Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3aRmLFmC6BX0XkCy58NqOrIyCQk.roa
File: 3aRmLFmC6BX0XkCy58NqOrIyCQk.roa (raw, json)
Hash identifier: ejMWDlIvoBQgKLsUCzcFwbO2HsIy/iyXbk/aTfR+PWQ=
Subject key identifier: DD:A4:66:2C:59:82:E8:15:F4:5E:40:B2:E7:C3:6A:3A:B2:32:09:09
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019908A41BA58F7D3933845F33AC70865E7D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3aRmLFmC6BX0XkCy58NqOrIyCQk.roa
Signing time: Tue 02 Sep 2025 04:16:36 +0000
ROA not before: Tue 02 Sep 2025 04:16:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 146943
IP address blocks: 5.175.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:08:a4:1b:a5:8f:7d:39:33:84:5f:33:ac:70:86:5e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 2 04:16:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dda4662c5982e815f45e40b2e7c36a3ab2320909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c1:31:24:f2:8d:df:9e:86:cb:cc:b3:5a:28:
2d:9d:69:fa:c4:f0:5f:0f:eb:41:dc:82:7c:9c:51:
f3:6d:80:a8:86:e0:52:92:44:9d:7b:48:45:ae:eb:
46:c0:87:72:39:d2:68:8b:67:d6:87:52:53:aa:5d:
76:f2:f3:1c:3d:39:48:a2:b4:bf:bb:45:ea:22:9d:
83:de:bd:d1:f5:1b:ea:57:44:a5:3e:9f:4c:c1:50:
1d:94:4e:f3:e5:6b:88:a2:85:39:2a:2a:f9:44:cc:
5a:37:0f:40:1a:12:91:f6:59:61:36:51:f9:13:2d:
53:34:44:a6:ab:8f:df:59:a3:c1:af:77:4e:2a:07:
62:ef:67:0c:82:f2:26:d1:62:5e:d4:e3:c0:60:a4:
be:33:ab:1a:72:92:82:99:be:c3:ff:5b:85:76:9f:
24:ed:64:b4:23:95:db:ab:f7:8c:9a:04:c6:4a:b1:
37:2f:d4:d6:c2:08:ee:1a:46:ac:c7:6d:6a:d9:9b:
3a:51:73:e0:9a:8e:ce:ff:b9:54:15:db:79:3a:76:
c9:50:0b:f2:8d:58:50:3d:c0:fd:bf:58:05:90:75:
8b:05:62:c1:6d:05:39:4b:f4:63:00:ed:6c:f3:b2:
70:93:92:4d:65:4e:5f:1e:9c:1c:e1:56:9a:d8:09:
ff:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A4:66:2C:59:82:E8:15:F4:5E:40:B2:E7:C3:6A:3A:B2:32:09:09
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3aRmLFmC6BX0XkCy58NqOrIyCQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.139.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:2b:76:24:01:6e:a0:a0:02:b0:05:9f:5c:da:69:40:8f:01:
6b:6f:6c:31:94:5c:8a:9f:16:b7:3f:74:46:d0:08:48:57:04:
b8:34:8f:b2:bb:50:c9:a8:d8:e0:9c:70:33:8d:98:e7:dd:84:
24:0b:95:c3:fc:cc:b3:54:92:13:f0:a7:7d:4d:d0:b7:10:a5:
17:22:01:9f:7f:e8:6b:f7:8f:fd:36:95:b2:92:ae:c8:6f:df:
75:93:2a:4f:3a:1c:a0:f0:a3:c2:78:a2:f8:a2:a1:f6:d4:34:
f3:71:73:98:e2:b9:85:49:2e:fe:e8:fc:2c:36:8f:39:1b:55:
df:b1:37:88:e6:cc:8c:e9:ab:1f:45:cd:74:bc:ad:b1:d6:93:
5f:20:73:3f:86:09:c0:c7:c8:27:74:fd:aa:f0:65:3d:f2:73:
c9:f3:02:13:65:53:fe:97:23:c1:49:bb:55:85:e0:08:e7:c6:
ca:5f:7f:0b:99:a4:a2:5b:47:be:f4:ee:d4:63:5a:01:c9:e7:
7e:f9:cb:a0:2e:e4:12:c5:af:e8:9e:a2:d5:41:85:e4:36:b2:
a8:4d:dd:22:f5:ff:7a:fe:6e:ee:e2:a1:c7:fd:13:45:b1:20:
78:f2:5b:6e:4c:ca:75:ba:18:f1:67:df:df:08:67:23:c2:a3:
cb:d7:97:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 08:06:06 2025 by rpki-client