Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/XOeYPDFunsrsYp0-Y7f01UANXYE.roa
File: XOeYPDFunsrsYp0-Y7f01UANXYE.roa (raw, json)
Hash identifier: EDBHmHjrHHD79zYQIl4IIyJ7MsjaCFiA1LKPLtylFCA=
Subject key identifier: 5C:E7:98:3C:31:6E:9E:CA:EC:62:9D:3E:63:B7:F4:D5:40:0D:5D:81
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 01995D4FEF111DFCBCDE4CC8E1BF248FC497
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/XOeYPDFunsrsYp0-Y7f01UANXYE.roa
Signing time: Thu 18 Sep 2025 14:52:23 +0000
ROA not before: Thu 18 Sep 2025 14:52:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208580
IP address blocks: 93.179.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5d:4f:ef:11:1d:fc:bc:de:4c:c8:e1:bf:24:8f:c4:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Sep 18 14:52:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ce7983c316e9ecaec629d3e63b7f4d5400d5d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a3:3d:1f:c9:3c:eb:d6:d7:65:6f:46:2d:a8:
8d:67:34:78:5f:37:75:4c:02:ec:0f:14:24:75:a9:
49:74:a8:34:92:92:1b:0b:2f:41:d9:7f:d7:29:81:
84:84:45:a7:e2:28:5e:29:b7:93:3e:ab:eb:88:a0:
27:e8:07:3c:35:99:6a:49:71:ef:21:b6:b6:ff:9f:
be:01:dc:70:56:d7:9e:65:bf:5d:8f:5e:6a:b6:1b:
4b:a5:c5:91:2b:12:d4:0a:cc:c1:14:80:d2:b7:eb:
e8:cf:45:34:82:1c:2f:c5:42:bd:63:2e:d2:53:52:
e5:d4:0a:58:3d:5c:3f:cf:cf:0e:fa:92:37:71:d0:
59:07:53:27:ad:cb:3b:77:25:bc:57:1e:18:c0:26:
09:d9:97:35:3b:25:f5:10:13:a0:0c:76:89:11:6c:
08:8a:13:fb:d9:c3:e8:14:ff:83:33:a5:8b:88:ce:
3f:f8:f2:bc:a6:60:b6:12:84:65:44:8b:6a:87:2b:
9a:f6:1c:5c:bc:1f:c1:d5:7e:dd:8d:76:f3:61:08:
45:05:2b:52:a0:c0:bd:29:3b:3f:74:37:49:69:75:
ab:98:e9:c3:3c:1d:c9:9a:e4:60:4b:2b:d5:8d:eb:
13:1d:97:93:8e:72:20:45:7d:d8:a6:85:ff:73:39:
20:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E7:98:3C:31:6E:9E:CA:EC:62:9D:3E:63:B7:F4:D5:40:0D:5D:81
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/XOeYPDFunsrsYp0-Y7f01UANXYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.179.68.0/24
Signature Algorithm: sha256WithRSAEncryption
52:09:0a:2d:06:d1:1c:71:0e:69:f8:89:3d:12:80:2f:68:ca:
1e:f5:73:2c:ce:d3:23:44:b7:e6:93:1e:24:95:e7:06:30:52:
a8:e8:30:a2:b9:d0:5b:ad:2e:06:c0:06:f7:af:b8:01:bd:6d:
5e:27:22:18:35:99:b7:65:e4:04:87:b5:01:d5:e1:13:cd:e7:
2f:96:76:23:a6:5d:82:b5:36:d0:b5:3b:cc:b4:31:03:50:4a:
b1:6a:2e:fd:f3:5e:65:aa:83:48:05:4f:11:bc:79:b0:31:7d:
29:70:37:61:ea:07:d2:30:24:9e:c8:c4:11:bb:ec:49:9d:20:
10:ca:f4:d0:d0:e4:7f:50:cf:8e:f6:82:e0:66:c6:52:36:75:
6f:f1:2b:a6:72:a6:10:e5:f0:fc:1e:fd:6f:6f:5d:48:9f:ba:
3d:f9:50:e0:0c:25:c3:c9:f4:ea:d5:74:f9:99:99:e3:1b:04:
67:53:d6:69:ab:8a:60:d5:71:e2:3c:31:1b:f5:a5:c8:d0:1c:
92:9d:09:f6:30:62:0c:b3:23:6d:9f:31:9d:53:d9:68:9a:10:
4a:ec:1c:bb:97:42:0b:c5:f0:fe:b7:6a:d6:ee:e7:e8:2a:e3:
e2:0a:87:e8:1d:70:78:de:a4:1b:f0:9e:24:c9:13:24:3e:9c:
1f:7e:cd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:09:08 2025 by rpki-client