:cf:c5:09:c9:27:48:5f:ef:b4:
33:82:69:4b:04:af:d8:36:2d:b9:a6:cc:95:50:c3:
49:ba:00:6b:9b:9f:aa:d0:0a:94:d1:4e:8e:c4:3d:
19:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:FF:F6:41:40:A2:16:C4:48:F8:BD:D1:E8:1F:8E:EC:F6:53:C6:A4
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Hv_2QUCiFsRI-L3R6B-O7PZTxqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.80.0/24
Signature Algorithm: sha256WithRSAEncryption
45:4d:b9:b8:c6:d1:60:79:7d:00:b3:f0:14:ff:46:c3:db:e6:
43:53:a7:1d:21:a7:12:7d:f8:95:a7:81:a6:7d:79:ec:f7:7c:
9e:fc:6e:1d:b6:dc:98:4c:07:91:05:a8:fb:6d:50:8c:67:8f:
0d:41:12:17:90:2e:a8:8a:34:7c:b6:f0:8d:3c:81:e4:62:0e:
fd:1f:06:eb:8b:8f:a8:30:22:7a:fe:8f:e0:81:98:fa:03:f8:
07:96:2d:32:2f:b1:65:ac:e5:d8:ac:b2:56:8a:27:5b:36:da:
89:ea:51:54:d0:33:ec:84:b0:76:cf:a7:c8:4c:98:fb:ac:30:
81:49:ca:be:4d:1b:a3:f6:4e:27:13:49:e2:38:21:23:62:99:
dc:dd:ff:7c:a3:8a:02:46:2b:d5:ed:c7:12:05:7f:dd:fc:34:
99:b7:6a:75:e6:a4:db:d1:8f:11:bd:d6:5c:1f:e0:54:84:9a:
69:cf:ee:70:d6:9f:22:cd:a8:8a:b4:28:a0:aa:d9:ff:77:fd:
95:e4:52:bb:0f:4d:de:94:ca:85:25:cf:4e:94:6b:a4:48:91:
ce:b5:ce:25:53:bf:a5:bb:ec:5b:d9:ca:52:29:87:8e:9e:63:
3e:f1:18:08:7a:75:e3:23:ad:f2:ac:d0:57:36:04:5f:c4:06:
a4:48:a4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:27:11 2025 by rpki-client