Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sqry7oylYETFkMHqp3MOaqU_RBM.roa
File: sqry7oylYETFkMHqp3MOaqU_RBM.roa (raw, json)
Hash identifier: UT+eN95zcG20FJPfT3c66+Y2JsHkooZqOGRfJ+EAsK0=
Subject key identifier: B2:AA:F2:EE:8C:A5:60:44:C5:90:C1:EA:A7:73:0E:6A:A5:3F:44:13
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01987E5046D75786C4301793029444408D74
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sqry7oylYETFkMHqp3MOaqU_RBM.roa
Signing time: Wed 06 Aug 2025 07:37:26 +0000
ROA not before: Wed 06 Aug 2025 07:37:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62904
IP address blocks: 5.231.124.0/24 maxlen: 24
85.93.20.0/24 maxlen: 24
89.144.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:50:46:d7:57:86:c4:30:17:93:02:94:44:40:8d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 6 07:37:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2aaf2ee8ca56044c590c1eaa7730e6aa53f4413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:97:61:32:ce:7c:70:8d:3b:b7:67:97:dd:72:
ae:ad:16:e8:62:d5:2f:e3:6e:63:a5:c2:29:c3:a3:
49:bd:4a:d4:89:62:24:19:8d:f1:f9:a5:3f:f2:27:
07:ad:19:37:96:8e:55:e2:db:f2:02:70:2e:40:d1:
a9:95:86:a8:4b:57:d8:d1:e9:fc:10:6b:cb:e2:f8:
78:45:ac:b4:cd:76:4b:b6:13:a2:57:88:16:5d:e7:
9b:e2:a1:e0:04:0f:11:2a:56:b2:31:78:5e:00:cb:
1b:19:c0:93:5d:5d:ec:24:ee:58:01:b9:e5:9f:a8:
03:30:a7:01:7b:65:eb:a0:63:dc:28:90:fc:29:af:
9e:d2:cf:cf:f0:76:71:de:30:38:68:a8:90:7f:d8:
de:65:bd:b1:bb:c7:e4:b7:aa:dd:a1:c8:5b:4b:4d:
79:f8:86:0e:b7:36:9e:4a:35:4a:22:0c:35:0b:6f:
94:66:f9:ec:1f:b3:88:6d:46:e6:7a:e8:3a:30:73:
b1:52:f7:2b:3d:6b:92:56:d0:db:e8:e0:a2:4f:49:
f7:b3:5e:4f:db:ab:09:36:d1:c9:4d:43:43:70:7b:
2d:29:cf:2c:52:90:92:20:a9:8a:5c:65:88:07:c2:
ac:14:1f:ef:6b:d1:e7:27:df:b3:36:61:26:7f:9e:
2e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AA:F2:EE:8C:A5:60:44:C5:90:C1:EA:A7:73:0E:6A:A5:3F:44:13
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sqry7oylYETFkMHqp3MOaqU_RBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.124.0/24
85.93.20.0/24
89.144.14.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:db:fd:98:b4:33:ca:c3:88:c5:0c:12:32:36:3d:bb:2f:3f:
c1:09:e7:50:f6:3e:8c:a7:b7:04:cb:9b:49:7a:64:8b:42:33:
2f:f4:39:39:bf:60:c9:58:1f:2e:63:2e:8f:8b:0b:95:d6:84:
ee:48:d0:fe:77:0e:79:35:42:25:ff:5d:0a:44:2d:79:08:0c:
f7:12:0e:7e:56:28:30:60:6f:2b:30:47:20:9e:05:4d:0b:c0:
99:2e:6f:e5:80:26:23:32:89:1c:30:64:b4:90:0d:03:69:35:
93:ec:df:13:83:13:78:a9:01:69:be:44:f1:06:60:0c:23:d9:
b7:5b:09:63:85:9e:04:42:6e:bb:88:a6:6f:35:1a:22:ff:d1:
10:46:8d:11:1d:76:8f:58:32:21:1a:b5:e5:99:e7:ed:6d:54:
b9:78:9b:34:7f:34:bf:46:27:ff:c4:d6:b9:59:38:e7:b0:dd:
47:ff:54:ff:34:17:9c:64:2e:10:5c:2a:a3:09:23:5b:d2:1c:
92:b0:b8:b3:9b:a8:77:03:4f:0d:bc:bc:d2:55:83:d9:57:36:
3c:90:f9:63:8a:81:da:51:a2:8e:c4:7a:ff:3c:a9:6d:88:a7:
86:8f:f4:53:0c:cd:60:b1:50:83:6c:1b:77:47:0e:ea:a1:0d:
12:a6:ec:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:03:23 2025 by rpki-client