Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cxIhCV6xk6S68sQwN27WbldNC7U.roa
File: cxIhCV6xk6S68sQwN27WbldNC7U.roa (raw, json)
Hash identifier: t5/HiTnGVIrPL0VzmejOSb02HNu7kvsYthVF7h+ZXj0=
Subject key identifier: 73:12:21:09:5E:B1:93:A4:BA:F2:C4:30:37:6E:D6:6E:57:4D:0B:B5
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01982602118A5D8BF057BF03391183367B72
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cxIhCV6xk6S68sQwN27WbldNC7U.roa
Signing time: Sun 20 Jul 2025 04:05:26 +0000
ROA not before: Sun 20 Jul 2025 04:05:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213641
IP address blocks: 5.231.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 04:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:26:02:11:8a:5d:8b:f0:57:bf:03:39:11:83:36:7b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 20 04:05:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=731221095eb193a4baf2c430376ed66e574d0bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e4:d0:56:cf:01:9a:6a:b7:c2:a7:3a:4a:18:
46:f9:98:c1:42:c2:e5:0d:50:5c:7c:20:13:ad:c5:
87:ca:f8:d5:a1:61:f5:25:10:03:c3:56:d8:6a:9b:
c9:41:5a:9a:49:81:59:b5:d8:7f:84:9b:35:01:7c:
31:c9:af:ff:9e:dd:17:e9:42:61:1d:c0:6d:8a:e4:
5a:38:6a:3a:76:d9:5d:20:20:b6:44:f2:dd:ed:00:
07:0a:e2:bf:52:15:72:c3:ae:61:eb:d4:97:69:63:
ae:19:4f:01:50:90:12:80:1c:d8:13:7c:6f:94:86:
e4:82:b5:b7:09:d1:84:24:d3:fe:b5:15:45:5a:3d:
15:17:71:7a:ca:99:6d:cc:ef:99:83:95:93:4d:5b:
17:00:21:65:87:ce:3f:5d:8f:0b:19:2b:fc:3f:b4:
4c:7e:ab:3c:86:e3:6e:16:68:13:fc:c7:c2:ed:d9:
c2:25:d5:62:2c:cf:88:a9:a7:3e:2f:8a:09:a0:40:
9f:1f:e3:61:76:29:11:6f:f9:b2:4e:a4:05:76:82:
20:86:90:95:1c:3a:1d:51:24:ce:f6:4b:94:52:89:
6c:9c:f5:41:15:ea:c0:d7:97:fa:1e:a6:ae:09:b1:
4e:f4:98:55:91:64:c3:2e:26:54:fb:98:dc:1f:52:
b7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:12:21:09:5E:B1:93:A4:BA:F2:C4:30:37:6E:D6:6E:57:4D:0B:B5
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cxIhCV6xk6S68sQwN27WbldNC7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.252.0/24
Signature Algorithm: sha256WithRSAEncryption
59:34:e7:f3:45:eb:a1:4d:7b:03:cb:42:7c:55:0d:bb:03:d5:
8c:9c:08:70:a1:56:54:17:1a:c8:5c:fb:a2:d0:da:93:22:8c:
46:ac:86:76:17:90:d6:34:ce:c4:8f:1d:bc:eb:87:77:39:2a:
2d:6c:ec:a5:3d:49:0d:fe:7b:94:e5:c0:ed:04:e8:45:38:0d:
a0:a4:77:17:a5:a6:59:51:ca:a1:21:67:ea:2a:e0:a7:ec:2b:
04:63:71:9f:e4:7c:6a:e4:17:28:a4:85:6f:a3:ab:32:bc:3e:
69:98:6c:80:67:9a:2e:e2:fc:6a:71:88:c9:c0:ae:68:79:c3:
81:d0:d9:8d:5a:17:d3:74:ae:74:95:65:03:fb:42:35:b3:7b:
51:97:6d:07:5a:ec:19:d3:8e:25:3f:dc:14:e0:22:1c:43:d1:
87:34:29:aa:61:65:e3:3e:f8:eb:ce:ab:29:33:53:bf:74:fa:
fd:21:d6:16:e0:71:42:87:73:e1:aa:fc:1a:19:76:39:5d:a4:
03:99:e0:74:12:d7:5e:b7:68:12:3f:2c:0b:db:13:3b:97:c2:
06:59:36:9a:3b:88:4b:e2:f9:0a:fc:7d:f5:e1:18:23:d5:d1:
c8:53:09:d7:7c:4f:9e:a1:ed:10:56:02:05:38:13:f4:3c:62:
d3:59:6d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:54:58 2025 by rpki-client