Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cp_8ZKNS5HAHkMDdV5qK9Vk1OKg.roa
File: cp_8ZKNS5HAHkMDdV5qK9Vk1OKg.roa (raw, json)
Hash identifier: 1bgf3+4ubXrxMKuGmcjjLcPMsrURhc30uCfB70fyXWY=
Subject key identifier: 72:9F:FC:64:A3:52:E4:70:07:90:C0:DD:57:9A:8A:F5:59:35:38:A8
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019763C2297699A7A7404380B209EBE45229
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cp_8ZKNS5HAHkMDdV5qK9Vk1OKg.roa
Signing time: Thu 12 Jun 2025 10:49:18 +0000
ROA not before: Thu 12 Jun 2025 10:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59592
IP address blocks: 5.230.206.0/24 maxlen: 32
5.230.220.0/24 maxlen: 32
5.231.87.0/24 maxlen: 32
5.231.200.0/24 maxlen: 32
185.13.158.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 04:49:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:c2:29:76:99:a7:a7:40:43:80:b2:09:eb:e4:52:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 12 10:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=729ffc64a352e4700790c0dd579a8af5593538a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e0:58:7e:18:ca:7b:88:5d:29:34:4d:7b:81:
7a:5a:8c:a9:55:2a:6e:c1:b5:51:b5:35:50:71:16:
c7:6c:d7:26:d6:3a:2b:e3:20:6e:bd:98:ec:3b:3c:
cb:e1:88:eb:6a:82:05:a1:a5:4b:67:ff:da:e9:e1:
a2:c9:d7:4e:b5:b6:93:59:08:da:b4:8e:26:c6:40:
24:58:37:08:d0:43:52:54:27:9c:0c:5e:82:17:e8:
ca:7a:76:b9:12:a6:9e:1e:d7:3e:22:4c:9a:02:dc:
9c:5e:fb:fa:f3:a1:fa:cd:9c:8e:f4:f7:25:30:18:
28:c7:23:75:04:ff:63:8c:8b:7c:ae:75:84:26:ec:
a1:f0:96:43:e2:94:de:32:b3:4b:ee:88:37:e1:a2:
bb:41:ea:57:d5:9c:b9:da:1f:6c:f9:bd:fd:a7:5a:
2c:de:0e:39:6c:66:ea:61:0a:5c:b0:31:2a:21:af:
cf:26:1a:12:3c:f3:6d:94:fb:f6:04:02:b6:ea:67:
ec:fc:1f:d0:a8:52:11:c3:e4:14:95:04:60:87:c7:
8a:b4:90:e6:22:05:ba:a8:1b:59:34:95:de:52:a4:
49:ac:59:24:9b:54:4e:76:11:ef:91:08:41:15:3a:
da:52:55:60:39:c6:ad:81:ff:ea:d7:c2:20:6e:6b:
1a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9F:FC:64:A3:52:E4:70:07:90:C0:DD:57:9A:8A:F5:59:35:38:A8
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cp_8ZKNS5HAHkMDdV5qK9Vk1OKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.230.206.0/24
5.230.220.0/24
5.231.87.0/24
5.231.200.0/24
185.13.158.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:15:58:a9:49:cb:57:c9:b8:2c:02:81:a7:f5:f2:c5:bb:50:
07:c3:5a:43:ad:2c:83:f2:12:69:45:a2:08:73:bb:22:4f:45:
64:ea:78:e3:a1:c3:2f:2a:58:fa:ac:23:e1:4a:4d:08:7c:b2:
8e:0c:c0:54:60:50:2c:54:3e:97:dd:9b:33:ce:10:08:2e:5d:
45:2f:66:43:8e:4d:97:04:1a:6d:df:8e:b4:3a:31:c0:20:e1:
b3:2e:5a:5b:2e:e0:d4:dd:eb:1c:21:a7:8b:bf:70:99:e6:d4:
4b:dc:92:2e:90:72:0a:64:48:a4:c2:15:f9:d0:29:8a:be:a2:
08:1f:28:eb:17:66:0f:6c:24:81:64:21:4b:1b:c8:a8:2e:10:
58:7b:ac:6c:22:1a:a2:af:cf:be:44:0d:29:61:34:1d:13:40:
b0:d7:c5:e2:c1:e8:22:be:79:e8:d8:ac:d1:13:10:55:bd:08:
49:58:11:5a:39:d3:6a:38:bd:4f:f2:b0:a2:17:85:5a:08:9c:
63:c8:fc:d3:fa:8e:20:5b:f6:38:30:ee:ee:c3:de:8f:00:15:
7a:fd:fc:e7:ee:d7:3c:d1:10:ea:62:b6:41:62:10:b3:92:6d:
22:34:a4:f5:bd:be:0d:61:c9:10:be:9d:5a:31:b1:0b:9e:fa:
88:f2:55:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:04:16 2025 by rpki-client