Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tUk1WcEJwtyRLavz8wWeDVhwZNg.roa
File: tUk1WcEJwtyRLavz8wWeDVhwZNg.roa (raw, json)
Hash identifier: uzlFFT+ORMEhThdnUfaQywssL7yzZgnGTGHEaN6Bt58=
Subject key identifier: B5:49:35:59:C1:09:C2:DC:91:2D:AB:F3:F3:05:9E:0D:58:70:64:D8
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019A4AC4CF032A9627993E06165EA678F554
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tUk1WcEJwtyRLavz8wWeDVhwZNg.roa
Signing time: Mon 03 Nov 2025 17:30:03 +0000
ROA not before: Mon 03 Nov 2025 17:30:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209216
IP address blocks: 5.175.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4a:c4:cf:03:2a:96:27:99:3e:06:16:5e:a6:78:f5:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 3 17:30:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5493559c109c2dc912dabf3f3059e0d587064d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:92:20:bc:03:81:86:b3:ea:02:58:c5:b9:fc:
1d:38:4e:c6:25:2a:c0:db:ce:e0:cd:02:8d:73:1a:
83:85:3c:2e:dd:ae:63:76:64:a1:19:4f:55:79:9f:
89:8d:bc:d0:e7:cf:39:e7:87:a8:5d:cb:c3:d8:e1:
c3:c0:12:f5:c8:88:f3:2a:40:95:68:45:96:e8:7c:
a4:70:bf:a9:d6:c5:e0:d2:dd:91:fa:0d:a5:c9:51:
fd:ca:fb:a4:48:ca:a3:8a:5c:62:f5:59:f3:4a:31:
e4:a5:41:fb:c7:13:c2:78:9a:cd:2d:3a:08:e2:17:
0d:39:1f:32:92:7b:7b:70:14:94:51:07:01:c0:b9:
42:f1:2d:96:63:b2:60:6b:40:77:49:f6:5f:5c:b6:
c4:2e:65:42:9d:3e:ff:ec:69:f4:fd:64:fe:a8:0d:
4c:e9:36:e3:a3:dc:1b:81:45:98:36:a1:4c:65:d3:
93:25:97:bb:d0:e4:3a:75:de:65:a3:da:36:c1:e5:
ab:f0:96:ae:76:3a:50:f5:35:ce:62:1b:c7:2d:e3:
3d:1f:52:58:ca:58:da:c2:0c:86:bb:bc:83:a2:05:
32:d3:33:2f:00:11:c5:89:16:4d:08:f9:88:bd:63:
fb:a4:7d:bd:62:18:22:f1:cb:93:89:88:95:2d:ba:
9f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:49:35:59:C1:09:C2:DC:91:2D:AB:F3:F3:05:9E:0D:58:70:64:D8
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tUk1WcEJwtyRLavz8wWeDVhwZNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.210.0/24
Signature Algorithm: sha256WithRSAEncryption
32:24:cf:ce:03:be:b7:ca:24:d2:f9:c3:ad:a5:cc:f0:b1:7b:
a8:57:68:a1:da:7e:a5:16:2b:b9:04:38:64:fd:6f:94:55:1c:
23:c0:37:17:e6:06:81:bf:3a:4d:8e:db:a2:0d:99:a3:e0:62:
fd:1d:5f:e8:62:81:83:92:bb:21:4b:ef:28:35:8f:45:49:a7:
fc:3a:4b:da:22:5b:b7:26:12:ca:d0:ce:ee:08:47:5c:c6:11:
36:8d:04:2d:1e:69:19:7d:05:c8:1f:49:6d:3d:29:d3:0b:cc:
98:e4:da:64:ef:44:d0:99:b1:2c:7c:5a:b7:e7:19:2a:88:4b:
6c:1f:10:12:75:40:5e:77:0d:29:3f:29:16:aa:fb:21:6d:e2:
c7:e0:1f:f9:ec:ed:37:83:02:9d:21:e4:ec:21:ad:d9:fd:be:
b1:c1:bf:d8:31:88:c5:9b:74:41:74:c3:53:a9:fc:e2:3b:4a:
51:1e:46:99:17:8d:89:67:e3:94:90:b3:ea:f9:a1:48:54:d4:
71:c7:85:49:f0:03:fa:f8:58:5d:2d:a7:dc:9d:5c:b9:22:33:
1f:5d:d0:4b:84:f7:ce:81:c6:97:8a:cb:81:8f:a7:ad:3b:ad:
96:0c:be:68:d4:37:d0:f2:f6:65:80:a2:63:ef:fc:3d:46:65:
58:d5:e5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:46:25 2025 by rpki-client