Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/enVUP6-YuddO2BO-D2AKa7IS93c.roa
File: enVUP6-YuddO2BO-D2AKa7IS93c.roa (raw, json)
Hash identifier: tppf1FpGWyfpljoL1Y1VNTEbPFJc8bbUgteo8U+Ydi4=
Subject key identifier: 7A:75:54:3F:AF:98:B9:D7:4E:D8:13:BE:0F:60:0A:6B:B2:12:F7:77
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0198FA8EC2A529993507E05DFBC3DEDAF43A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/enVUP6-YuddO2BO-D2AKa7IS93c.roa
Signing time: Sat 30 Aug 2025 10:38:36 +0000
ROA not before: Sat 30 Aug 2025 10:38:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215828
IP address blocks: 5.83.148.0/24 maxlen: 24
77.90.25.0/24 maxlen: 24
94.249.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:fa:8e:c2:a5:29:99:35:07:e0:5d:fb:c3:de:da:f4:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 30 10:38:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a75543faf98b9d74ed813be0f600a6bb212f777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:96:19:8b:6a:b4:6b:db:dd:63:79:58:f2:d3:
45:35:6c:89:42:8a:47:ca:bb:25:fb:1a:be:d6:44:
f7:6d:a6:68:e1:7a:fb:f9:de:19:6a:18:53:54:ff:
9a:7f:61:44:a9:39:80:db:b3:21:f9:1e:f7:5c:42:
b2:61:3b:fc:ca:76:3f:63:6e:89:b0:2e:81:2e:62:
5d:17:dd:64:bd:9f:e1:68:7d:43:eb:b0:9c:ec:ed:
b0:2e:70:e7:e7:96:df:7a:24:d9:6c:01:dc:d6:42:
07:0a:b5:7f:47:47:31:66:3d:93:0a:cd:1d:63:e6:
a9:e4:9a:c6:1e:de:70:53:9f:3a:23:d7:3b:da:4a:
c5:72:41:16:65:08:65:be:bc:4e:b6:b1:8d:fe:29:
b2:61:c3:0a:a2:88:df:0e:17:f8:bf:28:30:81:43:
fa:06:51:a9:1a:72:a9:a7:55:5a:1f:bd:04:90:ab:
43:3e:6e:bb:c6:ff:d0:87:38:b4:ec:11:df:55:6b:
38:59:4f:e6:2d:c4:2b:b0:1f:38:08:de:84:b5:d4:
e1:e2:f9:ff:10:3c:3c:a2:36:8b:3c:98:12:3c:3c:
9e:d2:19:18:fd:31:59:5b:5f:85:05:f5:1e:01:bf:
94:51:ff:50:bd:e0:02:7f:6c:ea:e9:cc:8d:68:12:
be:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:75:54:3F:AF:98:B9:D7:4E:D8:13:BE:0F:60:0A:6B:B2:12:F7:77
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/enVUP6-YuddO2BO-D2AKa7IS93c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.148.0/24
77.90.25.0/24
94.249.138.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:e6:51:1b:97:4e:e5:ef:0f:e0:90:e3:4b:5a:0e:d4:32:bb:
ec:69:f9:b2:ad:e2:ef:70:ce:c3:cb:3a:47:81:58:96:ae:60:
64:47:5c:13:78:13:6c:65:f2:e6:a8:f7:55:c8:27:f2:69:9e:
ef:8a:4b:0f:99:b3:46:80:56:90:7f:9e:05:15:ad:99:2f:dd:
aa:67:69:05:23:86:5a:13:3c:75:bb:a7:1c:7c:3a:f6:2f:84:
6f:9f:d5:3e:af:30:d8:e3:58:9c:bb:cf:db:a9:7b:b3:34:ee:
9e:f5:de:ea:f3:0e:66:4b:c3:4a:0a:e3:91:88:29:cf:83:7b:
ec:a5:6e:f5:75:da:69:3e:78:f5:61:70:d5:4f:53:92:47:dc:
c2:b9:00:02:1a:fe:b3:55:c0:03:07:5f:1c:5f:32:d9:65:ba:
6a:d4:64:00:51:57:9b:13:46:a5:4a:92:cd:eb:68:e2:a9:f0:
35:df:d0:fc:bd:72:23:d5:76:2b:f5:98:32:8d:55:dd:a0:90:
30:b7:af:87:06:7c:b3:40:4e:2f:e4:a2:f4:ba:46:08:b4:39:
ac:5a:89:ba:af:8b:76:2c:19:49:be:fc:be:a2:84:dc:c4:2c:
51:9c:b0:aa:6b:a5:29:93:e7:6b:c0:09:b3:79:b8:05:ac:c7:
33:c4:c6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 08:06:03 2025 by rpki-client