Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sliywgnfrA-eVpM394XSX8wefNE.roa
File: sliywgnfrA-eVpM394XSX8wefNE.roa (raw, json)
Hash identifier: hbLGzXDWS1F3rDop7zyLklQgza+pBgpLv9kbkcqthmU=
Subject key identifier: B2:58:B2:C2:09:DF:AC:0F:9E:56:93:37:F7:85:D2:5F:CC:1E:7C:D1
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0199F35C5786604F47F7B7FE838898DF5296
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sliywgnfrA-eVpM394XSX8wefNE.roa
Signing time: Fri 17 Oct 2025 18:08:59 +0000
ROA not before: Fri 17 Oct 2025 18:08:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 5.231.30.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
217.69.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f3:5c:57:86:60:4f:47:f7:b7:fe:83:88:98:df:52:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 17 18:08:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b258b2c209dfac0f9e569337f785d25fcc1e7cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8a:d8:94:37:26:c3:11:48:76:9c:8a:a3:b5:
73:6c:cd:e7:50:cb:82:8b:77:21:0f:1f:a6:a6:31:
0a:d5:7f:70:23:ab:2c:35:a1:9e:db:85:d3:c5:54:
58:5a:9e:d1:01:2d:4d:a4:78:48:ae:e6:58:e6:a7:
ce:36:e4:37:54:99:4c:de:12:30:ad:e5:5c:23:b1:
b1:05:89:ee:c6:dc:4a:8b:fa:13:8c:31:6e:cb:4b:
4c:15:cf:d8:d7:e7:d9:52:4f:f1:62:5b:cb:a5:fc:
6c:10:3b:51:62:6e:7a:03:a1:53:bb:f0:f2:7e:65:
64:a9:da:73:23:ac:b1:7f:85:69:f3:3e:71:79:a8:
43:da:1e:aa:a9:dc:5f:35:83:ba:3a:d1:28:9d:86:
09:f9:13:83:c4:5b:b2:ee:6a:da:e1:44:89:91:9c:
42:97:c7:6a:06:0a:6b:02:1b:fb:39:bf:6c:af:a2:
e5:68:02:5a:dc:c3:39:79:6a:94:85:91:10:fe:c7:
0b:e1:2e:61:6a:0a:bf:61:89:fa:6a:f3:b6:64:5d:
bd:7c:50:06:81:5a:f5:03:69:b7:fe:95:3b:23:70:
94:fb:de:26:03:06:21:30:ea:ad:d6:4c:f1:76:7e:
fb:09:8b:bf:9f:1f:45:d3:f3:8e:84:00:dd:28:4c:
22:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:58:B2:C2:09:DF:AC:0F:9E:56:93:37:F7:85:D2:5F:CC:1E:7C:D1
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sliywgnfrA-eVpM394XSX8wefNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.30.0/24
77.90.54.0/24
217.69.166.0/24
Signature Algorithm: sha256WithRSAEncryption
73:fb:be:ba:66:00:5e:62:32:43:ee:f4:56:ff:51:e2:95:3d:
83:d5:e1:55:cb:a4:b6:76:13:ed:59:9f:31:b0:3a:61:f7:af:
c1:fd:bb:ea:1e:30:3e:7e:43:d2:d0:5a:47:36:98:b6:3e:04:
4f:80:6e:cf:b3:76:29:fc:da:8f:73:ba:45:e2:db:e1:02:72:
14:10:29:69:b4:ac:b6:1b:b6:a3:a6:8a:7a:5d:39:c3:ce:a4:
38:cb:05:ce:e4:e2:e9:26:38:d1:a3:41:0a:6b:a2:76:85:ea:
dc:49:7b:bb:cf:7e:f9:4e:05:3c:e5:3f:73:73:e3:b7:8d:5f:
0d:a5:36:b9:91:d2:d7:83:da:18:9b:d8:5a:04:5b:92:6a:31:
83:a6:00:87:a8:0e:4c:a4:f7:5a:96:dd:30:9a:fa:fd:c5:fe:
fe:c6:bd:fe:16:2b:b9:4e:50:47:e7:ec:84:ed:67:7d:96:86:
81:f2:54:06:1d:17:63:75:1d:95:eb:1e:4e:60:04:72:64:1b:
e0:bd:ec:94:51:ed:b2:66:f6:23:1a:20:aa:4b:7e:01:8b:6c:
eb:9e:8a:53:d0:20:5c:e1:6d:d2:46:45:37:07:01:bf:46:d5:
db:97:9a:4a:c3:90:f4:d8:e2:2d:cc:5b:ea:24:e6:76:93:9c:
e1:0c:bb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:50:13 2025 by rpki-client