Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XMwdBref6E-ko-FveD_n7h1a9wg.roa
File: XMwdBref6E-ko-FveD_n7h1a9wg.roa (raw, json)
Hash identifier: VZYtJN6iSeFV10YkbirdblhRTA+G5j8AuyLQ5Z2LVDo=
Subject key identifier: 5C:CC:1D:06:B7:9F:E8:4F:A4:A3:E1:6F:78:3F:E7:EE:1D:5A:F7:08
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019A4AC4CFA5A29F1E9BB9DC23D12BCD90A8
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XMwdBref6E-ko-FveD_n7h1a9wg.roa
Signing time: Mon 03 Nov 2025 17:30:03 +0000
ROA not before: Mon 03 Nov 2025 17:30:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210537
IP address blocks: 5.83.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4a:c4:cf:a5:a2:9f:1e:9b:b9:dc:23:d1:2b:cd:90:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 3 17:30:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ccc1d06b79fe84fa4a3e16f783fe7ee1d5af708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:39:e3:6a:41:89:3e:fe:fe:f4:c2:e1:24:4d:
b7:a1:45:55:e9:b3:ad:64:0d:e8:91:f9:3d:a0:88:
6c:f6:68:1e:b5:0c:79:bf:be:67:bd:6f:70:96:73:
a8:93:eb:31:3e:1f:26:a1:e2:9e:c4:f7:2e:c0:ef:
ba:58:21:2e:9e:ae:37:61:7b:3b:16:58:90:47:56:
13:87:1f:2a:12:cb:ff:71:73:3a:4f:18:5f:87:ab:
f6:c2:7c:d2:56:ba:d9:51:42:42:64:af:83:6b:1c:
b5:87:5b:ed:a8:cc:b2:28:1b:d0:01:94:7a:4f:6d:
62:97:68:4c:46:35:b2:ee:b2:94:62:a6:1c:31:9e:
2a:1d:a7:5d:aa:a9:fa:f1:c9:1e:21:51:c6:a9:60:
90:a6:eb:8b:44:1a:08:46:eb:97:af:da:b6:12:28:
56:22:14:85:a2:d2:4a:c0:d9:16:c0:07:65:ae:a0:
58:48:ea:d4:da:d7:f6:dd:d4:5a:1c:96:43:db:18:
78:a1:06:f4:2b:32:b8:36:de:37:58:ef:2c:bd:83:
4c:68:18:26:ef:93:bf:6c:72:e4:0c:8f:bd:61:c3:
1d:f4:43:94:0f:f1:a3:ff:77:b9:58:3d:4d:3b:be:
ee:14:45:ea:61:93:d8:76:c3:a5:4b:67:ca:41:22:
d7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CC:1D:06:B7:9F:E8:4F:A4:A3:E1:6F:78:3F:E7:EE:1D:5A:F7:08
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XMwdBref6E-ko-FveD_n7h1a9wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.148.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:d9:2f:07:5d:e6:28:12:a2:0b:29:7d:34:1e:b4:2f:98:0a:
99:92:82:2f:1b:1a:7c:9c:c6:f7:bb:88:bd:e4:fd:bf:40:21:
98:02:57:2e:d5:fc:a4:7e:5b:b1:c2:b2:33:a4:53:e6:c5:8a:
e4:82:84:24:59:e2:98:40:3d:f2:5f:27:ba:ac:cc:ec:bf:df:
6c:4b:a2:e2:90:89:74:7f:96:bc:b8:e8:6f:10:64:07:4c:52:
12:6e:fc:9a:84:ef:c8:73:b6:26:75:e4:69:8d:f1:95:dd:47:
72:84:ab:d7:e5:53:ba:04:f9:69:ec:b9:a1:90:f5:f3:5d:42:
35:0e:35:f2:ae:f2:69:1c:a5:05:b6:66:47:1b:46:e5:09:58:
fa:0b:2c:33:04:9b:2b:0b:bc:c0:c9:89:0a:0e:99:70:21:36:
24:aa:83:5f:b3:f5:91:c4:8a:63:f7:89:eb:3d:e6:78:28:e3:
49:d7:94:2a:d4:0b:cf:ab:fc:9f:15:06:b3:aa:05:fc:7f:b7:
d8:ae:a2:b7:5a:06:d1:e9:0b:67:9f:51:34:34:58:1b:6e:5c:
6e:b5:b6:97:e6:92:82:35:e2:e8:90:42:1e:d5:02:a2:4e:6f:
25:e5:57:6d:f3:27:12:c0:c1:8a:c1:11:15:e2:c6:da:22:9d:
00:32:02:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:02:01 2025 by rpki-client