Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/D51W1BFVwWi16I2U9l8SEjrjqH0.roa
File: D51W1BFVwWi16I2U9l8SEjrjqH0.roa (raw, json)
Hash identifier: HqYvqZLy2+UwptKCEaKkDH8NZdOTiA9dxADEf2pj3X8=
Subject key identifier: 0F:9D:56:D4:11:55:C1:68:B5:E8:8D:94:F6:5F:12:12:3A:E3:A8:7D
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0197D6C325F3719C755FD8C7DAF6F881B4B3
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/D51W1BFVwWi16I2U9l8SEjrjqH0.roa
Signing time: Fri 04 Jul 2025 18:46:42 +0000
ROA not before: Fri 04 Jul 2025 18:46:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215120
IP address blocks: 5.175.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d6:c3:25:f3:71:9c:75:5f:d8:c7:da:f6:f8:81:b4:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 4 18:46:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f9d56d41155c168b5e88d94f65f12123ae3a87d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:dc:a5:71:01:9b:67:62:c7:46:d4:d8:cf:41:
14:74:c5:7f:b6:bf:94:fd:81:1c:c8:0c:bb:7b:26:
51:7d:32:c0:ba:c4:71:e0:62:5f:c9:fd:96:ae:d7:
6a:94:b0:f7:2d:5a:a6:19:8a:3a:1f:cc:df:c4:c7:
fc:41:c6:a6:45:af:be:27:e2:2c:45:cc:03:55:56:
1f:60:f0:a4:c0:c6:be:16:73:49:0e:f4:c5:47:a5:
41:f6:b8:ed:3d:85:0f:3d:bf:76:6a:1a:54:2b:c6:
72:28:94:9d:f6:c2:81:46:34:0d:a2:3f:bb:82:5d:
45:de:76:17:d7:9c:19:cb:bf:5b:97:b8:d0:0f:cd:
a2:43:2e:5b:8c:45:b3:82:b5:ff:3d:7c:f3:04:1a:
04:fa:5a:b0:3f:27:ea:ac:10:3d:bf:da:b2:24:90:
06:63:66:24:0f:6e:ff:c1:e3:b1:24:2b:05:39:0d:
fa:82:fc:df:6a:3a:4d:ae:d6:cf:aa:70:9f:4c:d3:
28:84:2e:c4:fb:ed:0a:b4:35:fb:fe:16:ca:69:69:
de:a5:25:6b:8e:89:f3:b5:1e:7b:f9:d7:d2:8e:84:
6c:ff:48:71:97:16:34:e9:9c:8f:2b:77:9e:9d:21:
1a:3f:12:0f:00:c5:6b:07:2f:74:75:8c:1e:64:af:
b1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9D:56:D4:11:55:C1:68:B5:E8:8D:94:F6:5F:12:12:3A:E3:A8:7D
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/D51W1BFVwWi16I2U9l8SEjrjqH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.236.0/24
Signature Algorithm: sha256WithRSAEncryption
44:85:d0:76:0d:d9:c3:8e:32:39:8c:d8:49:cd:c0:22:84:27:
52:51:49:fb:26:e1:17:1a:1b:64:8a:53:08:af:3e:69:34:c9:
f5:70:b8:0f:d2:6e:be:75:21:37:47:48:6b:14:e8:a9:af:5c:
2c:0d:1b:d4:ec:09:73:d3:09:f8:a0:17:ad:4b:88:14:a6:69:
4e:d0:ba:3e:53:f5:1c:30:a2:a8:dd:b8:e3:79:bb:d6:af:40:
4c:f1:e8:5c:79:6a:dd:56:ca:68:ee:e4:27:f1:82:22:47:ae:
ca:8b:31:73:98:b8:71:75:52:33:e5:4d:94:73:eb:96:0f:4d:
2c:e4:7f:4d:88:1b:fb:c7:9a:68:39:a1:2e:16:34:fd:58:53:
95:24:9b:14:86:40:c8:d3:43:6d:4f:a7:61:37:03:69:00:9e:
83:98:16:27:12:34:e9:15:fe:e0:57:ef:d7:6e:96:59:6e:de:
48:a5:db:87:7a:cf:2f:05:a7:75:5e:e7:fb:3d:5a:c4:e9:fd:
d1:0e:53:0e:b2:f4:fc:e7:17:a9:d6:9c:6b:3b:ef:73:0a:f0:
28:c5:14:32:2f:f1:05:00:ec:28:44:1a:74:b8:96:3b:e4:4e:
44:8d:36:87:62:ff:4a:5b:13:0c:16:89:41:a4:6d:3d:3a:7e:
25:3b:80:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 13:10:14 2025 by rpki-client