Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sc9Xcte3c2ZmhadvARQZzA0nOYc.roa
File: sc9Xcte3c2ZmhadvARQZzA0nOYc.roa (raw, json)
Hash identifier: +1+MQ/4Eb/llyRPIV0yXCptP6L8LHltFR8IGK3c81Ng=
Subject key identifier: B1:CF:57:72:D7:B7:73:66:66:85:A7:6F:01:14:19:CC:0D:27:39:87
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019870740B5D3D856D770A8582F06EE856AC
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sc9Xcte3c2ZmhadvARQZzA0nOYc.roa
Signing time: Sun 03 Aug 2025 15:01:49 +0000
ROA not before: Sun 03 Aug 2025 15:01:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215357
IP address blocks: 5.231.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:70:74:0b:5d:3d:85:6d:77:0a:85:82:f0:6e:e8:56:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 3 15:01:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1cf5772d7b773666685a76f011419cc0d273987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:82:7b:1d:bf:6d:ea:d5:4e:84:f5:61:6b:bf:
50:b0:71:90:09:2a:a7:c3:5f:21:25:05:c6:b4:d6:
51:bd:66:1b:44:73:0f:aa:db:33:f0:c6:c5:39:97:
f5:74:d8:4c:df:bd:ab:15:3a:47:db:d0:02:63:0a:
1b:84:75:73:ce:8c:53:d5:65:53:8f:10:ff:3c:5f:
e4:96:25:8e:7b:2b:5f:9e:52:9e:d3:95:e1:62:0a:
9f:c9:c2:ef:1c:1d:c8:0b:86:a3:3c:1a:0c:72:b8:
76:04:60:7a:49:d9:c0:ee:5d:e9:e6:e2:bf:92:02:
7c:9c:e1:46:d2:82:5c:10:7a:e8:78:06:87:60:9f:
a0:1f:ed:9e:3b:8b:9d:74:90:1b:8f:88:a9:07:58:
ba:d7:bf:b5:70:25:d4:8e:7d:1f:7e:b2:3e:eb:ed:
bd:8a:aa:ba:a5:b0:ca:4d:bf:29:92:b5:58:81:4e:
d2:34:41:35:19:04:6b:71:e0:a6:5c:e2:18:93:4e:
8f:62:16:79:4b:a8:44:4e:20:0a:1a:08:a0:cc:ca:
b0:36:1f:a0:c1:f6:fa:d9:33:0e:a4:80:58:ef:2b:
19:a4:b2:4d:b2:bc:77:65:81:d8:8e:12:ff:b0:51:
de:42:7c:1b:4e:6d:3f:73:93:1e:1a:43:32:34:d1:
e2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CF:57:72:D7:B7:73:66:66:85:A7:6F:01:14:19:CC:0D:27:39:87
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sc9Xcte3c2ZmhadvARQZzA0nOYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.207.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:94:17:da:31:5a:a9:39:26:56:30:dd:ce:19:de:c9:8f:9d:
47:ce:97:dd:e9:42:a8:e6:42:71:46:c0:5b:9b:20:2f:48:cf:
01:ce:0c:d1:29:39:df:69:28:21:a8:8d:b7:65:dc:76:8c:96:
f8:55:9c:ac:d9:03:46:f5:ad:eb:2b:11:bd:03:4e:6e:fa:18:
d7:50:db:a0:00:a1:16:43:0d:f8:34:57:03:a4:ce:8c:92:51:
7a:8b:84:cb:77:46:b0:75:13:3f:8f:db:47:3b:50:93:8e:d1:
d8:9d:ef:b3:0e:1c:ab:d9:1b:0c:2f:e8:d1:25:23:a6:d3:9a:
8a:0d:4e:0c:c9:6c:45:ef:72:d6:d1:e1:d0:cd:43:65:b4:a6:
3b:9e:58:cc:5a:da:35:9b:20:2b:31:41:51:07:36:49:4d:9b:
8e:5c:cc:24:10:22:a8:54:2b:68:98:01:8f:e1:b0:e2:c3:21:
a1:3b:6b:20:e3:24:93:ab:53:e4:7d:e2:21:73:79:43:18:c0:
21:bb:c2:eb:98:a2:fc:b2:9c:92:88:64:46:21:7a:ea:5b:f5:
26:12:35:98:45:91:af:0f:f2:78:75:ab:b9:cd:21:eb:75:18:
a0:58:60:42:0f:79:25:ec:49:ca:4e:08:60:49:20:32:c1:99:
f3:a1:6b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:02:11 2025 by rpki-client