Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/whuD40nVyIl_1exWz0uPMXD4V6o.roa
File: whuD40nVyIl_1exWz0uPMXD4V6o.roa (raw, json)
Hash identifier: iMjnwOI0FoShzvAmNTz3wL41/hbsSgLxELSioe6MCms=
Subject key identifier: C2:1B:83:E3:49:D5:C8:89:7F:D5:EC:56:CF:4B:8F:31:70:F8:57:AA
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0199380FB59A23D4A9B6151385BCA854E490
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/whuD40nVyIl_1exWz0uPMXD4V6o.roa
Signing time: Thu 11 Sep 2025 09:16:17 +0000
ROA not before: Thu 11 Sep 2025 09:16:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214320
IP address blocks: 5.83.140.0/24 maxlen: 24
5.231.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:0f:b5:9a:23:d4:a9:b6:15:13:85:bc:a8:54:e4:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 11 09:16:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c21b83e349d5c8897fd5ec56cf4b8f3170f857aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fa:e0:89:cc:0f:18:f9:ce:4c:04:f4:6f:9b:
de:e9:c8:fe:80:68:12:0a:99:59:ee:9a:8b:74:c6:
ec:81:ff:51:3e:6d:3e:dc:94:75:df:d6:c9:ce:cd:
da:81:83:a6:89:5c:41:0a:4b:75:45:22:17:b4:6d:
00:74:9c:da:65:9a:1b:c7:fd:03:8d:17:88:08:29:
06:7d:52:46:c3:c2:51:90:61:04:9e:2c:da:96:23:
8c:04:54:27:da:8b:5e:59:2f:83:a4:af:39:d4:69:
84:b5:9b:b1:14:01:6a:21:b4:79:de:f5:26:f8:5d:
72:23:d9:6f:7e:44:31:22:dc:af:37:6f:45:95:2a:
88:b6:a0:bb:b3:bf:5f:5c:7b:04:fe:20:d7:df:b4:
71:74:81:7d:42:08:49:11:02:b8:a6:2b:3a:2d:24:
54:be:3b:5a:3e:17:08:f5:7b:c8:51:4c:2e:c0:9f:
fc:b0:76:c5:7d:49:52:80:6d:e2:ff:77:82:0e:81:
11:d7:77:eb:4c:49:3a:e9:ee:dc:94:39:2a:f7:de:
fb:dd:6c:5f:50:51:b2:2f:e5:92:13:0c:7f:07:4b:
f9:49:fa:07:1e:23:ca:9b:eb:ca:cb:d7:f8:1b:b5:
ef:d0:e3:04:42:d0:1a:af:65:3c:e1:93:5a:d9:3b:
45:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1B:83:E3:49:D5:C8:89:7F:D5:EC:56:CF:4B:8F:31:70:F8:57:AA
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/whuD40nVyIl_1exWz0uPMXD4V6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.140.0/24
5.231.75.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:5a:62:ac:92:12:45:83:15:9a:3e:ac:57:e9:f7:0c:3e:6f:
82:8e:5f:70:ac:77:92:f2:d4:a6:22:d5:3d:89:a3:23:18:e3:
29:67:43:af:60:8c:7d:cf:a9:78:3d:43:20:0a:16:48:5a:41:
4b:d4:23:ce:f2:43:57:e1:73:62:32:98:c2:bf:5f:ca:b8:5b:
6c:0b:57:dc:49:e7:c2:c5:69:6b:e4:57:43:2f:df:58:9f:4c:
17:e7:11:2d:2a:28:b4:51:c8:d6:87:ff:df:80:8d:dc:1b:c6:
37:dc:5b:f6:78:b7:63:b5:fb:17:c2:cd:80:92:a3:67:cf:93:
ff:24:b6:53:99:37:52:8d:30:ed:a1:51:67:76:2f:95:22:cd:
0f:15:27:7c:85:1d:08:d9:35:fc:06:d4:57:fa:83:1a:18:49:
23:c7:30:4c:18:49:1a:d0:58:4e:01:b4:f5:2c:27:ef:ea:3d:
8e:dc:ce:d3:5a:88:4d:1f:14:83:b1:ea:0d:db:09:65:b2:b0:
7c:b2:26:49:c8:f1:87:0c:83:e6:c8:b0:85:21:5c:f3:74:65:
2d:8a:5a:d4:28:ba:34:bc:01:3d:78:00:27:a2:6d:ae:99:69:
97:d2:56:b1:c1:f4:3d:b2:b0:09:d1:86:11:f2:58:39:64:97:
9d:92:86:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:49:29 2025 by rpki-client