Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6LIYZpMZAaS_ncLuQXSv_NmNBRI.roa
File: 6LIYZpMZAaS_ncLuQXSv_NmNBRI.roa (raw, json)
Hash identifier: E3/j8Kx7YejUYF0IU+MrKKDm0Erlb2xCqCBaRPZZ60c=
Subject key identifier: E8:B2:18:66:93:19:01:A4:BF:9D:C2:EE:41:74:AF:FC:D9:8D:05:12
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019863CF5910C7B65A50570699F4BB8EEE55
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6LIYZpMZAaS_ncLuQXSv_NmNBRI.roa
Signing time: Fri 01 Aug 2025 04:06:29 +0000
ROA not before: Fri 01 Aug 2025 04:06:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215590
IP address blocks: 5.231.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 07:37:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:63:cf:59:10:c7:b6:5a:50:57:06:99:f4:bb:8e:ee:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 1 04:06:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8b21866931901a4bf9dc2ee4174affcd98d0512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:32:69:76:b2:77:c8:d7:72:1e:f8:7b:ff:7f:
ab:c6:a6:40:ff:69:f1:d2:65:cc:8d:8f:f6:b8:3b:
b8:42:d6:9a:66:e4:25:05:64:5c:45:1a:57:e6:97:
b9:f1:e4:21:a4:70:8c:8e:fc:eb:40:75:f3:a6:bd:
22:28:23:fd:08:3b:f0:91:74:2b:80:ee:8e:eb:32:
79:56:4e:21:7c:30:b2:ff:85:e6:26:62:17:73:11:
f6:0f:8f:98:b0:87:b2:86:d3:61:c6:8f:80:16:c6:
9d:55:0b:09:f4:13:e2:93:75:1a:b2:d2:35:fe:ca:
0e:49:ea:18:d0:48:0f:46:dd:48:e9:f7:73:7f:05:
d5:56:96:62:8c:c6:11:82:1a:fe:27:56:d8:52:55:
16:f3:c7:a5:ad:6e:51:a7:90:41:3a:91:68:9a:68:
e0:d6:8f:a9:ce:d6:0e:6f:3c:aa:76:4a:53:4d:42:
59:04:f1:1e:4e:18:ab:a0:18:4b:40:30:09:96:30:
79:04:85:bc:ad:a1:e7:d4:67:0f:f2:a2:7a:8c:7f:
4c:46:f7:0c:4f:46:21:d3:c3:d7:d5:76:0e:90:94:
29:91:3e:7f:89:23:96:fe:b6:d9:65:93:e2:60:ce:
da:9b:00:a9:18:11:2e:b0:8f:66:ab:3b:9e:60:b0:
ca:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B2:18:66:93:19:01:A4:BF:9D:C2:EE:41:74:AF:FC:D9:8D:05:12
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6LIYZpMZAaS_ncLuQXSv_NmNBRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.230.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:4e:09:56:ba:be:e1:63:8d:da:f9:ca:3d:16:ba:b3:c2:83:
84:8e:04:c8:8a:b3:a7:a9:c2:dd:cb:f7:cc:dd:10:31:f4:21:
4d:c4:23:41:06:68:dd:14:67:f6:a8:c9:51:6b:85:4b:ef:8d:
fb:f9:5f:77:5f:c0:d6:34:a4:2b:d6:a2:5f:36:9c:20:b0:65:
51:7a:2d:6a:de:6f:2c:b1:59:a6:3d:b9:7d:11:4b:9f:9e:8e:
5f:a7:21:29:9b:e9:63:55:a2:79:9f:43:bc:5a:c9:d7:4a:37:
01:b7:05:f5:9e:6a:0c:10:91:81:5b:bd:31:14:97:43:0c:84:
60:42:c2:34:12:3c:eb:a6:1a:e7:dc:ed:e3:51:39:df:f1:b8:
e2:59:e2:15:32:56:83:76:7d:c0:f4:7b:76:c3:13:a8:40:ab:
ca:49:85:39:ab:df:85:4e:e2:f1:00:b9:56:8c:bc:86:6d:ba:
31:37:5d:bc:a4:d9:1c:1d:5c:f1:bb:5a:52:4c:79:49:35:8f:
92:02:26:ef:40:90:08:d3:f9:b1:21:18:60:50:47:dd:4d:bb:
fb:39:e5:de:4e:11:8b:d1:59:21:d5:0a:ab:48:db:11:80:6d:
bc:1d:14:e4:ac:c8:93:57:64:7e:7d:01:b2:bc:69:5a:85:33:
16:b7:14:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:04:01 2025 by rpki-client