Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hipBQPOU13WTEctFmbZ9oFApykU.roa
File: hipBQPOU13WTEctFmbZ9oFApykU.roa (raw, json)
Hash identifier: c561Za/BdB0ZuL1UA3hynMz09KP9wOXv0Bdb9zCFd1E=
Subject key identifier: 86:2A:41:40:F3:94:D7:75:93:11:CB:45:99:B6:7D:A0:50:29:CA:45
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0198FFA2CF4C95CBD73D563CCE7B0922D85A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hipBQPOU13WTEctFmbZ9oFApykU.roa
Signing time: Sun 31 Aug 2025 10:18:36 +0000
ROA not before: Sun 31 Aug 2025 10:18:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213512
IP address blocks: 5.175.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ff:a2:cf:4c:95:cb:d7:3d:56:3c:ce:7b:09:22:d8:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 31 10:18:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=862a4140f394d7759311cb4599b67da05029ca45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b4:c8:9d:45:cc:ea:04:2c:8b:8c:03:50:1b:
0f:d6:2e:5e:ca:e0:d6:32:1a:3e:1e:c4:cc:68:37:
bb:26:66:fa:46:26:9a:d3:d0:7c:42:e1:f1:59:cd:
3a:66:f1:0a:fe:c4:37:f0:58:6e:36:71:2f:8b:87:
a1:ff:6a:ec:e9:43:f6:e4:9b:6c:a5:57:a2:02:fd:
ef:e8:81:cc:58:b2:99:36:43:cd:2d:55:2d:17:be:
cb:45:1a:bd:38:ae:c6:89:22:2f:d5:88:37:4a:ef:
4f:1d:79:25:f7:7a:da:e4:a7:11:d5:94:dc:c3:79:
e2:f3:c1:73:3d:21:2a:a5:e0:f1:1a:31:f9:f6:dd:
a6:1a:8b:13:51:c8:ad:97:e8:44:df:c0:e6:2c:16:
57:00:03:1d:db:54:cd:9d:ee:64:67:4f:27:7c:71:
c8:fc:43:ea:4c:17:09:ea:4f:c3:83:d1:f7:4d:e2:
79:7a:35:eb:c4:98:05:15:6a:02:5a:d2:17:88:b3:
db:c4:3f:70:ac:42:78:bb:d8:cf:45:c5:e3:8b:3e:
c2:e0:d1:9f:88:5f:94:cf:b8:b3:12:66:4f:9a:72:
07:6a:73:70:d2:9b:62:54:08:42:dd:d4:f6:dd:8b:
7e:b3:d5:ef:f9:32:3c:c4:c1:6a:53:d5:a2:e3:30:
24:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2A:41:40:F3:94:D7:75:93:11:CB:45:99:B6:7D:A0:50:29:CA:45
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hipBQPOU13WTEctFmbZ9oFApykU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.142.0/24
Signature Algorithm: sha256WithRSAEncryption
10:60:ca:75:92:4e:15:1d:9b:93:ae:1e:a2:19:87:9e:20:53:
89:68:77:fb:55:2b:90:9b:fc:0e:79:85:37:98:1f:a8:14:03:
f1:cf:b9:62:cc:42:e2:c1:de:57:d8:e5:40:af:6c:59:2a:b3:
ec:7e:ed:b6:7d:b9:b9:2b:9f:c4:ba:ac:04:15:23:14:f5:2c:
92:d1:20:5b:aa:98:20:db:65:ef:3c:98:ae:35:50:90:16:df:
5a:60:49:ae:90:4f:26:67:ff:89:02:bd:38:85:bb:18:a0:54:
d0:89:11:90:cb:6a:99:4f:01:7d:51:c3:00:f5:ad:0b:bb:ac:
9b:1a:c2:6a:5a:41:74:06:53:1c:35:dd:1e:1b:3d:04:a6:4d:
c5:27:b7:51:e3:eb:65:5d:fb:cf:b2:92:8c:3f:f2:c7:e7:a1:
90:be:7f:92:3e:73:a3:4c:76:6f:87:44:9a:34:6c:3d:3d:9c:
54:cf:33:14:83:73:2d:0f:89:56:b5:4e:9b:89:6c:62:f9:5e:
52:e9:0a:43:7e:32:af:a0:f6:65:4a:7b:00:12:d5:ff:38:ad:
16:dd:03:4f:77:a7:84:68:ca:53:55:fe:f4:f5:f9:1b:e7:a9:
71:d2:3f:61:79:03:aa:4a:bd:7c:37:0d:47:32:ce:07:34:07:
d4:ab:21:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 08:06:02 2025 by rpki-client