Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SOVXjkDU6KHdXnaJv2pgjUrDjFI.roa
File: SOVXjkDU6KHdXnaJv2pgjUrDjFI.roa (raw, json)
Hash identifier: 70r5T32dKaclUJ+en2/73XrhK3OE9w196W31HWuWq54=
Subject key identifier: 48:E5:57:8E:40:D4:E8:A1:DD:5E:76:89:BF:6A:60:8D:4A:C3:8C:52
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0199C319E651B67E42804CED9BA058F36688
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SOVXjkDU6KHdXnaJv2pgjUrDjFI.roa
Signing time: Wed 08 Oct 2025 09:14:38 +0000
ROA not before: Wed 08 Oct 2025 09:14:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42596
IP address blocks: 5.83.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:19:e6:51:b6:7e:42:80:4c:ed:9b:a0:58:f3:66:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 8 09:14:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48e5578e40d4e8a1dd5e7689bf6a608d4ac38c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a7:43:84:5a:05:93:d4:08:ff:85:c1:f4:ce:
84:9c:65:ba:36:1a:75:95:cc:b7:5e:f2:8e:dd:a4:
86:d1:57:3a:08:bd:4e:08:b5:ba:5a:21:7f:c0:55:
8e:cb:3f:88:ba:c3:78:20:d0:e4:53:e8:bc:c4:f3:
e4:47:f4:34:e4:fe:d2:98:db:58:99:6d:b8:53:98:
57:c4:b3:05:46:ae:b2:7d:18:7c:37:e8:6a:7c:77:
ca:1e:08:b0:07:63:ec:9f:dc:3a:7b:88:2d:5a:bd:
5e:1a:2d:b4:d3:d0:08:dc:55:88:29:7f:b6:c2:0a:
88:a2:75:dc:39:b7:e6:5c:fd:5d:5b:06:37:b5:04:
d7:db:9c:e4:e7:64:ef:f1:be:e5:15:f4:bd:21:f6:
98:3c:bc:63:43:76:bd:10:9a:3e:1d:a2:a7:72:8b:
1f:b9:22:ea:b6:45:5b:26:c8:82:6c:67:3f:46:e0:
5d:65:3b:8e:8e:8a:30:5d:55:ac:27:a9:17:87:97:
d4:64:53:16:a4:0c:f4:0b:c6:d5:dc:96:6e:03:15:
6b:7b:e7:3c:b6:62:da:e6:80:48:4d:db:8d:35:c5:
00:8f:ef:b5:db:f5:25:7f:9f:01:9b:76:4e:f0:60:
45:42:5e:cb:84:23:cb:7b:39:29:e4:7f:9b:cd:6b:
9a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E5:57:8E:40:D4:E8:A1:DD:5E:76:89:BF:6A:60:8D:4A:C3:8C:52
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SOVXjkDU6KHdXnaJv2pgjUrDjFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.156.0/24
Signature Algorithm: sha256WithRSAEncryption
74:c5:9e:7a:0d:3a:32:46:93:95:86:1c:9f:74:5f:83:1d:b1:
c3:bf:91:b5:ae:aa:7f:d1:7e:fe:a8:1d:80:71:35:ee:c8:30:
79:67:62:50:30:fd:bb:20:30:82:17:53:69:b1:b7:68:d0:17:
e0:6d:85:e1:12:da:29:0f:b8:e8:60:fb:37:cb:8f:20:33:93:
09:0b:50:cc:9c:a7:b7:9e:80:68:6c:a7:21:e8:2d:8f:b3:76:
fe:85:7d:c6:d1:49:c8:d3:8e:66:03:3a:9f:41:ac:e9:4b:65:
6f:32:3e:10:04:e6:a2:c8:24:0e:7e:c2:d7:3b:05:22:ac:0b:
56:0b:74:0a:00:f9:dc:d6:33:0c:23:e7:9f:5b:e0:9e:25:7e:
d8:5c:68:37:ce:24:bf:d7:aa:6e:f3:a9:a6:eb:e8:83:33:6e:
dd:9b:7c:75:6a:f3:c0:50:c9:c5:51:68:a0:70:13:3d:3a:0e:
5a:bb:61:4a:a3:59:b9:55:7d:0e:90:e2:3e:00:0e:b4:b3:f3:
8f:01:e1:9a:16:01:b3:89:79:e3:8d:c6:db:97:5a:1e:83:1d:
c7:37:00:43:9e:5c:91:a1:08:c1:e8:b8:64:d5:56:c7:e7:02:
d9:8d:d1:4a:f4:47:47:67:47:14:95:78:e5:2a:c0:2a:90:a7:
88:42:f9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:27:24 2025 by rpki-client