Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_IFHOa-Ro09LFAscBMdTN6fjRzA.roa
File: _IFHOa-Ro09LFAscBMdTN6fjRzA.roa (raw, json)
Hash identifier: VyOITQW05hE+B+1FiTeFY9tQbRiKTS7FRdG9MGfF1c8=
Subject key identifier: FC:81:47:39:AF:91:A3:4F:4B:14:0B:1C:04:C7:53:37:A7:E3:47:30
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019861B32F1876463C53B690B2C169BB4081
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_IFHOa-Ro09LFAscBMdTN6fjRzA.roa
Signing time: Thu 31 Jul 2025 18:16:29 +0000
ROA not before: Thu 31 Jul 2025 18:16:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134465
IP address blocks: 5.231.93.0/24 maxlen: 24
94.249.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 07:37:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:61:b3:2f:18:76:46:3c:53:b6:90:b2:c1:69:bb:40:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 31 18:16:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc814739af91a34f4b140b1c04c75337a7e34730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bf:9b:7c:b3:2d:cb:92:6c:6a:be:57:21:cb:
9b:04:ec:7e:4e:17:d6:63:42:8d:7c:75:ab:27:e8:
90:da:0f:18:60:cc:4c:42:3c:1d:ce:8a:53:88:34:
55:6c:55:38:5c:be:9b:0f:50:fd:d3:6c:b8:84:d0:
db:de:bd:d2:6f:f2:28:d8:91:37:1f:bd:7f:e9:79:
74:e6:3f:40:d8:75:5c:76:cf:ff:c2:36:1f:57:7e:
9b:ea:24:bc:1c:04:bc:bd:15:b5:56:37:9d:8f:2b:
a1:c3:27:70:e1:8f:a6:f4:29:d3:48:48:1f:ff:71:
d1:58:95:f5:4f:99:1e:57:c4:b4:db:84:a0:40:ad:
0e:94:2e:18:ae:15:23:8c:07:52:c6:1a:f3:e6:e7:
7b:8d:1d:6e:ae:8d:8f:1e:7d:e2:aa:42:0c:58:ab:
ea:0e:78:a4:6e:e1:fd:b8:df:f1:15:6b:da:6b:9f:
d1:d6:34:4d:b2:0f:d4:39:e2:14:0e:35:be:42:1f:
0a:77:ba:a3:18:9d:0a:24:ca:93:ff:bc:65:53:b6:
5c:9d:ac:27:54:ef:31:8e:20:ea:28:23:c8:5c:8a:
0f:7a:bd:a2:75:f0:44:43:48:a7:a4:e4:2a:b0:ab:
f7:41:42:09:49:86:82:7f:37:75:39:9c:26:3d:17:
81:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:81:47:39:AF:91:A3:4F:4B:14:0B:1C:04:C7:53:37:A7:E3:47:30
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_IFHOa-Ro09LFAscBMdTN6fjRzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.93.0/24
94.249.151.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:32:4b:1c:cb:97:76:0c:45:e8:3d:fb:b6:93:b9:7d:61:e7:
74:e8:dd:cf:4f:88:dc:0e:31:9b:a3:2b:1e:ab:dd:23:16:5a:
2c:7d:f1:0a:a4:6e:23:6e:13:a7:84:e7:b6:e3:e3:a9:ec:58:
a9:05:80:d5:28:7f:da:7d:7a:37:94:b0:7f:fc:48:e0:82:fc:
ff:b9:3a:bc:e7:3a:76:e0:ef:db:91:a2:23:4c:08:40:55:e1:
81:51:4f:64:e4:68:16:a6:d5:e1:ca:41:26:45:07:7d:39:9f:
ca:aa:c4:69:1d:d6:41:37:36:82:e5:9f:af:03:5b:0c:ff:c0:
f2:7c:01:d2:b0:fa:13:51:78:08:f9:66:74:c9:ad:be:9a:6f:
e8:0f:db:1c:1f:66:19:69:6b:b6:62:ef:7a:a5:d5:8e:0d:ef:
34:28:15:c4:e2:a0:4e:09:22:07:9c:35:6f:ff:20:96:08:bd:
a8:7f:05:62:8e:da:c7:09:6e:63:b6:49:a3:63:ee:9c:bf:e0:
4c:72:d9:8d:3c:d6:8f:9f:fc:d0:49:88:16:b4:94:64:e1:23:
ec:80:11:9b:e1:cb:e0:22:6a:cf:97:39:c4:ca:5e:bc:6f:6b:
2c:3f:e3:3b:f1:b1:a8:b8:92:31:bb:3a:39:05:ed:cb:f0:94:
9d:70:94:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:02:18 2025 by rpki-client