Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/5hhLPsRpw9KA7o9wasEihzJSXoA.roa
File: 5hhLPsRpw9KA7o9wasEihzJSXoA.roa (raw, json)
Hash identifier: rLTFQz+FRyLZFkOs44WSv8ULNMp8Sfi16jOBN6XhYiE=
Subject key identifier: E6:18:4B:3E:C4:69:C3:D2:80:EE:8F:70:6A:C1:22:87:32:52:5E:80
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 01997FAF1142A0154FF166D2C9502532A258
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/5hhLPsRpw9KA7o9wasEihzJSXoA.roa
Signing time: Thu 25 Sep 2025 07:03:23 +0000
ROA not before: Thu 25 Sep 2025 07:03:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216138
IP address blocks: 141.226.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7f:af:11:42:a0:15:4f:f1:66:d2:c9:50:25:32:a2:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Sep 25 07:03:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6184b3ec469c3d280ee8f706ac1228732525e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b8:01:5a:36:7d:71:27:a7:07:ab:e0:81:ba:
74:e0:5a:2c:59:60:87:4c:83:f7:ff:79:d0:05:5c:
29:77:99:ad:d3:2a:4d:63:62:d2:39:55:8f:49:40:
a4:a4:09:00:e5:56:45:ef:92:31:cd:95:1a:3f:68:
75:0b:53:02:d4:cf:b6:60:82:bb:79:71:85:62:26:
1e:16:7f:3c:74:ef:83:e9:e4:49:1b:fc:5e:9d:4c:
d0:58:99:d2:af:e9:b0:2f:56:90:5a:b6:83:80:5f:
b4:51:3f:c8:70:cc:2a:46:e1:29:ed:82:88:f8:2e:
c2:98:1f:59:3e:64:03:78:df:0e:92:71:b7:81:c2:
21:ca:7e:96:e0:a6:b8:0f:d9:fd:fb:c9:7b:6c:3f:
fe:ac:dc:10:c2:30:12:1b:83:39:f4:22:c6:66:c8:
07:08:c2:24:83:b2:12:4f:da:b5:03:5f:2a:7b:c1:
7d:fd:0b:6b:fb:d0:03:51:55:b3:e6:8b:8c:cb:e5:
ee:dc:12:34:91:7e:66:a7:38:ac:9f:88:c8:47:42:
81:40:fb:f3:ab:4c:94:93:89:55:35:7e:7f:a0:fd:
8e:56:9c:c4:33:45:0a:95:a0:0d:66:5d:d7:c5:c7:
34:21:57:56:f1:17:c2:40:bc:f5:a8:96:7d:59:66:
1f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:18:4B:3E:C4:69:C3:D2:80:EE:8F:70:6A:C1:22:87:32:52:5E:80
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/5hhLPsRpw9KA7o9wasEihzJSXoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.245.0/24
Signature Algorithm: sha256WithRSAEncryption
89:88:8d:75:88:73:92:13:8a:1e:81:4d:1c:23:57:bf:ec:67:
e5:a1:76:57:97:01:af:be:ac:97:05:5b:df:0f:e2:27:ac:dc:
b1:11:e6:83:4b:1b:4b:0b:94:9e:34:54:84:58:f5:ff:9b:09:
aa:2e:5d:4d:98:70:51:e0:fe:d5:96:e4:de:b4:62:59:9f:91:
f7:66:16:4d:f1:91:29:0b:eb:7e:cb:ee:6d:32:6d:25:56:7a:
7d:5e:81:f1:27:84:86:d2:e0:59:b1:68:9b:94:50:34:0e:06:
0b:fa:75:93:5b:cb:a9:a1:06:73:9d:ba:77:9a:45:4e:9c:be:
d3:d9:c2:39:2a:b9:27:bf:75:83:ad:6d:b8:7a:8f:dd:b9:d6:
d4:b3:6b:36:3f:3e:f0:f6:16:d5:c5:7f:26:93:15:39:93:22:
eb:bb:61:92:a8:88:5c:2b:77:7a:c4:b4:23:49:a7:2f:6c:db:
0d:d2:1d:82:8d:da:d4:b2:32:52:80:43:7a:84:10:71:32:e4:
98:de:10:37:cc:95:15:2a:95:d8:b4:f0:b0:3d:c7:90:1a:1f:
bb:78:2e:39:dd:cb:46:e5:7e:de:26:f2:a1:6b:3f:ca:7f:c6:
20:67:fa:6e:73:f7:37:b4:de:46:86:a0:3f:7e:9d:cc:f6:0a:
4b:bf:53:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:04 2025 by rpki-client