Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/a4p_RFdJdVWO7JAS-RWWq7vj52I.roa
File: a4p_RFdJdVWO7JAS-RWWq7vj52I.roa (raw, json)
Hash identifier: fHffnuR7uZHgeXmSn3P4pLNIREcYqZMSH97Rwo7xMT4=
Subject key identifier: 6B:8A:7F:44:57:49:75:55:8E:EC:90:12:F9:15:96:AB:BB:E3:E7:62
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01987B3C0DBFD5B2FC74E57284309D93ACFA
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/a4p_RFdJdVWO7JAS-RWWq7vj52I.roa
Signing time: Tue 05 Aug 2025 17:16:29 +0000
ROA not before: Tue 05 Aug 2025 17:16:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214783
IP address blocks: 5.83.151.0/24 maxlen: 24
5.231.240.0/24 maxlen: 24
89.144.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:3c:0d:bf:d5:b2:fc:74:e5:72:84:30:9d:93:ac:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 5 17:16:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b8a7f44574975558eec9012f91596abbbe3e762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bf:00:2e:6c:be:3f:97:02:90:6b:44:e4:c3:
61:94:6f:85:c8:c6:81:13:f4:14:d0:0d:8e:5c:dc:
7d:23:c1:39:07:0f:d5:84:e0:d0:e5:16:7a:8a:b1:
4c:57:0b:ff:db:3f:76:48:d9:91:4e:bf:7b:cc:0c:
24:37:29:16:e2:b0:ff:8e:b6:8f:46:6a:b3:7b:05:
bc:4c:59:4b:0d:8a:13:c6:e0:88:ce:ab:99:48:a0:
cc:bf:13:4c:5e:03:0a:8e:2d:ca:9b:8f:71:ea:ff:
1b:6c:b5:10:7a:8c:9e:ee:f8:84:2d:8c:84:56:a2:
5d:bb:56:96:75:82:24:03:59:67:36:4f:18:5e:2b:
3e:22:fc:25:fa:cf:2a:97:1d:2a:c6:90:b8:f4:e7:
68:8b:18:a8:a4:10:3c:5d:38:b2:cf:28:4d:9a:1c:
a1:cd:a6:51:82:9b:18:56:3f:1a:60:c8:5e:4d:93:
04:ce:35:0e:6a:37:bf:a7:cd:89:7a:65:0e:40:95:
85:41:a3:b0:db:20:9a:5e:53:e2:33:f4:88:d8:c2:
db:fd:1f:a7:6b:91:75:67:93:1f:03:1f:dc:a5:ab:
7c:f9:71:6b:ec:9e:e1:de:56:0d:6b:51:5d:3c:42:
62:d0:3e:83:fa:da:d1:c8:ba:9c:5f:87:71:99:32:
7e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8A:7F:44:57:49:75:55:8E:EC:90:12:F9:15:96:AB:BB:E3:E7:62
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/a4p_RFdJdVWO7JAS-RWWq7vj52I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.151.0/24
5.231.240.0/24
89.144.55.0/24
Signature Algorithm: sha256WithRSAEncryption
71:bd:21:46:e5:03:da:56:fc:be:de:3e:d0:49:69:d9:bb:93:
50:c0:23:e4:75:6c:0e:dd:9d:0c:23:a0:d3:d4:31:ee:e4:88:
d7:d8:b8:fc:85:9e:5d:fc:4f:76:6e:16:c3:cf:32:c9:32:19:
52:45:f8:28:1b:4c:45:98:2e:8f:38:87:22:a1:1b:3e:54:30:
70:1c:07:38:9b:53:18:28:36:5e:13:01:81:5e:70:10:4c:88:
17:df:a7:26:1d:32:26:3c:03:dc:f6:b2:ae:8d:1c:94:a9:18:
a6:e6:79:26:86:e9:0f:a8:45:d6:f4:d9:0e:e4:24:ad:4f:5a:
90:fd:6d:f9:2c:f6:e2:2e:03:8b:c0:5e:93:84:c8:21:f9:08:
23:06:3c:b5:9b:bf:de:74:a1:83:a0:1b:88:f2:a2:35:07:ed:
21:b7:35:b6:9c:85:d8:a9:1c:1a:9c:95:6e:2d:86:39:ae:5f:
91:e2:45:b2:0c:f6:ce:c1:8a:5c:13:c7:cb:a0:62:30:5b:d8:
61:5a:c1:d3:26:f0:b0:75:03:42:37:6d:30:e8:60:04:83:40:
12:a4:43:cd:e3:71:d3:95:00:65:06:99:3b:86:8c:f1:a9:c8:
9e:f9:d1:8a:5b:b4:24:57:dd:34:f0:0e:d9:40:3c:0c:50:95:
18:4d:b8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:59:58 2025 by rpki-client