Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xXn4lRIfXnAzByg-LoNCaxAnnyg.roa
File: xXn4lRIfXnAzByg-LoNCaxAnnyg.roa (raw, json)
Hash identifier: kIeYSW12rGnmWyA1GfKK9iEHLMJkCRvUf7gdnfkxpKU=
Subject key identifier: C5:79:F8:95:12:1F:5E:70:33:07:28:3E:2E:83:42:6B:10:27:9F:28
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0199B968D06D1D34080E2D9A75330E7768EF
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xXn4lRIfXnAzByg-LoNCaxAnnyg.roa
Signing time: Mon 06 Oct 2025 12:04:37 +0000
ROA not before: Mon 06 Oct 2025 12:04:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44486
IP address blocks: 5.83.145.0/24 maxlen: 24
77.90.3.0/24 maxlen: 24
77.90.28.0/24 maxlen: 24
89.144.33.0/24 maxlen: 24
89.144.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Oct 2025 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b9:68:d0:6d:1d:34:08:0e:2d:9a:75:33:0e:77:68:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 6 12:04:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c579f895121f5e703307283e2e83426b10279f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2a:5d:4a:12:6b:c4:95:31:45:9d:92:c5:8f:
12:b5:0b:e7:c6:04:d7:7e:b3:4a:1b:89:fb:7f:a9:
72:b2:b4:ce:5c:d5:c5:9a:27:04:17:da:0d:00:d6:
79:77:8f:f7:28:b2:1e:c8:bd:d5:4a:0c:83:2f:68:
8b:00:00:be:8d:b6:4b:0a:91:2e:60:23:51:f5:3a:
ea:06:23:14:cc:86:88:9e:0b:cd:41:48:6d:37:42:
e1:08:6c:aa:91:c4:ac:5e:b7:8a:08:fe:59:53:c7:
de:9f:28:09:9f:78:8d:dc:53:4f:0c:dd:ab:cc:a4:
3b:bb:74:b3:99:d3:19:40:1c:28:a6:74:5b:af:82:
7f:26:af:9a:f9:59:9d:ba:3a:42:6d:bc:06:cc:c9:
7c:18:5e:26:47:73:85:e2:95:8e:8b:5f:9b:05:83:
94:95:19:a1:82:46:1e:b8:8d:0a:de:6c:61:e5:14:
0c:d5:7d:d7:dd:dc:57:f1:d4:5a:33:19:9e:1d:81:
41:02:83:77:fd:58:d1:a1:7c:1c:ff:fa:13:91:fa:
a4:83:14:98:cb:05:77:04:2b:81:e5:47:de:95:33:
83:67:05:51:86:51:02:7e:57:73:02:20:41:02:e2:
a2:cf:6c:7f:52:2a:bd:f4:79:06:99:fd:b4:35:95:
0c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:79:F8:95:12:1F:5E:70:33:07:28:3E:2E:83:42:6B:10:27:9F:28
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xXn4lRIfXnAzByg-LoNCaxAnnyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.145.0/24
77.90.3.0/24
77.90.28.0/24
89.144.33.0/24
89.144.42.0/24
Signature Algorithm: sha256WithRSAEncryption
79:0a:46:ab:f9:b2:94:cf:c9:be:2b:25:95:6b:6a:48:c0:30:
a0:ed:01:5e:d9:c9:25:71:f8:24:66:7b:ed:28:d3:26:ac:58:
ce:76:4e:81:a8:b6:13:85:8b:e4:9d:12:6e:f9:2d:ed:e6:50:
eb:62:13:3b:10:13:a9:d0:b3:c8:14:cf:d4:8a:ea:6f:d9:9f:
ad:da:9c:82:0e:15:2e:a5:c4:4e:af:a2:cb:f4:26:e9:e5:15:
0c:31:02:3e:b1:b6:db:70:fd:b9:d6:ec:ee:20:84:ad:37:46:
1c:06:e4:5f:12:6e:87:e5:93:eb:52:1b:c4:0e:04:e6:82:4a:
27:9f:7e:c8:4f:cd:e3:a2:f4:de:08:05:de:66:b4:d8:d0:70:
f7:3f:24:7c:cc:41:16:58:b2:7f:8e:da:b8:cd:2f:b1:32:2b:
e1:91:58:79:2c:c5:8a:f2:ae:38:27:86:e4:d0:73:f3:c3:62:
e0:9c:e7:0b:9d:26:ca:28:bc:3b:77:7b:7b:c1:cc:90:b3:a6:
88:18:e4:99:dc:19:fa:48:87:9f:5d:e2:dd:b3:8d:2c:4a:dc:
13:2a:a1:dc:03:43:21:7a:a9:e0:a0:b9:9a:e7:ab:0d:aa:1e:
98:d0:cb:20:63:e8:7e:54:a1:4b:46:a0:2c:e6:f1:fd:a7:a5:
ee:4e:bd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 14 07:55:33 2025 by rpki-client