Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/OBUvHtxFYP31RQSx7lMY10skbys.roa
File: OBUvHtxFYP31RQSx7lMY10skbys.roa (raw, json)
Hash identifier: U5rIW6pdGI2Y6wtFB7ah83IvlttrAHf1kpY7DxqcDRk=
Subject key identifier: 38:15:2F:1E:DC:45:60:FD:F5:45:04:B1:EE:53:18:D7:4B:24:6F:2B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0199A02F120B772907DD3645BB069FA49A4D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/OBUvHtxFYP31RQSx7lMY10skbys.roa
Signing time: Wed 01 Oct 2025 14:31:03 +0000
ROA not before: Wed 01 Oct 2025 14:31:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205397
IP address blocks: 5.231.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a0:2f:12:0b:77:29:07:dd:36:45:bb:06:9f:a4:9a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 1 14:31:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38152f1edc4560fdf54504b1ee5318d74b246f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:87:10:79:b3:40:0a:6c:33:91:0c:6b:5c:d4:
d5:3f:4c:b4:60:8d:b3:7d:a3:90:68:4a:09:40:fc:
00:fc:dc:79:35:7f:a5:0f:12:db:16:90:5f:5a:93:
11:e6:d7:ce:d9:ee:c7:26:e1:97:fc:fe:96:bd:53:
4e:e2:cf:5c:f0:f2:46:d9:fe:df:17:2c:f5:10:c8:
83:06:db:df:85:78:60:5e:28:1a:c8:08:80:7a:d1:
82:aa:82:05:4a:8d:42:de:13:ff:ec:1b:32:d2:1c:
79:36:b3:d7:b7:71:c3:03:19:39:2a:76:c1:05:e7:
ae:3e:38:ad:e8:0c:05:63:ac:24:4e:17:64:eb:04:
eb:82:b7:56:0a:3a:de:2c:e4:cc:af:5d:c1:20:f0:
7a:20:cb:d7:20:e9:4e:84:da:92:0e:e8:28:79:01:
e9:5b:d3:10:47:8a:c1:9a:99:44:94:52:33:36:55:
91:90:10:12:39:b6:d6:69:2b:f3:9f:4d:3c:35:b9:
9d:40:5e:07:53:af:f1:80:60:cb:1d:70:9f:d0:30:
61:d1:6c:be:8b:33:df:ce:51:2c:22:cd:6d:af:e4:
a0:d8:6d:b4:2d:05:9c:6f:44:fe:10:a8:06:19:69:
4c:63:d8:7a:3a:15:45:60:a6:79:cb:1b:db:9d:e4:
e9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:15:2F:1E:DC:45:60:FD:F5:45:04:B1:EE:53:18:D7:4B:24:6F:2B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/OBUvHtxFYP31RQSx7lMY10skbys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.94.0/24
Signature Algorithm: sha256WithRSAEncryption
30:0d:9d:21:be:bc:00:bc:15:e7:05:ec:72:6e:bd:4b:f1:09:
6b:42:34:ca:0c:cf:b1:ac:6c:77:a3:81:27:5e:5d:98:16:2e:
55:19:93:2d:c1:1e:a1:f9:f1:be:ba:83:6a:a4:d6:5a:a9:be:
46:88:9b:32:5a:f0:09:22:11:60:5b:29:ad:44:64:b1:d3:91:
ac:a3:40:f5:13:be:59:3f:db:27:79:bb:e0:3c:b2:4a:12:42:
8b:41:42:7d:33:a3:ce:91:56:be:c5:96:40:74:4f:32:73:2b:
6f:09:9b:51:b8:fc:f0:b3:01:bd:1d:cd:5a:b4:d9:bf:9b:7a:
d8:2d:6f:50:18:8d:39:d3:e9:0f:c8:24:6e:40:ba:f2:14:cc:
ce:5b:31:25:b5:5c:bc:1a:93:7e:24:c1:a8:47:c4:f8:13:82:
6d:22:c9:53:72:de:3a:f7:2b:eb:e0:46:6d:d4:f9:3f:52:80:
53:6b:86:d3:e1:cf:97:b9:b9:76:df:39:db:30:12:ae:1e:3b:
3c:78:a5:f8:dc:3d:7b:e0:dd:b4:6e:61:aa:2f:f1:6f:8b:31:
7e:06:f8:a3:b0:d5:a0:eb:83:0d:15:ee:1b:a2:47:4a:48:03:
cf:a9:11:2b:99:5e:52:43:81:18:89:da:7d:68:33:1b:09:c9:
4d:73:4d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:27:29 2025 by rpki-client