Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/i8-3ji2Rkd3P6VRi0m9fQ0L0nDk.roa
File: i8-3ji2Rkd3P6VRi0m9fQ0L0nDk.roa (raw, json)
Hash identifier: mQDPTOoQFsg4WUdb3ChYVONLq0iQg9ehj9NozuTRM5w=
Subject key identifier: 8B:CF:B7:8E:2D:91:91:DD:CF:E9:54:62:D2:6F:5F:43:42:F4:9C:39
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019A4B4152E6F273E7F962325922DFC3CD50
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/i8-3ji2Rkd3P6VRi0m9fQ0L0nDk.roa
Signing time: Mon 03 Nov 2025 19:46:03 +0000
ROA not before: Mon 03 Nov 2025 19:46:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206996
IP address blocks: 5.83.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:41:52:e6:f2:73:e7:f9:62:32:59:22:df:c3:cd:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 3 19:46:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8bcfb78e2d9191ddcfe95462d26f5f4342f49c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b7:c3:58:93:0c:ff:4d:0d:50:6a:83:8b:e5:
0f:aa:4a:78:72:9a:9f:d1:37:fe:8c:a6:a1:9c:6f:
2f:e0:75:46:46:7d:08:d3:ac:12:99:98:a8:df:99:
1d:99:af:0e:03:8b:82:3d:4f:81:ac:4b:17:e1:34:
d2:fc:6b:22:88:b4:e2:10:e6:09:ef:ce:8f:1c:dd:
19:e4:4f:50:9b:d0:12:10:17:c6:2e:7f:b6:1b:3d:
da:84:77:95:bb:7f:47:ee:69:4c:94:30:32:0a:87:
26:30:2f:a4:73:49:3e:bc:a0:e7:5b:31:45:73:4f:
f6:53:d7:80:66:ef:ee:db:18:ec:2b:e8:c7:49:14:
70:8c:8b:c9:04:8e:1f:8b:da:a6:5f:e7:62:d9:70:
d6:2f:23:6a:8d:38:2d:cb:11:7e:21:aa:df:e3:90:
aa:5e:6b:8a:ad:9a:ad:2a:0f:db:ec:26:1e:cc:60:
98:df:96:3e:af:f3:5d:18:44:48:bb:41:a9:ea:bf:
bb:d3:0f:63:70:b3:30:8d:f6:6c:eb:b1:e5:f0:52:
24:b3:44:3f:50:7e:6a:6b:21:7a:ec:50:33:92:ae:
3d:71:73:07:f0:03:d4:ad:e5:36:d3:6a:b1:32:57:
49:e6:b0:5d:95:84:08:ab:85:5f:17:58:b9:8e:51:
fd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CF:B7:8E:2D:91:91:DD:CF:E9:54:62:D2:6F:5F:43:42:F4:9C:39
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/i8-3ji2Rkd3P6VRi0m9fQ0L0nDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.138.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:da:2d:b6:a7:a9:e6:6f:6d:5d:09:99:cf:05:42:f1:d7:c8:
dc:c9:09:06:36:2c:85:d0:e2:25:1a:23:87:8d:48:4d:b7:34:
fa:2c:a9:5b:34:c0:18:55:3f:84:38:24:df:76:fd:04:3f:ab:
5b:f5:33:27:e7:31:69:f5:82:0b:be:16:60:b8:21:1a:8c:ae:
ed:70:0b:1c:5a:91:2d:b6:f6:5c:e9:5b:92:da:be:ef:03:05:
5e:f7:04:d1:44:5b:5e:67:da:92:65:04:d7:25:d4:ae:f8:55:
e3:93:47:9a:31:6f:38:de:79:28:93:3f:af:38:b3:a3:c8:63:
ad:eb:e7:24:84:42:63:c1:a4:63:a6:bf:8d:28:1d:12:4b:03:
6e:67:57:63:f0:e5:da:27:c3:f2:6e:af:a7:35:05:d8:b2:75:
13:2b:1a:f1:9b:fe:88:86:98:fa:c8:8c:d2:48:45:49:28:35:
6c:e5:a3:e6:54:c6:0a:b0:8b:b6:46:6a:f5:6e:41:df:04:e4:
a7:30:bf:24:dc:8a:47:20:fa:56:48:bb:f2:fb:1b:ce:47:d0:
63:52:bd:cb:a9:54:98:fd:8f:69:82:57:3e:a9:2e:8b:3b:9d:
94:9c:b6:fc:5e:6b:ae:49:7d:e6:37:66:63:51:02:0d:64:fb:
61:c9:f7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:24:50 2025 by rpki-client