Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/l-5i9oAqkZlj6BH6-zlLgCi-M8A.roa
File: l-5i9oAqkZlj6BH6-zlLgCi-M8A.roa (raw, json)
Hash identifier: 2XZCzXlEs8Y4V/FtjrmGLpKeYJtdxgukjLa0vF1G5q4=
Subject key identifier: 97:EE:62:F6:80:2A:91:99:63:E8:11:FA:FB:39:4B:80:28:BE:33:C0
Certificate issuer: /CN=53129d048deb2e0bf62271399a090b9010160b39
Certificate serial: 0199EE68553BF2F4119D093F57BBF092CC48
Authority key identifier: 53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/l-5i9oAqkZlj6BH6-zlLgCi-M8A.roa
Signing time: Thu 16 Oct 2025 19:03:58 +0000
ROA not before: Thu 16 Oct 2025 19:03:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 62.233.51.0/24 maxlen: 24
2001:3580::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ee:68:55:3b:f2:f4:11:9d:09:3f:57:bb:f0:92:cc:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53129d048deb2e0bf62271399a090b9010160b39
Validity
Not Before: Oct 16 19:03:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97ee62f6802a919963e811fafb394b8028be33c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:10:e4:4f:23:5a:c4:d4:e4:6b:8d:7f:06:75:
e7:76:c9:40:5a:9a:26:15:fa:25:e1:b8:50:31:4c:
4f:84:f5:bd:65:94:c3:cd:1e:80:a7:2a:13:33:53:
ee:5b:0e:21:e5:f4:b6:cb:46:63:65:bf:0d:98:4b:
b7:e2:21:8d:96:de:1d:aa:b8:f9:9e:04:5c:77:f1:
ca:2f:1b:5a:f8:7a:ab:4e:ec:12:04:8c:c4:f4:a5:
d6:67:85:7c:18:df:4d:d0:08:2b:9b:d7:47:b5:e5:
ca:5c:90:18:5f:b0:23:7a:36:07:b2:1e:22:08:55:
ee:d3:6a:18:4c:42:d5:e8:73:e8:22:25:28:e6:55:
5c:1e:73:67:f1:f9:a4:70:08:06:c6:ae:99:d2:0c:
c7:8e:ec:d1:69:b4:2b:53:25:59:c7:91:7a:fe:a8:
1c:b8:cc:b7:ed:00:62:aa:6e:6f:a4:70:37:1d:69:
4f:ce:cc:64:a5:45:17:80:24:25:b5:0c:2a:e6:ed:
cd:ea:4f:b8:b1:58:73:a4:2b:8a:50:26:7b:9f:f1:
41:a9:1e:c9:b4:c3:21:ad:f7:3d:0f:b0:8c:3a:25:
b8:71:b4:42:b4:55:da:d8:01:7a:ec:d6:8b:60:c5:
a7:86:7e:ad:32:1e:be:8d:bf:df:01:11:a2:9a:28:
a0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EE:62:F6:80:2A:91:99:63:E8:11:FA:FB:39:4B:80:28:BE:33:C0
X509v3 Authority Key Identifier:
keyid:53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/l-5i9oAqkZlj6BH6-zlLgCi-M8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.51.0/24
IPv6:
2001:3580::/29
Signature Algorithm: sha256WithRSAEncryption
2d:1d:83:f5:f2:eb:74:ff:41:3b:3d:ac:4f:8d:19:90:24:56:
6d:70:cf:34:80:f8:7f:e4:c2:e2:1c:8c:2b:b2:b8:bc:74:c7:
de:f7:62:de:61:c4:02:41:8a:19:90:c2:94:da:66:f3:d0:6a:
e0:3e:87:84:a7:cc:2d:ce:62:81:e1:0c:30:75:1b:20:e0:de:
b8:67:28:11:2d:7f:ea:97:b3:27:45:44:a9:3f:13:e2:b1:9b:
44:7c:d4:ae:22:a3:68:1b:de:bc:23:bd:fd:4f:3b:bc:5a:00:
df:3a:a4:cc:6a:30:39:78:d6:46:79:2b:c5:25:46:54:28:40:
07:04:b7:ec:1d:15:eb:e5:4d:d7:cf:7a:fc:f5:7d:90:c4:7c:
7e:22:c6:00:9a:2b:7b:7b:e2:26:c8:60:fb:14:d1:c1:9d:16:
69:79:4b:24:85:52:98:74:bb:45:0a:f3:29:ba:6e:ed:52:e9:
8e:50:81:29:cc:b3:6a:b9:f1:b0:ca:ca:30:0d:c9:23:fd:9c:
4b:92:03:23:5c:04:fa:8a:f4:cc:3c:64:96:0d:54:63:3e:c7:
0d:d9:5c:ee:38:91:52:8f:19:fc:d9:d8:7b:1e:87:68:95:dc:
59:f2:8f:aa:d4:21:76:c9:ac:fa:23:f5:27:bb:9c:cf:9f:62:
f7:f7:3a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:09:04 2025 by rpki-client