Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/RNQur-giOgc5FkUNt-tpaSIxf8k.roa
File: RNQur-giOgc5FkUNt-tpaSIxf8k.roa (raw, json)
Hash identifier: MuJ+lk7X1vQRts5prGkkjInDlApUssELQjEuzHDuu5U=
Subject key identifier: 44:D4:2E:AF:E8:22:3A:07:39:16:45:0D:B7:EB:69:69:22:31:7F:C9
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0199B8E9E7636AA1D459AD2E3B2A132F247D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/RNQur-giOgc5FkUNt-tpaSIxf8k.roa
Signing time: Mon 06 Oct 2025 09:46:00 +0000
ROA not before: Mon 06 Oct 2025 09:46:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214127
IP address blocks: 5.231.58.0/24 maxlen: 24
5.231.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b8:e9:e7:63:6a:a1:d4:59:ad:2e:3b:2a:13:2f:24:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 6 09:46:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44d42eafe8223a073916450db7eb696922317fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d1:83:12:89:26:32:4e:83:7c:26:b3:77:2c:
94:7f:ef:54:13:d4:3b:4a:77:c9:0c:27:99:18:9a:
1a:49:7a:40:80:19:8f:65:fe:47:52:f5:a6:59:20:
d3:3a:0c:7f:c2:ee:be:98:99:77:cf:78:5f:81:6f:
af:64:7a:eb:93:23:f1:d2:5e:14:4e:3f:46:74:b3:
66:51:56:e5:a7:45:e7:8a:19:d1:c1:9f:27:88:ad:
b9:6a:9d:f7:c9:9f:3e:e6:31:66:28:b4:82:2d:af:
55:b8:e1:72:be:fd:c3:c7:41:4b:41:5a:4a:a6:aa:
6a:c2:cc:f3:23:6c:18:c5:e9:66:64:2d:da:c5:ac:
ad:63:85:a7:38:ef:86:d3:4f:b2:50:51:b4:b6:19:
39:02:50:0f:39:40:0e:4e:6d:79:0b:b1:f7:6e:be:
c8:25:8d:21:f4:d4:ae:23:0b:08:f7:31:76:97:44:
a9:dd:c9:c6:8d:c8:9c:69:37:c7:f1:4e:4d:f4:12:
c6:3d:b7:c4:77:fa:b2:e0:3f:c8:cb:8c:02:07:b5:
81:4f:65:2f:80:3b:ed:2f:90:f1:55:1d:e2:22:cc:
23:05:cc:28:79:40:3c:96:da:3a:5e:fa:28:47:32:
1d:23:ed:09:bb:d8:46:c3:aa:f7:a0:b4:79:8f:52:
f0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D4:2E:AF:E8:22:3A:07:39:16:45:0D:B7:EB:69:69:22:31:7F:C9
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/RNQur-giOgc5FkUNt-tpaSIxf8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.58.0/24
5.231.61.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:6a:e9:76:98:2c:5d:e5:18:24:e5:3e:51:37:20:30:91:83:
ee:56:19:52:aa:1f:cc:61:7c:4d:71:b8:43:4b:68:40:e9:82:
a2:b4:f7:c1:38:f7:2e:6a:bf:0d:2f:0c:7b:9d:f5:60:38:29:
be:df:e2:9e:01:c3:23:89:d5:ce:34:b8:f8:53:79:74:4c:01:
ea:39:59:1e:6e:ea:37:1f:50:f4:c0:04:2a:8b:3a:6f:34:c4:
0e:9e:71:2a:c1:53:4e:7e:78:68:42:da:52:36:1d:4b:6f:c1:
65:0a:93:2a:17:42:d0:0f:45:76:f9:ab:1d:ff:d0:d4:9c:1b:
3a:1a:1d:91:15:f3:29:c1:53:6b:bb:23:ef:a6:a9:c1:33:88:
33:99:27:69:d4:40:af:68:1a:24:75:20:7c:fe:f4:03:60:9f:
c3:a7:d8:68:72:5f:61:67:b1:dd:0e:72:46:11:bd:8c:0b:28:
a2:a9:71:21:ee:28:b4:0e:90:db:f2:34:c1:a2:9a:5b:a5:00:
3d:84:9d:1c:32:01:91:d6:15:7e:1c:ce:da:a4:fd:9a:ae:eb:
c2:b1:c6:5b:7c:17:c7:a7:80:d2:71:de:95:4b:14:74:c4:22:
44:9a:19:89:38:7a:32:a4:15:a7:0a:1b:3e:69:b0:1b:7a:04:
73:1d:05:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:57:15 2025 by rpki-client