Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Uzxy6qpiBn-QpZnfETxh2862gW8.roa
File: Uzxy6qpiBn-QpZnfETxh2862gW8.roa (raw, json)
Hash identifier: E4mClhsRmfqXMUroR9rG2B+bvk2JXp9tCxeW+Y70ZVs=
Subject key identifier: 53:3C:72:EA:AA:62:06:7F:90:A5:99:DF:11:3C:61:DB:CE:B6:81:6F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01974539620AFED662973094103C2D1C40EA
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Uzxy6qpiBn-QpZnfETxh2862gW8.roa
Signing time: Fri 06 Jun 2025 12:31:17 +0000
ROA not before: Fri 06 Jun 2025 12:31:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207695
IP address blocks: 5.231.56.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
89.144.25.0/24 maxlen: 24
89.144.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:39:62:0a:fe:d6:62:97:30:94:10:3c:2d:1c:40:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 6 12:31:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=533c72eaaa62067f90a599df113c61dbceb6816f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:56:e0:dd:7f:e1:b6:5c:a0:21:8a:c9:c0:65:
2f:9f:80:09:bb:01:97:a1:4c:fb:5d:cd:89:8c:4f:
0a:2b:66:ee:61:7c:af:ce:6e:98:ab:a1:84:1b:32:
91:47:05:2d:98:40:d5:b6:e2:52:c8:e0:e2:14:e7:
a7:0f:90:8c:28:62:3d:cd:57:ee:3b:52:16:ca:27:
4c:78:4a:89:0d:09:45:d4:25:ac:35:f8:a7:c4:e3:
11:8c:fd:04:fa:ec:4c:22:b6:9c:d2:88:16:e7:17:
e4:37:30:fa:b5:d3:01:59:40:4e:05:cc:8e:b5:04:
b0:1e:00:58:89:a3:f3:c0:16:97:65:40:ea:5b:b8:
40:e7:cd:3f:31:57:7b:49:e6:bc:bc:20:94:fe:70:
8e:41:28:bb:b1:1a:05:3a:24:ca:f5:39:2e:f9:25:
1b:42:13:b4:fa:13:33:4b:df:c9:41:c3:c3:6a:07:
85:09:68:a4:d8:54:8a:3e:7b:79:c1:a0:4f:91:49:
b1:35:ec:fb:ad:31:1a:57:a8:ef:8a:e4:ee:34:50:
49:b4:62:a1:52:68:fb:49:85:e2:25:83:45:13:9e:
3c:4d:8e:2d:b7:92:85:f5:26:89:c9:96:db:74:84:
2f:1a:60:4b:be:b2:4e:f5:dc:c5:24:53:10:8b:0d:
b8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3C:72:EA:AA:62:06:7F:90:A5:99:DF:11:3C:61:DB:CE:B6:81:6F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Uzxy6qpiBn-QpZnfETxh2862gW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.56.0/24
77.90.41.0/24
77.90.52.0/24
89.144.25.0/24
89.144.35.0/24
Signature Algorithm: sha256WithRSAEncryption
69:af:19:37:fa:9a:62:db:ab:84:86:b4:e4:e8:8d:53:0b:b4:
76:6c:fb:bc:a5:24:43:4a:af:41:a4:20:a3:ed:c2:95:e6:08:
89:b2:af:3c:04:11:a5:fe:7e:da:eb:3e:81:40:a7:c9:35:13:
5c:d7:13:78:ce:a6:be:db:02:ce:04:67:43:16:db:6c:c1:c3:
05:b9:d2:db:23:d4:cf:52:e9:fb:9a:30:74:0c:e0:51:06:e3:
a8:6c:27:b1:42:0e:5d:6d:19:3e:e0:87:db:a6:ee:d1:81:ef:
06:25:2f:4e:de:b2:a0:ef:93:4b:f4:14:7a:95:a0:78:3e:3f:
db:82:db:55:83:4d:d5:cc:c4:13:26:42:04:ac:e7:b2:76:dd:
c7:e1:d2:f2:75:31:ee:01:6c:30:ff:eb:18:8d:bd:bb:e6:c2:
2f:9d:1f:f2:84:1d:2d:8c:26:c3:5f:1e:2b:e7:3f:2b:f3:cd:
59:56:00:89:f2:9a:89:07:0d:20:b5:71:d7:fd:5b:bf:08:bd:
ef:19:b2:65:31:02:14:2b:ee:24:b7:5d:25:d4:0c:9f:22:e4:
db:48:cc:e7:da:21:2d:c2:a5:2a:46:3f:c7:0b:ef:4b:72:e9:
4a:37:ab:69:a7:12:35:a3:62:db:82:a0:22:8e:d8:b3:3f:3d:
fd:3a:01:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:41:35 2025 by rpki-client