Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4TMx5ghUIKkSZ_ynBOO9eAgNSW8.roa
File: 4TMx5ghUIKkSZ_ynBOO9eAgNSW8.roa (raw, json)
Hash identifier: DasbSaGpTJzeMtDfOQbicY9gk52XvCNwDCxJJpg4RN4=
Subject key identifier: E1:33:31:E6:08:54:20:A9:12:67:FC:A7:04:E3:BD:78:08:0D:49:6F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019A4E175587CC5A3E2DB1FDB6F697B06876
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4TMx5ghUIKkSZ_ynBOO9eAgNSW8.roa
Signing time: Tue 04 Nov 2025 08:59:03 +0000
ROA not before: Tue 04 Nov 2025 08:59:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197071
IP address blocks: 5.175.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:17:55:87:cc:5a:3e:2d:b1:fd:b6:f6:97:b0:68:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 4 08:59:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e13331e6085420a91267fca704e3bd78080d496f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c9:c8:27:5d:99:13:85:86:09:10:81:24:d5:
9e:46:2d:a9:60:1d:4c:27:97:3b:4b:33:6e:ba:6c:
bd:e7:7e:7c:37:ab:6d:4a:13:1e:e5:eb:1c:6f:fd:
4c:d0:83:a3:78:be:d6:ac:cb:1b:dc:f8:32:2e:81:
c7:db:be:53:11:35:10:3e:0f:9c:d8:5b:4d:e0:f8:
62:ee:5d:22:94:90:e1:e6:ae:66:67:80:f3:94:e3:
1d:42:8e:23:fe:c5:63:43:1e:d2:2c:86:d9:c9:26:
fa:c2:1f:6e:dd:01:a4:01:f7:50:5b:7d:29:b9:96:
a3:fb:e0:cc:62:fe:b6:bf:1a:3a:69:f4:4e:e8:5d:
92:a2:d6:76:63:71:98:06:c9:ac:82:a4:5e:d6:cc:
ba:1a:c8:82:43:73:2a:2a:ea:cb:17:f9:86:b1:2f:
dc:79:1b:f7:e0:d2:5d:c1:e6:af:b7:a1:58:48:af:
d8:8b:04:46:74:fb:1f:a7:d5:81:a2:04:ec:06:6c:
e2:01:9a:c3:15:9a:bd:00:b6:2a:47:78:23:ef:c1:
8d:57:d1:c1:86:9d:e4:66:74:36:d7:77:60:d7:24:
40:59:5c:b7:8b:45:41:62:59:50:f3:9e:72:22:e7:
15:ce:03:ba:cb:ef:39:9a:c7:46:4a:b5:e2:a2:fc:
fa:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:33:31:E6:08:54:20:A9:12:67:FC:A7:04:E3:BD:78:08:0D:49:6F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4TMx5ghUIKkSZ_ynBOO9eAgNSW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.206.0/24
Signature Algorithm: sha256WithRSAEncryption
98:84:21:85:4e:02:fb:89:12:f2:01:70:36:ea:d0:0d:cc:a1:
2f:8d:03:3d:46:59:fb:6f:b4:f1:0c:65:b2:4b:43:f5:bf:71:
ec:bf:a5:c8:5a:8d:41:ee:b6:52:a3:c3:e0:fe:66:82:b2:07:
53:bb:58:d9:8e:93:8b:a0:13:b5:6a:b5:2a:7a:67:43:37:0f:
3b:ef:9d:56:24:52:50:ea:0d:bd:54:7c:78:da:60:a0:9b:a8:
4a:df:1f:47:94:cf:ee:8a:01:31:52:94:ab:6d:d3:b0:ff:2f:
ba:ee:ca:dd:79:33:05:78:20:89:86:b3:b6:15:5b:e1:d7:fd:
62:b6:ab:0a:19:a2:8e:45:88:67:20:2e:6a:a2:92:63:23:0c:
32:83:95:1f:6b:01:87:c3:31:6e:ba:f6:3b:17:55:12:dc:ec:
6f:9a:0d:53:b3:dd:6c:5e:06:f2:af:b2:84:30:2b:6c:e5:6b:
a9:7e:d8:e8:1f:24:0b:86:77:63:4a:97:fa:b2:6d:92:8d:3f:
88:a2:46:f5:60:29:2d:20:7b:1e:1f:ad:85:87:35:e6:ce:48:
3b:70:d6:c6:1c:fa:74:f3:5e:55:45:ae:c8:cb:b6:d9:e1:5b:
6d:13:ca:80:cb:7c:c6:1e:d5:11:52:ad:3e:0c:cb:4d:89:aa:
52:f7:42:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:28:32 2025 by rpki-client