Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/adyPnmy1hkUwN_6oRKqQU6fGJ20.roa
File: adyPnmy1hkUwN_6oRKqQU6fGJ20.roa (raw, json)
Hash identifier: 4L0Al4FhDX6DoANkKLXR0XsGr3AjG+CaADegwj3fLx8=
Subject key identifier: 69:DC:8F:9E:6C:B5:86:45:30:37:FE:A8:44:AA:90:53:A7:C6:27:6D
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0197AC0204F03FB0A86B75AD5B89C017C8BA
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/adyPnmy1hkUwN_6oRKqQU6fGJ20.roa
Signing time: Thu 26 Jun 2025 11:31:42 +0000
ROA not before: Thu 26 Jun 2025 11:31:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215439
IP address blocks: 5.231.226.0/24 maxlen: 24
89.144.16.0/24 maxlen: 24
94.103.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ac:02:04:f0:3f:b0:a8:6b:75:ad:5b:89:c0:17:c8:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 26 11:31:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69dc8f9e6cb586453037fea844aa9053a7c6276d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3b:df:96:72:be:d1:96:6d:05:56:a9:39:30:
be:a2:be:b1:38:cb:ba:a5:ec:b7:eb:39:1b:ca:b0:
d2:33:94:d6:aa:76:cc:49:42:8c:2f:d4:ee:27:00:
b7:d5:f1:51:e6:cd:78:6b:52:47:5f:62:e6:7b:3a:
d3:a6:04:53:fd:55:0a:a8:72:76:df:53:0c:79:0a:
b4:a5:bc:d7:aa:0b:c0:7d:76:66:09:f2:30:68:61:
e6:c6:52:a5:6e:30:7a:d1:b1:43:d8:9f:b6:3a:83:
cd:a5:ad:9d:42:cb:4d:18:87:55:e8:e9:5b:46:68:
aa:85:41:8e:37:78:94:8c:07:7a:a1:44:d5:f5:e1:
60:9d:d9:3e:fd:ea:eb:e6:5d:b7:c9:ad:d5:ca:0c:
f9:4b:3d:15:da:da:05:72:ce:a9:ab:9a:55:5c:6c:
dc:32:64:4f:ef:01:e9:dd:fd:e1:08:f7:67:72:79:
71:fb:58:cc:e8:3f:2b:02:09:aa:b1:9a:7d:54:90:
aa:04:23:30:4e:98:85:76:60:27:68:65:76:53:5f:
cd:87:f4:0c:b5:4a:15:ab:6b:4b:6b:ff:4b:f0:31:
a6:09:52:21:d3:6a:6a:34:38:41:97:94:82:7c:54:
8b:d9:77:aa:a1:3f:59:11:f7:16:78:61:ec:2c:61:
84:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DC:8F:9E:6C:B5:86:45:30:37:FE:A8:44:AA:90:53:A7:C6:27:6D
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/adyPnmy1hkUwN_6oRKqQU6fGJ20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.226.0/24
89.144.16.0/24
94.103.169.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:7e:9f:ac:c8:fd:92:29:7d:e4:f7:77:d9:17:88:d0:b5:2e:
75:b2:da:ea:b1:da:e2:63:e6:ec:aa:59:68:8e:cf:5b:6b:0e:
3c:dc:e6:37:d9:e7:ef:bf:ff:bc:3c:6e:fc:3f:a6:08:d3:85:
2c:5e:79:fb:34:7e:fa:ac:6d:57:8d:32:8f:da:30:97:1a:dc:
f8:a8:0a:06:57:77:22:bd:9e:ef:39:87:52:d7:13:ec:76:92:
f9:41:18:6c:10:b5:28:86:7b:6b:c9:b6:b2:7d:9a:11:db:73:
eb:a9:66:b5:20:0b:7e:b6:c9:e9:ab:1c:b1:63:81:e8:b8:65:
19:81:47:52:2b:c2:78:14:7f:c6:ad:dc:06:9f:ce:83:6f:ca:
a5:7c:e3:cd:02:eb:96:1d:e4:ec:ab:6a:0c:df:5d:47:44:51:
a9:3f:c2:e4:7d:16:68:72:c8:9a:01:70:ea:56:dd:e4:e7:b2:
a8:b7:89:b3:2c:c0:2b:fe:96:b3:43:7c:88:65:57:a4:4c:a6:
c4:20:98:71:dd:89:13:66:47:d4:07:42:ad:34:dc:22:2b:58:
34:13:ed:a1:a2:b1:75:86:eb:05:e4:0d:72:fa:bb:0d:e4:3f:
b7:e3:20:b2:72:2b:d0:fd:39:96:5c:e8:de:ff:b9:27:cb:57:
9c:25:40:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:16:58 2025 by rpki-client