Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/aGPe5_JCNHejy-ie6HJ2bPcbdxM.roa
File: aGPe5_JCNHejy-ie6HJ2bPcbdxM.roa (raw, json)
Hash identifier: IVgocNY0G0UdwEEvC65eRmXUOQeXSzrpv94lWiIjO/o=
Subject key identifier: 68:63:DE:E7:F2:42:34:77:A3:CB:E8:9E:E8:72:76:6C:F7:1B:77:13
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0199079F3007EBC2D0AF2E8D9ACAB88414D1
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/aGPe5_JCNHejy-ie6HJ2bPcbdxM.roa
Signing time: Mon 01 Sep 2025 23:31:37 +0000
ROA not before: Mon 01 Sep 2025 23:31:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213850
IP address blocks: 5.175.245.0/24 maxlen: 24
5.231.31.0/24 maxlen: 24
94.249.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:07:9f:30:07:eb:c2:d0:af:2e:8d:9a:ca:b8:84:14:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 1 23:31:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6863dee7f2423477a3cbe89ee872766cf71b7713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:90:11:a6:3f:f3:7e:68:b6:1e:1a:12:9d:78:
99:7b:2f:82:fa:7e:fe:0b:0f:ef:98:d0:5a:ea:fc:
e2:71:bc:e0:3f:c7:9a:7d:a1:6b:7a:72:93:a0:05:
cb:99:a4:4f:34:2c:e6:f5:52:b7:62:1a:40:ba:c0:
59:83:f7:91:0b:9b:39:83:d0:1b:b8:19:6b:8d:82:
47:1a:3b:e8:2f:7d:b2:91:18:30:fe:73:be:a8:cd:
b1:2f:33:5d:a3:ce:f0:1c:05:1c:42:4d:c4:da:7e:
0d:32:98:50:ee:bc:da:56:a6:55:d6:eb:86:5e:e5:
f6:af:aa:fb:23:c7:46:a6:f6:80:0b:3c:6e:48:e3:
a3:03:c8:03:a7:23:b2:f2:71:ba:5a:a7:69:bc:43:
4f:84:55:10:f1:28:64:ba:11:a2:4d:cb:96:d0:ce:
b4:6d:df:ec:98:74:42:10:5e:b6:f0:99:0f:2f:03:
33:2f:29:f9:99:4f:b7:10:df:34:68:44:c4:e5:fe:
ec:7e:62:ad:5c:4d:0d:b4:d6:96:13:0a:4a:94:02:
69:dc:05:92:04:7c:35:ba:85:e1:9e:3e:4d:28:20:
44:07:82:2e:d7:45:43:f7:25:f4:4a:9b:91:6e:94:
6f:2c:cf:7b:50:00:9c:22:11:c9:2b:ba:b2:c8:d4:
19:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:63:DE:E7:F2:42:34:77:A3:CB:E8:9E:E8:72:76:6C:F7:1B:77:13
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/aGPe5_JCNHejy-ie6HJ2bPcbdxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.245.0/24
5.231.31.0/24
94.249.175.0/24
Signature Algorithm: sha256WithRSAEncryption
af:49:7f:a1:8a:81:cf:ad:6d:80:3a:7f:25:b9:ae:73:6e:2b:
6c:40:56:62:d6:42:e1:3b:1d:95:01:e5:2c:5d:97:6a:a5:06:
69:4a:de:4b:65:e3:a6:f1:69:1c:30:d1:dd:cc:04:b7:cc:ad:
b3:da:aa:32:d7:40:97:3c:64:ef:45:57:0b:4a:b6:47:e9:68:
bb:05:12:7e:f5:d7:95:7d:d2:4e:32:14:06:46:fb:d3:66:17:
43:91:77:b4:27:25:be:e7:a9:ba:16:5e:dd:93:ba:c2:dd:78:
00:3a:5a:73:ff:7d:1e:35:dc:25:73:84:e8:12:a9:0a:75:21:
dc:81:de:57:df:be:92:0b:bb:17:9f:fa:ff:55:10:2f:35:3b:
b6:a7:77:39:3d:20:e3:39:d6:35:0e:8d:0c:ca:0f:28:e0:a1:
43:9a:2f:37:f5:18:0e:83:8e:bd:11:37:ee:14:fa:da:2a:05:
f5:02:c1:3a:e5:47:46:bf:35:dc:84:b5:ed:2a:96:b1:30:4e:
71:7d:43:53:04:8c:29:bb:24:ca:36:7d:1a:58:ee:90:f8:16:
b9:1c:21:6c:90:66:02:c0:3e:c4:91:a5:31:a6:39:e2:82:d6:
13:12:09:1c:2f:c9:12:ac:e3:16:1d:6c:c5:c7:4e:61:1c:93:
8a:1b:5c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 08:05:57 2025 by rpki-client