Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Reu_aaUvXcOFy12AqisFrDSQdog.roa
File: Reu_aaUvXcOFy12AqisFrDSQdog.roa (raw, json)
Hash identifier: t7Gzaf2vrJbV7DxEHOjsv/N3S4pIFRuziwOpBln0ams=
Subject key identifier: 45:EB:BF:69:A5:2F:5D:C3:85:CB:5D:80:AA:2B:05:AC:34:90:76:88
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019936F69EDCAF52739028E63031388AE511
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Reu_aaUvXcOFy12AqisFrDSQdog.roa
Signing time: Thu 11 Sep 2025 04:09:16 +0000
ROA not before: Thu 11 Sep 2025 04:09:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211780
IP address blocks: 5.231.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:f6:9e:dc:af:52:73:90:28:e6:30:31:38:8a:e5:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 11 04:09:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45ebbf69a52f5dc385cb5d80aa2b05ac34907688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1b:fc:35:7f:cd:ab:0b:0f:a6:77:43:84:71:
f9:31:9a:81:8b:6e:4b:0c:3c:f4:f1:d3:11:05:53:
44:a7:02:0c:0e:74:38:8d:a5:2d:a5:6e:b3:82:5b:
64:7f:7c:a6:03:63:6e:86:15:eb:ca:11:17:ed:a8:
a6:b5:27:49:40:d0:49:4f:aa:3a:39:e7:0b:41:b2:
51:f8:d9:56:36:4b:22:0c:8d:0f:28:6e:fd:39:16:
75:eb:f3:54:b3:51:7d:32:0e:6a:c9:c9:6d:88:51:
7f:50:1f:c9:00:60:77:a2:4d:49:9c:73:b1:f1:13:
9e:fb:cc:b5:c8:88:a5:15:11:b6:df:d4:b6:a3:b9:
55:64:88:de:83:10:23:00:17:de:16:58:13:b7:78:
af:da:29:22:c6:81:1f:dd:21:58:53:d8:30:a3:d0:
69:20:23:dd:01:8a:73:11:e3:0b:42:27:ef:15:94:
8b:2c:da:8b:93:22:7d:29:62:1b:0b:95:d4:a6:8d:
94:04:0d:40:64:85:50:90:7a:a3:e3:9d:25:ca:fc:
b1:74:f4:07:9e:bc:4e:85:c1:22:8e:80:dd:b9:ad:
27:53:cf:5b:5b:d7:9f:31:61:1c:62:a3:5f:62:bd:
80:c1:bd:59:59:2f:5b:87:82:55:c4:16:32:85:48:
df:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EB:BF:69:A5:2F:5D:C3:85:CB:5D:80:AA:2B:05:AC:34:90:76:88
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Reu_aaUvXcOFy12AqisFrDSQdog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.26.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:b5:28:97:eb:2b:b2:d3:36:5b:68:be:68:1e:43:df:fc:ce:
17:65:75:43:c9:03:46:ff:9c:9d:80:62:df:84:95:56:34:33:
ee:72:16:ad:09:d3:b3:cb:01:6d:46:a8:0e:17:de:26:0d:73:
57:a9:23:79:36:87:15:93:7e:af:8c:39:fb:4e:11:18:4e:20:
91:54:1c:3b:33:57:ea:61:b5:a0:9b:9f:78:e6:8d:a8:1e:26:
6f:e3:6a:2e:a2:31:ea:43:4e:45:3c:d0:a0:f5:2b:28:52:83:
e0:53:de:13:eb:a3:8a:34:08:93:1b:3b:8e:83:30:ab:ac:9a:
f0:ff:a7:3d:9d:16:38:43:46:c9:05:52:86:57:c8:3e:4a:77:
3e:2c:fa:25:3c:5c:e7:c7:a6:0b:4d:9f:62:e1:f9:d5:d9:6c:
47:d1:02:e4:42:e3:cc:8f:35:ef:4f:0e:84:3c:24:ed:83:32:
71:7c:65:14:bb:86:ec:e3:f8:35:f0:9d:62:f4:bf:02:17:33:
08:58:90:89:81:23:8b:08:10:e3:13:3f:72:f2:4d:2b:2e:86:
40:33:3a:a3:e8:d1:86:db:42:fe:0c:a1:50:64:a0:c8:06:78:
f8:89:b1:2c:0d:66:f4:ca:d9:52:ff:c3:5f:db:cf:6f:83:00:
cd:81:cd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:39:12 2025 by rpki-client