Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/v7NCWVBpnKXYaUlxsehECjGMQFI.roa
File: v7NCWVBpnKXYaUlxsehECjGMQFI.roa (raw, json)
Hash identifier: bYLwzhQc02cb5UxVjNjDtacT3CnDd5fUneR8PxqgX08=
Subject key identifier: BF:B3:42:59:50:69:9C:A5:D8:69:49:71:B1:E8:44:0A:31:8C:40:52
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019A29FE02383BEBEC652CDF0F1378813D73
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/v7NCWVBpnKXYaUlxsehECjGMQFI.roa
Signing time: Tue 28 Oct 2025 08:45:03 +0000
ROA not before: Tue 28 Oct 2025 08:45:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49581
IP address blocks: 5.83.128.0/24 maxlen: 24
5.83.131.0/24 maxlen: 24
5.83.132.0/24 maxlen: 24
5.175.216.0/24 maxlen: 24
5.175.218.0/24 maxlen: 24
5.175.219.0/24 maxlen: 24
5.231.26.0/24 maxlen: 24
5.231.105.0/24 maxlen: 24
89.106.69.0/24 maxlen: 24
89.106.71.0/24 maxlen: 24
94.249.175.0/24 maxlen: 24
217.69.167.0/24 maxlen: 24
2a02:2fc0:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:fe:02:38:3b:eb:ec:65:2c:df:0f:13:78:81:3d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 28 08:45:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfb3425950699ca5d8694971b1e8440a318c4052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:66:c0:e6:f2:ec:8f:88:70:96:dd:e9:36:42:
bf:00:f5:93:23:1f:8d:d7:d9:f1:24:65:8a:f3:8b:
21:8f:dc:f2:a7:55:d0:b4:90:24:4f:f7:44:99:50:
72:32:20:f2:eb:4b:33:80:4b:ad:f4:6d:44:a1:32:
84:64:66:97:ed:19:ce:9b:a8:ba:34:0c:9d:75:c9:
c2:d0:6b:e1:a4:3d:6a:44:de:77:85:1c:57:82:cc:
79:e5:c1:9f:99:30:98:a0:ad:ec:cc:2a:63:21:8c:
c0:a1:41:2f:e9:0d:6f:e8:d3:0d:86:3a:d7:45:8e:
eb:17:27:e5:35:ea:f7:c3:b5:c6:fc:d2:55:7b:21:
01:ba:09:ef:b9:d1:83:31:4f:52:99:68:9b:01:ae:
b1:ab:ec:37:36:27:f1:ac:75:ee:80:de:35:32:be:
42:1e:40:5e:3f:bf:14:de:e0:e2:a8:4a:91:0a:78:
08:99:1a:e1:b6:9b:70:51:b9:7c:46:91:b3:76:a8:
c2:8d:6c:72:94:ba:35:4b:7a:1c:95:59:99:55:a9:
0c:60:36:cd:7a:8f:d7:16:e5:26:d5:07:9b:c5:1e:
16:71:82:3a:f3:46:90:9e:e5:9a:ca:cf:12:04:a9:
3c:68:e8:d4:b6:77:cc:3d:22:85:d1:7d:0b:77:33:
a8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B3:42:59:50:69:9C:A5:D8:69:49:71:B1:E8:44:0A:31:8C:40:52
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/v7NCWVBpnKXYaUlxsehECjGMQFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/24
5.83.131.0-5.83.132.255
5.175.216.0/24
5.175.218.0/23
5.231.26.0/24
5.231.105.0/24
89.106.69.0/24
89.106.71.0/24
94.249.175.0/24
217.69.167.0/24
IPv6:
2a02:2fc0:11::/48
Signature Algorithm: sha256WithRSAEncryption
09:7c:73:c4:13:6d:6c:a5:40:4b:9c:94:a7:ca:a9:26:79:a8:
ad:ae:7d:88:65:82:bb:c1:6e:22:6d:48:95:c0:9a:0c:a7:c3:
5c:8d:0d:55:d0:07:88:ab:9d:a3:ea:a6:39:af:78:44:48:8d:
f3:86:b2:eb:64:a0:6b:9d:ac:04:9f:04:fb:08:c2:0f:cc:4d:
f7:c3:3f:a7:7f:a9:3b:04:78:a5:65:7b:ca:5d:b4:1d:28:2c:
fb:d7:14:66:fe:eb:5a:ef:d1:55:88:80:16:2a:5a:f2:4d:a5:
a2:7c:27:99:ce:f1:1c:ff:21:23:e7:29:fb:5a:bf:08:ee:0f:
04:6f:3f:75:37:b1:6a:b3:5d:2f:ed:61:38:b6:8d:d8:d0:30:
57:e4:6e:3b:e9:f9:55:b7:29:ef:f9:91:64:7d:4c:c1:da:fb:
b3:c5:8a:01:31:d8:04:c8:77:c2:87:a4:a3:4d:08:3f:74:9a:
11:6b:37:d5:bd:88:ff:4c:53:e0:63:e4:81:b3:65:51:fd:fd:
cb:68:fd:f2:33:f8:68:6d:0a:dd:bd:a3:63:a0:bd:36:3e:86:
40:33:53:54:e9:1a:63:ba:fb:80:42:41:a0:01:c3:c3:0e:a0:
a1:85:6c:a2:85:15:c3:8f:7d:c1:de:58:a3:97:0b:e0:32:11:
76:40:44:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:02:04 2025 by rpki-client