Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/UpJulY3TFBSfELoxlyGEelOt58E.roa
File: UpJulY3TFBSfELoxlyGEelOt58E.roa (raw, json)
Hash identifier: Q+DeGD5ksolAqpZiSqBUfMVQ4G+MxuBVQZLW5s3HIlQ=
Subject key identifier: 52:92:6E:95:8D:D3:14:14:9F:10:BA:31:97:21:84:7A:53:AD:E7:C1
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019838EFA106A3045E4647275A097440F32D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/UpJulY3TFBSfELoxlyGEelOt58E.roa
Signing time: Wed 23 Jul 2025 20:18:05 +0000
ROA not before: Wed 23 Jul 2025 20:18:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 5.83.153.0/24 maxlen: 24
5.175.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:ef:a1:06:a3:04:5e:46:47:27:5a:09:74:40:f3:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 23 20:18:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52926e958dd314149f10ba319721847a53ade7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:93:9b:b3:97:30:b0:1b:52:e0:dc:03:2a:59:
75:84:a1:97:50:c1:37:82:f3:ed:9d:18:ee:ca:82:
9a:e4:b1:5c:15:1b:8e:3e:c5:58:f5:21:e9:2d:75:
d4:39:81:ce:23:6c:89:9d:cf:e6:b1:80:f9:a1:37:
33:b0:45:b0:55:38:84:a9:19:f6:5b:e5:2f:cf:3d:
e8:d2:31:18:b1:b0:47:1f:e1:7f:72:54:7d:34:0d:
ce:45:d6:49:7d:a7:04:85:dd:9d:21:02:d8:d8:e0:
9c:8e:4b:45:c5:2c:f9:fc:a3:18:15:94:ff:0f:3a:
10:0a:55:fb:39:e1:c7:f0:5d:4a:c8:bc:ca:cb:c4:
d8:e8:9e:14:24:20:56:9e:08:f5:8c:20:e7:c1:e5:
01:91:d6:cb:24:dc:35:87:da:8d:0d:e1:29:2a:9c:
61:8f:29:48:f0:e4:cc:25:6f:f8:91:fa:ff:04:30:
47:47:f4:5b:6b:0a:92:f4:54:0d:f7:82:ba:15:bb:
db:8b:d2:88:4a:ba:5f:60:49:67:7e:d8:66:5e:92:
48:85:a7:86:2c:93:13:39:71:a6:4f:98:c4:8f:06:
ec:b8:08:cf:f8:cf:9f:46:39:99:ad:4b:b5:07:18:
ce:51:b6:1b:f9:2c:b4:b0:5c:93:ed:8d:73:f3:e3:
27:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:92:6E:95:8D:D3:14:14:9F:10:BA:31:97:21:84:7A:53:AD:E7:C1
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/UpJulY3TFBSfELoxlyGEelOt58E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.153.0/24
5.175.195.0/24
Signature Algorithm: sha256WithRSAEncryption
42:ca:40:e4:a2:0a:5e:9b:2b:7e:c5:98:e8:d0:cf:7c:ab:1e:
6a:e1:76:04:d5:3a:c9:d4:c0:87:7b:43:cc:80:f8:d3:c5:0e:
72:89:87:77:2c:29:b6:7b:c8:3e:cd:7d:68:2a:c4:27:53:8f:
59:ee:19:88:84:98:ad:a6:64:03:57:83:70:72:de:d1:bb:4d:
92:38:75:cd:a5:71:69:cf:16:f9:64:5f:93:d5:2b:99:bd:0b:
80:a8:19:11:02:73:fb:db:2e:1b:79:34:fc:18:74:4b:fe:9e:
be:2c:eb:65:f9:7b:e0:e4:f7:68:a0:aa:bc:08:fb:cd:70:c3:
95:00:e5:cd:5c:42:00:66:e2:23:7b:d9:36:53:be:96:78:71:
b0:ab:73:53:47:d0:40:dd:90:6a:76:4f:54:64:cc:71:4f:bd:
0e:5d:0e:24:ae:15:16:0f:6f:98:46:47:c6:04:18:ff:05:8c:
6c:b8:6a:5e:53:b5:f9:e7:11:86:11:af:5f:54:27:5f:56:79:
bc:33:9e:3c:ba:97:df:85:93:ad:2d:b7:1b:41:ea:ee:89:a8:
98:06:49:b3:af:b9:13:1a:0c:83:c3:cc:1a:19:c5:08:17:8c:
32:12:80:a0:04:e0:f6:e0:4d:b6:79:2a:19:36:b5:0e:73:8f:
c8:71:95:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:04:05 2025 by rpki-client