Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IOdN3e_CEJvIQjmdDF3fsxiOeG8.roa
File: IOdN3e_CEJvIQjmdDF3fsxiOeG8.roa (raw, json)
Hash identifier: 1RkcfpvN+XfusG7qs5eprUCNtPzxg46xVIqzH5vNm34=
Subject key identifier: 20:E7:4D:DD:EF:C2:10:9B:C8:42:39:9D:0C:5D:DF:B3:18:8E:78:6F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01990DC23B70F78E11F089B12D09E65D1AC7
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IOdN3e_CEJvIQjmdDF3fsxiOeG8.roa
Signing time: Wed 03 Sep 2025 04:07:36 +0000
ROA not before: Wed 03 Sep 2025 04:07:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211780
IP address blocks: 5.231.26.0/24 maxlen: 24
5.231.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0d:c2:3b:70:f7:8e:11:f0:89:b1:2d:09:e6:5d:1a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 3 04:07:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20e74dddefc2109bc842399d0c5ddfb3188e786f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:88:fc:1a:2e:83:fe:9f:15:88:9b:8e:28:1d:
bc:c3:ab:4f:08:7a:17:bb:f7:ba:81:e3:fd:e4:d9:
da:63:47:e9:5a:ba:08:2a:78:5a:37:3a:c3:85:c8:
ad:fb:70:9e:5f:04:4a:9d:f0:5f:79:68:a7:ee:c1:
6f:c8:1a:5d:29:08:33:96:88:ce:6b:1c:07:91:66:
7a:c8:ac:b9:74:be:f9:a8:27:0f:06:59:b6:58:77:
da:28:35:f9:a9:40:0b:09:90:25:59:e0:20:33:fc:
9f:d9:9d:72:f9:47:b4:f8:09:ae:f2:d6:fc:41:1b:
e5:c0:d1:75:0f:1d:14:b5:e1:35:2e:6f:a6:f3:ac:
65:8c:ab:36:27:25:1c:72:5b:f4:45:0d:ca:36:66:
4d:fd:0f:ea:b3:4a:5d:0e:79:21:56:18:6b:ca:a3:
45:ab:e8:45:12:12:a3:d8:b5:1c:72:91:86:b8:00:
e1:ee:88:5e:7d:8b:a4:ca:17:36:f0:3e:1a:ef:06:
3a:57:52:a2:de:2b:6c:60:48:52:ce:78:10:88:55:
cd:e6:68:f3:40:a6:db:b9:f7:88:75:0c:65:c7:7d:
ec:b0:a3:9e:a2:bb:1e:57:95:7d:27:ba:49:da:0a:
d0:92:62:0e:19:a9:0f:8d:fd:9c:20:9e:dc:c1:1d:
b8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E7:4D:DD:EF:C2:10:9B:C8:42:39:9D:0C:5D:DF:B3:18:8E:78:6F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IOdN3e_CEJvIQjmdDF3fsxiOeG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.26.0/24
5.231.57.0/24
Signature Algorithm: sha256WithRSAEncryption
25:6a:76:fc:0b:11:b1:02:5d:b6:d5:cc:0f:ac:4b:0f:2c:64:
79:56:fb:c9:20:bf:3d:7a:d8:33:2d:0e:cb:a6:95:2b:d2:02:
64:d2:72:53:27:26:90:99:d4:4c:1c:6b:7e:ae:3e:dc:df:83:
11:8d:74:de:a3:43:34:7e:0e:2f:35:65:6a:af:d0:4e:d4:7e:
54:75:06:b6:e1:b0:a7:ac:15:0e:59:9b:22:25:fa:d9:b8:d4:
88:b4:8b:b8:f5:80:1d:5b:3e:fa:da:5a:2d:72:03:60:82:c8:
c7:21:a6:7e:8f:2d:fc:c6:f3:c2:97:d1:8f:f5:96:d7:61:c8:
ff:58:5d:cc:fc:7b:ac:06:4f:a3:79:98:46:ee:46:b4:0a:70:
24:16:88:35:0c:5e:52:48:b8:22:22:b4:b5:3a:71:7b:19:89:
16:56:fb:fa:a4:18:80:9d:26:1a:27:e2:11:fa:3f:c4:93:5d:
14:b5:e7:a7:7e:40:00:e9:59:f0:2e:af:c2:dc:1c:07:50:0b:
e3:e4:69:5d:78:91:99:a2:b6:f4:84:48:e7:3f:82:63:83:a3:
ae:f0:f6:32:fb:34:0f:ae:de:63:e9:cc:ca:29:7d:0b:9e:26:
00:95:81:53:7d:99:2a:cf:b6:bb:4b:59:ad:0d:d7:d2:1c:a1:
66:09:d6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 08:06:10 2025 by rpki-client