Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/a_G1Vptn-Pcg6akB_Hr2yza23E0.roa
File: a_G1Vptn-Pcg6akB_Hr2yza23E0.roa (raw, json)
Hash identifier: yfGIAuaup7XQGjQnJqjlZ568NuLodKyjYvjdR7cDAac=
Subject key identifier: 6B:F1:B5:56:9B:67:F8:F7:20:E9:A9:01:FC:7A:F6:CB:36:B6:DC:4D
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0198D7EE23B118947896DD07A7F3C2A11C82
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/a_G1Vptn-Pcg6akB_Hr2yza23E0.roa
Signing time: Sat 23 Aug 2025 17:16:04 +0000
ROA not before: Sat 23 Aug 2025 17:16:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 95042
IP address blocks: 5.231.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:ee:23:b1:18:94:78:96:dd:07:a7:f3:c2:a1:1c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 23 17:16:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6bf1b5569b67f8f720e9a901fc7af6cb36b6dc4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3e:8b:16:eb:24:92:50:07:68:e1:9f:36:8f:
61:d7:e9:ea:f0:8a:02:49:6a:a6:c6:51:63:92:f7:
9a:dd:1a:ef:54:e0:80:49:5a:f5:44:50:43:ef:81:
cc:08:ac:26:1e:73:95:78:f9:73:07:c7:2b:a1:4c:
89:d1:fd:25:af:74:48:48:bf:56:21:aa:f0:06:6e:
a8:cb:3a:4d:82:5f:6a:a1:63:52:f3:0e:07:d1:60:
5f:12:63:87:37:09:e2:ec:d9:3a:3a:96:83:9e:5e:
66:74:51:fa:01:e8:0d:0d:5a:f4:06:a5:23:b3:bb:
0a:db:02:da:2e:2f:55:51:c8:33:66:a3:4e:36:c3:
16:24:e7:7a:e2:86:20:10:d8:c4:4f:de:36:54:d9:
1d:46:f1:bd:ba:ab:e9:6d:2b:38:cc:f7:23:b3:15:
55:d4:4c:bd:83:0f:30:e1:6b:e1:a1:9a:56:be:85:
7e:8c:89:0f:be:ec:78:53:87:fc:92:0a:5f:56:d2:
b9:86:0f:aa:ce:e0:1c:1f:7d:c9:4a:3b:01:ff:9f:
34:c0:68:f0:3f:bb:e0:f7:f3:fe:e7:d1:b5:84:97:
2f:2c:45:23:25:57:e0:30:fa:d7:59:52:57:90:aa:
bd:6f:62:10:28:78:0a:a1:44:13:17:62:ef:9c:94:
97:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F1:B5:56:9B:67:F8:F7:20:E9:A9:01:FC:7A:F6:CB:36:B6:DC:4D
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/a_G1Vptn-Pcg6akB_Hr2yza23E0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.58.0/24
Signature Algorithm: sha256WithRSAEncryption
84:98:30:f5:0c:74:cd:49:84:51:4c:dd:34:33:77:10:24:be:
3d:04:d5:5e:c9:4b:53:a3:1c:2d:0f:cf:02:fa:85:f8:6b:75:
65:54:e9:05:80:33:38:1b:a5:1c:30:f6:ec:fb:01:34:78:c5:
94:37:cc:32:f3:3c:3b:2c:ed:14:10:63:11:2c:ab:e9:df:e3:
51:f3:d9:53:d0:85:be:8e:d4:ea:ad:4d:4f:e5:c0:26:92:c8:
cc:a9:1a:41:7f:84:6b:85:b3:ed:e8:59:c4:57:fa:de:ba:e1:
e9:69:21:bd:bf:64:25:46:69:55:28:dc:71:da:99:c8:ef:d9:
49:5e:ff:f8:6c:27:1e:11:ab:3a:bc:1b:de:b1:9e:85:ab:eb:
f5:24:7e:91:25:16:3f:46:d7:73:df:8e:b8:fb:fa:34:b6:3e:
8f:5f:3c:0e:f8:f1:ba:9d:9e:b8:bf:c3:8d:22:83:4b:bf:63:
a7:9c:d3:e4:25:5b:81:20:c9:38:d4:2c:6f:0e:e8:1a:11:4b:
1a:b5:91:db:61:85:9e:38:2d:0d:58:2a:79:8f:a9:f9:ff:2d:
60:03:5d:bd:f1:59:ed:42:20:a9:e6:3a:c3:df:e7:dc:c8:a1:
1a:48:23:30:d0:5e:a8:d8:6e:a2:29:44:86:ec:ec:60:d1:ae:
b9:20:dd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 08:15:01 2025 by rpki-client