Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vRveDoaGN-ElkaYYhZXu4wi9-1Y.roa
File: vRveDoaGN-ElkaYYhZXu4wi9-1Y.roa (raw, json)
Hash identifier: CYNli0YD2I6+8qCqL0zKMByk2IrcfzYl/aeeRey53A0=
Subject key identifier: BD:1B:DE:0E:86:86:37:E1:25:91:A6:18:85:95:EE:E3:08:BD:FB:56
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01989C770FE1F7B17ADE20064DFC10254EE0
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vRveDoaGN-ElkaYYhZXu4wi9-1Y.roa
Signing time: Tue 12 Aug 2025 04:08:25 +0000
ROA not before: Tue 12 Aug 2025 04:08:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 5.231.71.0/24 maxlen: 24
5.231.74.0/24 maxlen: 24
5.231.92.0/24 maxlen: 24
5.231.107.0/24 maxlen: 24
5.231.109.0/24 maxlen: 24
5.231.116.0/24 maxlen: 24
5.231.253.0/24 maxlen: 24
94.249.190.0/24 maxlen: 24
94.249.195.0/24 maxlen: 24
94.249.230.0/24 maxlen: 24
94.249.238.0/24 maxlen: 24
94.249.239.0/24 maxlen: 24
94.249.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9c:77:0f:e1:f7:b1:7a:de:20:06:4d:fc:10:25:4e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 12 04:08:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd1bde0e868637e12591a6188595eee308bdfb56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:be:3d:f7:68:54:73:ad:8c:8d:c6:9c:cd:ac:
a9:be:6a:dc:bf:61:16:d9:6c:bb:97:b3:1c:cb:5c:
8c:e4:1f:69:ed:54:3a:99:cf:4a:d1:55:9e:61:91:
cf:f3:d0:cf:bb:47:ef:47:3f:5c:3a:cf:e2:48:18:
f4:51:0d:b6:c9:7d:b6:fb:db:34:8f:bc:56:97:62:
e4:59:63:1f:4a:60:9c:57:60:7b:de:52:50:2b:2b:
35:62:19:73:4e:cd:42:de:7e:5b:e6:5c:87:65:25:
7e:41:01:82:97:c4:ef:6a:04:de:70:08:3f:fc:4e:
cf:e2:ce:43:3a:b2:86:dd:73:8a:d1:10:6c:23:50:
48:a9:e3:6e:35:ae:01:bf:a8:98:87:9f:f2:e2:a5:
44:93:ea:1c:6e:b7:02:67:10:bd:20:27:8c:5f:4e:
d6:91:ce:16:00:6e:08:70:d6:c6:5f:fd:fc:f5:17:
c5:7f:4c:d2:5e:2f:f8:bb:e6:e9:dc:a5:4b:ad:0b:
fc:38:b6:0d:50:cd:30:0c:31:77:26:59:a2:5a:1a:
10:0e:42:72:7a:1e:60:5a:9d:66:4c:f7:3b:7a:88:
96:22:12:e3:92:44:1c:11:4b:89:8c:5b:9e:12:38:
eb:4d:2e:17:d6:ad:2a:20:ef:41:b3:b4:c7:94:18:
af:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1B:DE:0E:86:86:37:E1:25:91:A6:18:85:95:EE:E3:08:BD:FB:56
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vRveDoaGN-ElkaYYhZXu4wi9-1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.71.0/24
5.231.74.0/24
5.231.92.0/24
5.231.107.0/24
5.231.109.0/24
5.231.116.0/24
5.231.253.0/24
94.249.190.0/24
94.249.195.0/24
94.249.230.0/24
94.249.238.0/23
94.249.245.0/24
Signature Algorithm: sha256WithRSAEncryption
41:e6:68:6a:f4:21:d5:07:29:6a:a0:b0:ec:b9:55:ab:4e:72:
4d:56:26:99:6f:1d:24:53:47:b9:89:3e:0f:3a:41:35:29:22:
57:f4:90:af:8f:80:8e:37:b3:90:2b:ff:75:68:a7:d2:5f:e6:
ef:16:f0:63:89:f8:4b:74:51:e0:59:25:c9:f5:13:6d:bf:d4:
8a:5e:f3:db:aa:8e:d6:b5:cc:32:e5:33:eb:14:16:b8:ec:8d:
e1:97:fc:6a:2b:c0:99:c5:86:a3:ec:e9:88:97:7d:c4:c0:f2:
22:69:93:71:a6:49:3a:52:99:da:7d:2b:fe:90:ec:76:f8:e1:
5b:b1:80:3a:b0:61:e6:6b:42:7f:6d:3b:c0:5e:0b:80:8b:d5:
07:29:46:f2:62:e2:b0:b5:61:43:f8:2b:59:26:4b:20:31:46:
fd:77:74:92:f6:3c:ef:20:50:5a:57:0a:78:3c:51:80:10:0d:
ed:82:b4:9c:6f:42:c2:25:f0:eb:fa:4f:83:36:4e:79:ca:c6:
db:4a:61:d5:7d:37:44:0f:31:88:a4:35:7f:a0:bb:92:8e:1c:
ec:ab:f7:b4:31:b0:6e:83:57:6c:f0:25:25:2b:05:11:23:c6:
85:ae:ce:81:aa:74:e3:1f:8f:b6:7b:81:50:00:ac:00:53:1c:
2b:ac:0f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:13:36 2025 by rpki-client