Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/A5DsHdxjGronY1SlJmY-avOq7l0.roa
File: A5DsHdxjGronY1SlJmY-avOq7l0.roa (raw, json)
Hash identifier: TRbOBB2FpSmRLzGWMLyHgzyzq9dao9eG06ouQ8rU7ko=
Subject key identifier: 03:90:EC:1D:DC:63:1A:BA:27:63:54:A5:26:66:3E:6A:F3:AA:EE:5D
Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial: 0197E50081D18B2BF5F4BACE725AFD8FB09D
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/A5DsHdxjGronY1SlJmY-avOq7l0.roa
Signing time: Mon 07 Jul 2025 13:08:24 +0000
ROA not before: Mon 07 Jul 2025 13:08:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 84.239.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e5:00:81:d1:8b:2b:f5:f4:ba:ce:72:5a:fd:8f:b0:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
Validity
Not Before: Jul 7 13:08:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0390ec1ddc631aba276354a526663e6af3aaee5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c8:57:0c:93:a5:0a:c4:99:62:a4:c3:db:f0:
cc:01:94:4c:34:72:8f:61:fa:03:f6:be:66:bb:f3:
0e:af:6f:2b:5f:e4:ee:19:04:8a:51:31:54:4c:65:
a4:09:61:30:60:22:a9:3d:16:bf:f5:d4:f2:6e:4d:
88:05:fd:dd:a1:40:8d:27:4b:c0:dd:63:fe:20:a7:
36:02:19:d0:df:65:51:38:1a:f4:40:97:18:32:9a:
2e:f8:ba:6c:c2:80:27:5b:40:32:73:48:33:a9:8d:
18:eb:71:5f:b1:e0:14:9e:e7:4f:bd:62:7d:a9:83:
9c:3e:14:e6:fe:c0:c0:ad:32:f3:bf:03:98:d5:e7:
f6:d5:39:a8:fc:c7:37:a2:0b:f2:c8:9c:91:e1:2c:
6a:0f:8b:a5:95:0b:7d:26:ff:93:47:0f:7c:6f:85:
be:78:1f:82:df:48:6d:0d:39:c1:94:c0:0d:23:d4:
65:e3:40:da:b6:83:e2:e0:e5:f7:34:de:44:4b:53:
79:ab:fc:be:7e:47:d5:4b:6b:4f:86:22:62:73:b5:
c7:fe:3d:30:01:d1:f2:70:59:5a:7d:3c:b8:cc:10:
a4:90:98:b0:c7:29:b6:0b:36:7e:7d:67:c5:ec:88:
33:d7:97:f8:9e:43:5d:6e:f4:a3:dc:12:ca:5c:9f:
41:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:90:EC:1D:DC:63:1A:BA:27:63:54:A5:26:66:3E:6A:F3:AA:EE:5D
X509v3 Authority Key Identifier:
keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/A5DsHdxjGronY1SlJmY-avOq7l0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.239.62.0/24
Signature Algorithm: sha256WithRSAEncryption
88:3b:88:1a:77:5a:3e:ad:21:7b:7c:f2:d9:80:66:7e:83:55:
d1:a3:60:f6:03:c9:4e:aa:ac:24:bf:b0:03:94:ae:7f:07:6a:
3b:ef:6b:86:36:36:87:d7:9c:7d:2f:7b:69:ee:3a:5d:30:7f:
ed:f5:b5:8c:a5:b9:12:61:96:e4:43:23:9c:28:e1:23:0a:cb:
3f:1b:3a:ef:e4:10:b7:3c:5d:d9:32:ba:28:72:5f:30:ad:40:
65:4b:95:c6:56:a4:75:46:08:dd:bc:b7:91:9f:2d:9a:8e:e4:
c2:c2:0a:a5:8d:ca:ca:37:84:76:e0:36:a3:27:cc:30:51:a6:
83:77:fc:24:91:a3:6b:d1:39:a9:46:82:a2:4a:19:ce:8a:02:
09:91:5b:05:e4:92:17:18:08:5c:17:0c:15:17:5c:50:67:61:
38:f7:ec:eb:44:3d:ad:61:5f:c0:58:61:5b:89:69:c8:5c:17:
9d:91:b6:e8:ba:19:81:6a:db:b8:81:2b:31:37:07:cf:ff:9a:
55:43:ca:54:9c:bc:a0:42:a5:8b:94:00:7b:1e:da:d1:ad:d3:
51:32:ba:0f:31:16:c0:4a:f2:2e:b5:f6:75:75:53:ee:9f:bf:
32:df:4b:93:32:8e:c6:5e:9b:10:21:d7:e0:14:aa:70:9b:a4:
1d:53:4f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:44:05 2025 by rpki-client