Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cvlsJp6rYz5nsaqCBryUr8r7Hto.roa
File: cvlsJp6rYz5nsaqCBryUr8r7Hto.roa (raw, json)
Hash identifier: GmmZa1aIKTMoJVSbzK8XiJUBmIjTJUEj16EY6Mo6fSQ=
Subject key identifier: 72:F9:6C:26:9E:AB:63:3E:67:B1:AA:82:06:BC:94:AF:CA:FB:1E:DA
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0197CE2DE17B81319EA3FA12E9D753654832
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cvlsJp6rYz5nsaqCBryUr8r7Hto.roa
Signing time: Thu 03 Jul 2025 02:46:42 +0000
ROA not before: Thu 03 Jul 2025 02:46:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211780
IP address blocks: 5.231.26.0/24 maxlen: 24
5.231.57.0/24 maxlen: 24
5.231.73.0/24 maxlen: 24
5.231.75.0/24 maxlen: 24
89.144.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:2d:e1:7b:81:31:9e:a3:fa:12:e9:d7:53:65:48:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 3 02:46:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72f96c269eab633e67b1aa8206bc94afcafb1eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:76:1f:38:11:a7:80:3d:c0:e3:f4:ed:50:71:
4d:8b:59:c5:0d:15:1f:22:1d:69:27:4b:8e:eb:5c:
d0:8f:a8:b9:b1:3a:0e:90:c0:e2:4a:4e:0e:13:8b:
4d:0f:21:25:02:9b:dd:52:9d:39:6e:56:6f:25:39:
f8:ff:d0:5a:0c:9d:9c:86:0f:de:a7:d2:44:d6:d0:
fd:50:d5:9e:20:ad:80:b8:9e:99:73:26:56:d1:a6:
1b:bd:6a:87:27:6c:33:0e:b7:69:e1:3e:41:40:38:
38:0a:12:18:4e:8a:3b:57:05:84:b7:7e:1f:58:97:
97:97:28:38:9b:16:3d:ed:db:37:7f:91:f4:2e:b7:
9d:c3:24:bf:d0:8d:a6:5f:93:63:d3:8c:9b:bd:02:
77:fd:44:00:d7:37:ed:ed:67:e9:0d:eb:64:c4:c2:
16:ec:e2:26:0a:90:98:c1:b3:e6:4a:ef:0f:8a:fe:
3f:2f:8b:41:50:af:bf:ac:ef:a3:30:e9:26:df:23:
ce:fe:bf:27:42:91:58:67:40:41:68:e7:ed:2f:11:
be:ff:17:49:29:74:3b:07:1c:54:6f:f6:fc:d4:08:
ef:77:cf:3c:a0:05:5e:6f:d4:93:78:3e:8a:2c:89:
ee:84:03:f7:59:54:fa:0d:79:b4:ad:5a:d9:61:43:
60:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F9:6C:26:9E:AB:63:3E:67:B1:AA:82:06:BC:94:AF:CA:FB:1E:DA
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cvlsJp6rYz5nsaqCBryUr8r7Hto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.26.0/24
5.231.57.0/24
5.231.73.0/24
5.231.75.0/24
89.144.3.0/24
Signature Algorithm: sha256WithRSAEncryption
29:9c:90:ac:e4:c9:35:0a:55:1e:ab:e6:a9:81:15:06:d2:53:
ee:cc:fb:73:81:2b:0c:5d:6e:c2:b0:19:18:f9:8c:30:40:93:
26:32:51:19:40:3b:e8:9a:a0:b7:69:ce:8d:3f:01:5b:c4:a3:
f6:0f:7b:53:a4:32:a0:7a:9b:1a:4b:89:74:79:98:2e:f2:98:
4d:70:23:08:8a:6b:77:e6:93:12:32:85:da:c7:5c:23:92:b0:
75:d7:a9:df:81:67:77:9f:a9:ab:e5:47:bf:4a:62:1f:c3:77:
3a:fc:94:06:ce:61:97:52:01:fa:8e:ef:b1:77:13:a7:01:3a:
a6:7f:2a:04:7b:8c:6b:65:d0:c4:7a:ff:2c:fd:73:93:b9:9a:
72:f8:91:e8:4c:e2:85:60:5a:7a:5b:93:2d:6f:7e:b4:1d:78:
b6:95:ea:39:80:65:09:e9:6f:41:2e:94:c9:54:8f:46:7c:70:
fe:0d:c0:11:ad:eb:8a:bc:1b:c1:46:ef:31:0e:8d:7f:93:76:
52:29:c3:ea:20:01:45:13:9d:01:9a:4b:c8:f4:98:cc:63:89:
29:0d:f3:74:22:02:fc:4e:ac:85:8c:8b:9c:07:55:3b:ee:be:
1b:5b:39:04:25:1d:df:ad:92:2f:62:94:7f:96:80:bc:61:96:
66:06:aa:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:05:07 2025 by rpki-client