Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/5rXL0JsGBTdFgmilGhjy5ibNnPE.roa
File: 5rXL0JsGBTdFgmilGhjy5ibNnPE.roa (raw, json)
Hash identifier: CGdxIHgH+xiIc8F/6l7wNpGL/7q47aq5LVwWjCCh0FI=
Subject key identifier: E6:B5:CB:D0:9B:06:05:37:45:82:68:A5:1A:18:F2:E6:26:CD:9C:F1
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01995C859AA3A07CEDE269862C4D810F71B4
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/5rXL0JsGBTdFgmilGhjy5ibNnPE.roa
Signing time: Thu 18 Sep 2025 11:11:23 +0000
ROA not before: Thu 18 Sep 2025 11:11:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 62.72.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5c:85:9a:a3:a0:7c:ed:e2:69:86:2c:4d:81:0f:71:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Sep 18 11:11:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6b5cbd09b060537458268a51a18f2e626cd9cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:31:b9:b0:0f:b6:9f:e6:37:14:26:90:25:4e:
81:bc:07:0f:c9:62:d4:92:90:7a:e1:df:cc:d1:00:
00:51:f1:2a:32:a2:02:32:8e:45:3b:f3:53:c3:e9:
14:7c:47:36:fe:ee:ce:75:af:1a:b2:ce:74:bc:bd:
18:a0:e1:8c:f0:69:12:00:18:cb:04:94:75:34:55:
95:82:e7:ac:4e:fc:71:b3:34:42:aa:f3:0b:11:8c:
d0:9c:9c:21:0d:52:96:19:8b:60:7e:d1:36:e0:6b:
3c:14:35:6e:20:62:e3:17:3a:17:90:71:bb:c5:d9:
5e:d5:d2:d3:c5:3b:e8:c5:40:c0:ad:97:65:27:4b:
4c:20:f4:7a:ac:02:78:f4:e3:d1:70:ce:a3:7a:e0:
9d:08:cd:8c:5f:7e:d7:72:a0:ed:a8:d6:a2:58:72:
06:6a:71:f2:1b:4e:84:93:43:1c:d7:0a:80:bb:27:
70:88:93:a4:8f:02:a2:ac:05:4f:b0:7e:ea:34:79:
1c:46:e5:71:65:28:c7:ba:3d:e9:91:0e:c8:b4:b7:
db:bd:b2:b9:2d:18:7d:27:b3:d4:1b:ac:b1:8f:7a:
2c:78:32:04:f8:cf:2e:8c:c0:1f:25:82:b5:4d:27:
03:4a:81:3c:b3:e5:98:a9:b8:f4:08:1d:00:39:bb:
b9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B5:CB:D0:9B:06:05:37:45:82:68:A5:1A:18:F2:E6:26:CD:9C:F1
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/5rXL0JsGBTdFgmilGhjy5ibNnPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.191.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:40:cd:67:07:f2:87:45:c5:e4:72:51:e9:3d:9b:9f:a3:05:
44:d4:57:33:bf:b1:06:f2:15:90:b2:77:c8:ff:79:ea:69:0b:
cf:6d:ba:58:c6:2c:94:9c:52:e4:f4:eb:64:f8:6c:1d:ca:61:
5e:ca:10:89:9a:31:4d:bc:7a:0d:1e:b3:a2:e6:f5:c5:f0:cd:
c0:af:64:de:1f:07:4a:26:f4:80:f4:3a:f1:23:59:1e:5d:f8:
61:8b:b9:0a:5b:eb:53:9d:26:d4:0b:80:70:c0:82:71:03:b4:
5d:12:7a:5d:7d:03:c1:7a:6d:cb:fe:61:6a:8b:b4:2e:30:1f:
b7:d1:a9:46:08:2b:7f:85:6a:29:84:37:d8:5c:b6:3d:4f:54:
fd:da:d5:96:6c:cf:57:dd:32:2d:9d:19:ed:1b:bd:79:27:5c:
ac:ac:2a:c8:42:b1:53:a9:e3:00:02:79:29:e8:5d:e6:35:f0:
7e:91:8b:f5:76:6e:8c:09:b0:90:4f:76:bb:28:20:56:3e:7e:
76:38:69:6d:e5:c1:e3:b2:a9:e5:a1:c2:3d:b9:bf:ff:68:b1:
ff:79:4d:47:20:77:f8:48:7e:8a:d0:44:1f:60:19:e4:89:2e:
11:01:dc:05:6f:04:22:1c:ce:0d:22:50:7e:47:05:cb:dc:f6:
95:67:f5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:05:48 2025 by rpki-client