Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SkEdnAzkuZ9S7vp8OefzzWTnhxw.roa
File: SkEdnAzkuZ9S7vp8OefzzWTnhxw.roa (raw, json)
Hash identifier: 3GJ2sxIUQmKF2CNHW6qSBvHn4SBglcU9L8892toahSk=
Subject key identifier: 4A:41:1D:9C:0C:E4:B9:9F:52:EE:FA:7C:39:E7:F3:CD:64:E7:87:1C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019874DC945E5003AD700062C06C676C8754
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SkEdnAzkuZ9S7vp8OefzzWTnhxw.roa
Signing time: Mon 04 Aug 2025 11:34:29 +0000
ROA not before: Mon 04 Aug 2025 11:34:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214783
IP address blocks: 5.83.151.0/24 maxlen: 24
5.231.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:dc:94:5e:50:03:ad:70:00:62:c0:6c:67:6c:87:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 4 11:34:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a411d9c0ce4b99f52eefa7c39e7f3cd64e7871c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7e:82:dd:96:85:bf:8b:ef:57:bc:d4:f1:21:
86:f9:27:7d:4b:6d:72:2c:fb:78:24:7c:6a:d9:cb:
70:aa:63:24:14:6f:9d:78:fd:e0:0a:1e:a9:f2:92:
57:b0:17:62:e3:e7:12:db:ac:09:c1:dc:b4:3b:cb:
64:75:9e:19:36:15:8d:54:67:ad:9e:24:0d:29:e6:
59:3a:96:bc:d1:ff:84:75:fd:75:96:cb:de:a1:3e:
24:a3:27:96:71:69:d6:17:6d:be:5b:92:5f:f0:ae:
f4:24:1c:f5:87:cd:56:a0:36:8f:e5:73:60:d4:5f:
c2:0e:4c:51:7c:82:12:eb:7f:68:e7:ad:ad:61:23:
c7:f8:0e:8b:d1:76:6e:cc:e4:a7:90:77:7b:2c:b1:
e6:53:84:ec:cd:22:97:fc:42:25:6a:25:fa:69:a2:
06:8e:a4:f0:c1:06:36:d2:ed:13:a1:67:bb:5e:69:
ce:67:a9:df:ff:b4:13:49:88:f2:02:71:8d:ab:38:
eb:b8:cf:74:e4:b1:9f:ba:4b:14:e1:68:60:4c:b3:
1a:02:ae:39:0c:ff:bf:71:89:8a:f1:4c:fa:10:07:
85:5b:6c:37:02:5d:67:cf:46:96:54:1f:e2:89:27:
94:a9:40:48:ff:90:02:50:3f:18:bc:c0:74:1d:9b:
95:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:41:1D:9C:0C:E4:B9:9F:52:EE:FA:7C:39:E7:F3:CD:64:E7:87:1C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SkEdnAzkuZ9S7vp8OefzzWTnhxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.151.0/24
5.231.240.0/24
Signature Algorithm: sha256WithRSAEncryption
20:9e:4f:72:3d:23:7a:ea:4e:6e:2f:ab:9d:b8:4c:8d:1b:87:
13:74:11:bd:1f:a9:69:49:78:42:91:ae:40:e8:80:4c:d1:6e:
f5:2c:fc:9f:e1:0b:ab:40:28:38:43:86:e3:79:83:27:ea:74:
2b:81:5c:f5:3c:36:b9:0d:b2:10:7a:a3:5d:87:ad:02:e8:5f:
d7:f4:2f:05:8e:78:e1:4c:f0:45:00:b6:7b:ad:52:80:6e:8b:
01:74:64:75:a5:70:93:2f:c8:2c:92:96:2b:77:8e:be:c8:3a:
87:ff:ed:25:f7:b8:b4:f0:e9:ed:00:8b:63:b7:52:f4:56:1e:
25:e2:40:18:31:8a:8e:28:4b:63:e0:eb:0b:4c:de:4f:6a:eb:
cf:c6:3a:4d:5e:97:d3:0a:d5:1d:ec:c6:00:49:b6:ee:a4:3f:
bc:e8:d9:18:9c:d5:28:02:f2:53:d2:38:6c:54:36:ff:3a:94:
44:10:0f:01:40:40:e8:be:88:89:5d:9b:d1:7d:a0:e8:26:21:
6c:96:93:59:00:2b:88:58:03:84:ba:55:fe:75:76:4d:94:6b:
7f:1b:d3:62:83:e4:39:32:ff:5b:1a:7b:8a:b8:1a:24:4d:c2:
7a:1c:32:2e:45:59:6c:33:c8:2d:a5:b0:89:6a:69:48:96:6f:
3e:4c:44:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:59:51 2025 by rpki-client