Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_jyGdjcczPEm6ZixUzXE65X03bg.roa
File: _jyGdjcczPEm6ZixUzXE65X03bg.roa (raw, json)
Hash identifier: Ahn5UbRLyEghYdFvGz41tc3MMfeyE3uLhwiotB0C5m0=
Subject key identifier: FE:3C:86:76:37:1C:CC:F1:26:E9:98:B1:53:35:C4:EB:95:F4:DD:B8
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019A1634641F55BAE3CDA4E9775F13915202
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_jyGdjcczPEm6ZixUzXE65X03bg.roa
Signing time: Fri 24 Oct 2025 12:32:03 +0000
ROA not before: Fri 24 Oct 2025 12:32:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36351
IP address blocks: 5.83.159.0/24 maxlen: 24
89.144.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:16:34:64:1f:55:ba:e3:cd:a4:e9:77:5f:13:91:52:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 24 12:32:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe3c8676371cccf126e998b15335c4eb95f4ddb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6b:0f:58:27:a3:b0:b1:7e:60:3f:2a:f0:ad:
f3:94:67:0f:bf:38:b2:f3:20:1a:4d:97:b2:dd:c2:
fa:b3:7f:ea:f0:1f:7c:33:52:c8:5c:71:d4:6f:76:
37:3d:c3:af:ff:08:76:8c:6c:04:65:24:53:bb:40:
af:57:bc:a5:e8:a7:d0:42:2c:87:58:b8:2b:2e:bd:
33:77:21:1e:6c:b1:2f:d5:9a:3d:79:80:e0:0b:96:
cf:2f:e2:d2:56:7f:fa:87:e8:ad:dd:22:1d:93:69:
f9:ee:82:8f:05:50:a8:7e:f5:c7:37:58:1d:92:1e:
1b:ce:ad:70:2c:1e:58:5e:e7:76:17:af:4a:58:9c:
bd:4b:a4:60:b0:6f:31:21:c9:b6:70:49:86:99:cc:
a9:50:a5:10:93:4f:74:53:3f:4c:1c:22:dd:67:47:
63:12:09:8f:8d:10:47:6a:ce:00:e0:7e:ab:f4:c3:
03:17:32:e6:cb:6d:9a:24:c1:00:ed:82:72:40:62:
25:55:a6:15:e3:2d:27:82:eb:86:91:d1:b2:8f:64:
58:7e:a1:71:06:9c:af:51:9f:e0:4e:39:95:ce:3e:
5f:12:d2:33:f0:ef:4b:22:69:dd:53:27:c0:80:c0:
c8:ac:f7:97:7d:6c:95:56:26:41:4b:c4:4f:79:d7:
49:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3C:86:76:37:1C:CC:F1:26:E9:98:B1:53:35:C4:EB:95:F4:DD:B8
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_jyGdjcczPEm6ZixUzXE65X03bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.159.0/24
89.144.43.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:21:4d:c2:c4:f2:94:77:96:e8:2a:0f:85:01:3b:9c:78:a1:
fe:6b:66:70:0a:7c:27:6d:5e:96:e3:a1:9e:34:3e:d0:cd:e8:
f6:5d:8c:7d:e0:86:34:36:e4:09:3b:5d:60:87:8a:bc:2a:cc:
69:d0:8e:c4:1a:0d:8f:bd:53:df:49:91:d1:27:f0:5f:e6:09:
0a:aa:8c:7f:0a:5d:f8:ed:9e:cc:86:f9:75:b0:a7:6f:ee:cd:
1d:85:d2:66:fd:e7:51:cb:58:50:53:61:e2:98:49:c2:6c:3d:
11:96:1a:25:f7:91:4f:3f:e6:1f:b6:66:47:41:03:08:b3:ea:
a8:84:70:ab:89:97:1e:b8:32:c6:22:57:59:92:85:f7:a6:a2:
7f:91:33:ad:12:48:75:99:ca:7b:ff:62:c6:ae:20:14:66:66:
88:21:5e:4c:9d:ab:2b:36:8e:90:2a:7e:69:cd:ef:42:b0:a6:
58:6c:ac:88:ba:e1:b9:37:fb:e1:b6:c3:0f:55:e1:64:d9:e0:
eb:6c:bf:a7:95:1f:0d:6a:e8:35:db:17:9d:31:4f:e4:6e:c6:
9d:e7:ed:85:48:d9:de:16:e7:96:4c:87:c3:d1:d4:d7:6c:8c:
d2:fd:90:b0:17:01:bb:a5:5c:2a:92:31:93:3b:d3:ee:ed:04:
da:28:23:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:28:12 2025 by rpki-client