Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/C5neA90kjVHnDPfO-djUn4i2zAA.roa
File: C5neA90kjVHnDPfO-djUn4i2zAA.roa (raw, json)
Hash identifier: 6roTXs09K6iOJG+sNAF1RcACFRNOxhrWD6dzp7AoLnY=
Subject key identifier: 0B:99:DE:03:DD:24:8D:51:E7:0C:F7:CE:F9:D8:D4:9F:88:B6:CC:00
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0199BE6B77AAC97142752F7617D79BE08B36
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/C5neA90kjVHnDPfO-djUn4i2zAA.roa
Signing time: Tue 07 Oct 2025 11:25:38 +0000
ROA not before: Tue 07 Oct 2025 11:25:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215391
IP address blocks: 109.236.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:be:6b:77:aa:c9:71:42:75:2f:76:17:d7:9b:e0:8b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Oct 7 11:25:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b99de03dd248d51e70cf7cef9d8d49f88b6cc00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2e:67:0c:72:27:d4:53:06:fb:af:57:45:b2:
9f:65:64:f1:20:a4:1d:a6:17:ad:88:21:bb:6d:fd:
94:1e:90:6f:31:11:44:08:62:72:7f:90:b8:01:0a:
4c:33:71:f4:ba:cf:2b:de:e9:ff:66:73:ce:1f:09:
58:29:18:65:b5:b0:2c:25:b6:a8:3c:ac:8e:96:f5:
aa:da:3c:1c:10:b3:13:e0:90:dd:8e:81:f7:46:78:
8a:6d:b7:72:ca:cb:74:7c:35:12:aa:54:1a:5c:37:
e0:00:dd:93:e7:48:c3:27:b9:c0:04:db:0b:cc:17:
e9:86:5c:73:94:92:cc:8b:64:77:04:e9:b1:bf:38:
e4:f8:e3:51:1e:b7:b6:f1:99:71:af:59:11:da:61:
1f:88:9b:9c:6f:12:2a:a1:a8:3e:ea:75:ab:1f:8f:
72:21:17:64:45:bd:ba:e2:3f:d2:d6:06:49:e9:06:
dc:bf:c5:4c:78:cc:a8:43:a7:75:66:46:c2:f0:55:
0b:f2:59:b4:b8:ff:a2:74:94:13:6c:7c:25:68:ae:
6f:be:26:ce:af:da:fa:0b:8b:51:53:2c:4a:e8:4b:
e9:0e:49:47:f0:cd:6b:0c:02:83:2e:2e:4d:2d:6c:
d9:93:cb:95:6d:22:de:72:44:62:88:91:88:ed:32:
c8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:99:DE:03:DD:24:8D:51:E7:0C:F7:CE:F9:D8:D4:9F:88:B6:CC:00
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/C5neA90kjVHnDPfO-djUn4i2zAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.48.0/24
Signature Algorithm: sha256WithRSAEncryption
51:28:d7:78:6f:79:b3:60:df:fb:54:bb:23:a9:fd:01:cb:55:
c0:ce:7b:55:f2:57:31:70:55:81:c8:99:c2:86:e9:f2:a8:04:
c0:2f:ac:a8:bb:ce:66:d0:24:7b:97:a8:11:65:d7:4d:30:92:
6e:7a:2e:6a:4b:6b:57:2a:ae:8b:a4:25:5e:ce:7f:00:aa:8e:
03:6e:d6:ce:7d:1f:08:0f:c1:13:92:95:86:2d:2a:68:d3:4d:
5a:74:50:80:c2:f7:70:64:ae:f7:1c:fb:d1:ca:68:b7:44:cf:
87:3d:e3:35:b9:20:7d:76:2f:57:27:ee:52:1d:7a:59:69:c6:
08:6d:1e:fe:55:b1:66:2a:1f:6c:50:dc:f2:87:c7:3f:77:80:
84:0a:f1:3f:0b:f3:c9:aa:ba:ea:e4:2f:8d:bf:35:3b:37:ab:
37:a8:e9:c6:52:a8:c8:a9:a3:02:f1:1e:5f:6e:ef:74:e6:56:
18:ca:6b:c9:d1:99:9c:1c:91:cd:bd:38:09:5a:1b:a0:0d:47:
a0:81:2e:64:f8:81:c8:47:c4:e7:a7:e2:b6:9d:ce:e6:41:46:
19:aa:c3:e4:f2:16:21:d7:f3:ef:40:8c:55:b8:5e:1a:bc:d9:
6c:7d:fb:a2:bc:51:37:91:07:44:96:b1:0d:64:c4:4d:33:7b:
e9:05:b2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 16:10:32 2025 by rpki-client