Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jFGWOpcNN2uHZK-9MqScZt4ZZP8.roa
File: jFGWOpcNN2uHZK-9MqScZt4ZZP8.roa (raw, json)
Hash identifier: 87ompJ8R+SQCCsA5VwgCaXK0mPA1wXQ5gFbdwUn2Occ=
Subject key identifier: 8C:51:96:3A:97:0D:37:6B:87:64:AF:BD:32:A4:9C:66:DE:19:64:FF
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0199BC1D52B9F418870A06214AF5469959EC
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jFGWOpcNN2uHZK-9MqScZt4ZZP8.roa
Signing time: Tue 07 Oct 2025 00:41:02 +0000
ROA not before: Tue 07 Oct 2025 00:41:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206659
IP address blocks: 5.231.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:bc:1d:52:b9:f4:18:87:0a:06:21:4a:f5:46:99:59:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 7 00:41:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c51963a970d376b8764afbd32a49c66de1964ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b7:e0:36:7d:69:59:de:81:e3:82:cf:48:c7:
4b:af:f1:0d:ef:cb:de:12:8b:08:82:ea:2d:b6:06:
63:8c:d7:77:60:87:15:94:7f:22:e3:8d:9c:04:0a:
76:07:96:1d:d7:94:01:8d:ae:ac:d9:22:f9:69:91:
60:62:75:b3:31:0f:0f:b7:e4:03:79:92:ce:2b:4b:
db:2d:e9:a2:32:0c:fe:cb:8b:77:4e:ef:91:f4:5e:
3b:ca:27:bc:a2:4c:0d:88:fb:da:11:36:7f:48:42:
a4:75:0a:c6:ec:7f:a4:58:d7:02:8a:21:b8:56:81:
27:f5:9d:0d:82:5a:a0:c6:6f:66:1b:b3:33:10:59:
2e:a3:db:12:ab:fe:1d:c7:59:47:42:56:58:9c:64:
48:a2:08:03:1c:b9:e5:50:27:d7:47:89:9f:cc:b7:
1b:88:11:f4:c1:3a:a9:0a:98:99:7f:2f:23:10:f7:
50:bb:b9:64:aa:24:47:14:ff:de:9d:b8:e2:d9:3f:
f6:70:ed:38:e5:a6:f7:62:83:a0:40:fe:a1:e6:2a:
07:f0:53:5a:12:98:6b:29:f2:f9:df:e1:df:ae:bd:
48:7b:26:26:09:11:cd:5c:2f:17:55:84:a3:94:bf:
ca:70:93:9d:53:25:07:98:97:95:24:07:6a:01:5a:
4d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:51:96:3A:97:0D:37:6B:87:64:AF:BD:32:A4:9C:66:DE:19:64:FF
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jFGWOpcNN2uHZK-9MqScZt4ZZP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.97.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:8d:92:fa:a9:87:80:a7:bc:fc:9f:d3:23:85:b4:5e:c1:a0:
c9:46:55:f2:a8:55:fb:62:21:ee:50:6a:eb:b8:67:3d:75:60:
bd:10:f3:e4:2e:84:ee:31:7f:b8:66:23:03:8e:13:ae:a4:eb:
9c:2e:81:17:b0:5d:71:30:0a:86:d8:b5:f6:92:80:ea:ec:71:
48:59:68:0b:1d:5c:42:2e:3b:22:60:f9:29:96:5a:f9:73:52:
f1:50:36:58:9b:ba:2d:4a:52:f6:c7:c3:67:05:f5:d4:27:e8:
9e:51:9f:05:4a:32:78:eb:25:fc:0b:58:2c:ee:a8:82:6a:9a:
b6:a6:2d:dd:ab:e1:46:05:5a:4e:d5:a7:71:b2:de:a5:fb:b6:
31:83:eb:d6:f5:29:db:05:84:3b:73:07:cf:a9:94:f1:ed:6b:
7b:07:1a:b3:26:79:7c:27:6b:84:b4:5b:e0:ab:71:0f:68:56:
7f:9a:6c:85:ec:1d:cc:d9:e2:52:49:1d:b7:48:08:31:90:f4:
7c:36:a7:8e:14:26:cc:40:83:2c:42:33:6d:1c:0d:7d:65:78:
50:0c:f1:8c:89:ea:60:f7:19:92:68:c5:96:06:9f:9d:75:ae:
fc:d1:64:77:53:48:a1:72:72:a2:6b:3f:6c:b3:3c:1d:d4:96:
59:a1:9e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:26:55 2025 by rpki-client