Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/5QRzBx43AV-rVFibUIkxX67tvbI.roa
File: 5QRzBx43AV-rVFibUIkxX67tvbI.roa (raw, json)
Hash identifier: gayo6a2ZkLUJa9zMEpLRBH3Ls/m1iB/K2c1cMPBX4/Y=
Subject key identifier: E5:04:73:07:1E:37:01:5F:AB:54:58:9B:50:89:31:5F:AE:ED:BD:B2
Certificate issuer: /CN=3a4945e46764029d2581d820c3373fa445855539
Certificate serial: 019971198BDE7FBA8B626FCC19279321C070
Authority key identifier: 3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/5QRzBx43AV-rVFibUIkxX67tvbI.roa
Signing time: Mon 22 Sep 2025 11:05:23 +0000
ROA not before: Mon 22 Sep 2025 11:05:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 62.244.19.0/24 maxlen: 24
62.244.40.0/24 maxlen: 24
62.244.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:71:19:8b:de:7f:ba:8b:62:6f:cc:19:27:93:21:c0:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a4945e46764029d2581d820c3373fa445855539
Validity
Not Before: Sep 22 11:05:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e50473071e37015fab54589b5089315faeedbdb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7e:80:0a:7d:41:b0:96:d5:a3:53:69:5f:c8:
4f:35:e6:cc:45:74:42:2b:fa:4a:43:39:51:11:bb:
4f:58:7d:6b:98:b9:39:ec:92:18:00:19:55:c7:d3:
11:68:ed:37:9e:8c:df:b7:1b:4b:13:d3:e2:1b:58:
a8:5d:a3:4b:7c:08:9d:15:00:42:0e:a5:4b:b0:1a:
77:a0:b9:2c:0f:96:d3:32:34:a7:6e:e0:16:c2:b4:
2a:0e:40:fb:76:6f:1c:35:af:2d:9f:9f:9a:b1:46:
76:16:6e:f9:02:8e:9f:1e:f0:a0:33:19:2c:7c:0f:
46:0f:2c:da:23:8a:5a:7b:81:9c:8d:06:c7:b1:19:
7d:bc:35:39:3d:99:01:25:b4:4c:6d:1c:9c:fc:9c:
a7:79:c2:00:86:f1:90:de:90:dd:cb:65:f0:8b:9a:
c3:3b:88:06:e2:af:3a:d0:75:c6:90:ad:41:e7:c0:
45:e9:c0:2e:89:bc:23:41:74:bc:d0:86:cb:fb:26:
31:9d:06:ba:0d:ea:2d:e9:d5:f7:55:ca:4a:f4:34:
2e:cc:3e:11:94:bf:5b:53:c9:6a:a4:7a:ef:29:ec:
b2:39:92:ce:67:a6:b4:57:80:78:c8:f2:3c:fe:ce:
a5:6b:bb:8e:fe:c2:0b:c5:ca:94:b2:76:88:78:b7:
c4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:04:73:07:1E:37:01:5F:AB:54:58:9B:50:89:31:5F:AE:ED:BD:B2
X509v3 Authority Key Identifier:
keyid:3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/5QRzBx43AV-rVFibUIkxX67tvbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.244.19.0/24
62.244.40.0/24
62.244.63.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:bc:86:29:7e:31:1d:2d:bc:02:21:22:1d:cf:be:f4:ba:d6:
d3:80:48:da:45:fb:40:9a:d4:f7:6c:f6:31:65:71:d0:91:14:
c0:5f:e9:e5:57:01:de:fa:ea:62:7a:b3:16:b8:35:de:1a:95:
cd:e6:ca:ec:49:f5:32:dc:da:99:08:c3:e2:74:c4:ec:8f:4c:
8d:92:ad:d7:a6:ea:7c:0b:ac:a9:f2:eb:e0:70:50:6e:41:f2:
01:12:7e:57:14:94:f5:c9:24:1f:9d:78:40:6c:34:f6:cf:65:
0f:3f:43:c1:86:d2:17:86:f0:83:01:65:96:4c:9c:f5:cd:05:
3f:47:f0:9d:9b:13:3e:62:a3:c3:ae:24:d9:cf:3b:90:77:e9:
34:4e:b6:83:ca:ef:c3:79:e1:db:ef:0d:d7:70:21:fa:05:e4:
51:5f:7f:ef:50:b3:85:f7:cd:28:2c:4a:92:c9:83:1f:f3:65:
71:16:3a:6b:dd:e2:da:89:8f:24:77:c2:b2:18:4e:cf:d1:6d:
85:54:48:f6:e4:34:cd:2a:6d:6c:22:75:54:10:a0:11:16:7b:
e6:da:dd:63:1f:c9:13:92:6e:d9:27:1e:a5:33:a4:ba:4b:5c:
37:00:04:ae:31:27:1c:8b:52:eb:ec:ca:ad:25:ee:f7:c3:80:
98:81:96:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:55:00 2025 by rpki-client