Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5kDoBXo1Swu-BQ4xUzfzF_KoK-I.roa
File: 5kDoBXo1Swu-BQ4xUzfzF_KoK-I.roa (raw, json)
Hash identifier: gDaNksPpHinqkm8NjCkMsQRaV0lyZ5QFLoglu4j8yRs=
Subject key identifier: E6:40:E8:05:7A:35:4B:0B:BE:05:0E:31:53:37:F3:17:F2:A8:2B:E2
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019A35360402A3CFCBCD5A13BE1861260763
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5kDoBXo1Swu-BQ4xUzfzF_KoK-I.roa
Signing time: Thu 30 Oct 2025 13:02:03 +0000
ROA not before: Thu 30 Oct 2025 13:02:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204245
IP address blocks: 5.175.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:35:36:04:02:a3:cf:cb:cd:5a:13:be:18:61:26:07:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 30 13:02:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e640e8057a354b0bbe050e315337f317f2a82be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c3:33:2e:d5:75:c9:56:5e:ca:98:7e:40:43:
84:aa:be:f7:85:a2:8d:c3:9a:55:20:ea:29:fa:dc:
79:f0:d8:35:63:6b:bb:c5:4f:cb:da:39:47:77:30:
a6:eb:43:79:16:71:ba:96:1d:a1:48:8b:3d:eb:bb:
d9:df:91:7b:7f:62:54:ea:cb:e6:07:76:3b:15:70:
61:0e:1f:23:02:bf:d2:68:75:82:57:8a:46:71:00:
15:64:fd:52:39:ea:8b:91:c7:71:49:5c:96:f4:8a:
85:90:3b:1f:12:5d:df:bd:6c:6d:4c:11:bc:51:41:
c9:6a:af:ab:26:ed:e2:7d:af:80:64:1f:ed:8b:5c:
9d:19:bb:03:ee:b3:1d:bc:e3:87:04:9a:d9:21:c8:
ae:2f:0f:13:57:70:93:d4:31:c9:2e:c8:f8:bc:5f:
ce:b2:56:dc:c0:7a:6a:42:05:92:dd:eb:42:8f:f2:
c3:f6:b1:31:73:90:e4:05:72:f3:f8:d2:99:4f:0a:
7e:e1:5c:c4:bf:5f:26:1f:7b:c7:e9:03:4c:06:2d:
49:52:46:1f:c9:ca:a9:3c:14:a3:e3:6b:9f:b2:b4:
85:93:3d:21:e5:1e:f7:39:68:53:f8:34:3a:a9:3c:
4d:50:13:27:db:47:71:74:5e:a5:fd:4e:71:d6:5c:
07:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:40:E8:05:7A:35:4B:0B:BE:05:0E:31:53:37:F3:17:F2:A8:2B:E2
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5kDoBXo1Swu-BQ4xUzfzF_KoK-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.217.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:ba:d5:48:78:fc:6a:0a:5e:cc:e0:e2:34:4d:a0:bc:4d:17:
7b:2c:8c:fa:1e:fe:46:ce:4d:7c:5d:fe:21:3a:e4:1b:96:dd:
f4:e9:f8:4e:b2:cc:18:4b:af:f7:14:b1:4c:a6:68:29:0f:0b:
81:0b:e5:94:d5:33:54:c3:9f:57:aa:3d:a0:c5:cf:64:67:bd:
08:57:4e:9a:b8:97:24:79:28:99:e2:10:2b:80:fc:d6:b4:93:
01:2a:b0:78:32:ce:20:e4:d9:8b:8a:8b:c3:db:fe:0d:11:c2:
e8:97:dc:c2:77:7f:2a:73:d6:67:be:a2:55:94:93:7c:b1:c9:
63:e6:2b:c8:49:b9:eb:05:bc:6c:21:e8:17:21:96:c2:b6:71:
55:fc:74:68:78:99:66:10:c7:c5:f9:75:af:22:bd:5f:7e:54:
e4:70:11:0e:20:48:ed:ad:51:c4:af:41:81:9b:c5:37:f7:2a:
ae:e8:98:4b:3b:7a:d8:95:d7:87:36:5f:87:3d:22:65:96:c8:
44:2c:ed:ba:47:ee:58:33:08:37:a2:df:cf:32:94:1b:9d:3a:
09:b7:12:8a:97:21:86:ca:d6:a4:1d:fd:0a:74:c8:27:02:f8:
12:d7:42:e4:45:d7:71:72:4a:cd:df:42:51:4b:2d:db:d2:6b:
8e:b9:be:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:01:13 2025 by rpki-client