Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/5s050sybnU_qDLTadTW4Cbc1oa4.roa
File: 5s050sybnU_qDLTadTW4Cbc1oa4.roa (raw, json)
Hash identifier: ul22+y65UhFi/PV4KsevDJSKijOmKuUMMb7YcjmOBq0=
Subject key identifier: E6:CD:39:D2:CC:9B:9D:4F:EA:0C:B4:DA:75:35:B8:09:B7:35:A1:AE
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 0199C3E7E39AD6E5D9713E1394772F930ADE
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/5s050sybnU_qDLTadTW4Cbc1oa4.roa
Signing time: Wed 08 Oct 2025 12:59:38 +0000
ROA not before: Wed 08 Oct 2025 12:59:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213676
IP address blocks: 45.133.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:e7:e3:9a:d6:e5:d9:71:3e:13:94:77:2f:93:0a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Oct 8 12:59:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6cd39d2cc9b9d4fea0cb4da7535b809b735a1ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8c:b6:e7:5b:d6:64:d5:3a:79:d4:ec:94:fd:
8f:2f:31:ca:4a:0c:35:be:78:75:a8:ba:6c:2c:e8:
7a:30:fe:5c:25:d9:80:0e:52:f6:3a:74:5a:74:50:
59:1d:e0:58:cc:7f:b6:8b:89:be:94:97:57:12:d2:
4e:24:2c:93:ff:76:e9:3a:85:6b:2e:d0:d3:ab:26:
63:c1:85:b3:e8:70:95:98:e2:73:d4:c5:1e:14:2a:
82:b1:6e:94:56:ec:3b:9d:20:2e:96:95:e1:03:44:
59:25:c9:28:ea:f8:de:63:be:93:35:54:78:5e:08:
66:96:65:cd:48:0d:72:61:70:9f:17:6a:35:0b:2f:
23:48:1f:78:ca:8e:1c:2f:65:31:97:66:da:69:51:
59:3d:e9:76:11:80:94:79:6c:43:59:62:fa:68:81:
1d:4c:e1:a6:82:58:f5:4f:78:1c:39:6a:b9:4b:b1:
69:4f:6b:0d:ca:7e:7d:ec:66:e4:f1:31:f8:87:fd:
03:65:f1:53:b3:fe:c1:1f:43:00:c7:c2:9e:b6:4f:
97:c4:c9:b7:b7:ae:19:9c:64:63:a5:3f:3c:87:42:
bc:1e:83:2d:28:1f:6a:17:55:fa:b4:91:b7:70:a1:
04:69:90:61:b5:fb:3a:dc:67:d5:74:c0:88:8a:99:
6c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CD:39:D2:CC:9B:9D:4F:EA:0C:B4:DA:75:35:B8:09:B7:35:A1:AE
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/5s050sybnU_qDLTadTW4Cbc1oa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.38.0/24
Signature Algorithm: sha256WithRSAEncryption
08:da:b6:f1:1c:61:8e:cb:70:7e:66:4d:d4:e6:dd:aa:b6:29:
13:af:8c:9f:7c:d2:53:61:28:ee:8e:85:63:65:ca:97:0c:51:
2e:89:cc:ed:5d:92:33:ae:6d:e7:e8:24:ab:a2:4b:90:6e:38:
59:ee:b6:3d:33:38:f8:fc:a3:ee:61:da:ea:5d:96:36:35:a5:
b0:e9:d9:bc:4e:75:80:73:36:a4:23:5b:d8:e1:0d:f0:a8:fc:
e6:ce:33:75:ec:1b:11:ac:51:1b:16:b2:5a:66:3c:22:e9:49:
c4:17:53:15:70:66:9d:b8:8f:e8:9c:98:ea:c3:0d:8e:3a:ec:
d2:3f:b2:76:5e:05:ca:85:4f:ef:3f:4e:5b:97:a3:6b:f6:57:
af:15:71:88:f9:c4:05:f9:db:2e:b4:7b:f1:20:c9:72:5f:4d:
72:22:04:7d:9a:c2:24:3c:7c:18:5c:3f:03:d4:c5:ea:47:f0:
6f:4b:d6:aa:82:cc:9f:ad:6f:ce:71:ae:8c:5d:69:ec:31:d2:
da:3e:90:2b:da:42:fe:12:b6:68:34:bf:0a:eb:98:34:4d:61:
cf:4f:fc:2e:60:92:a4:84:bd:58:b8:e1:1a:48:00:b9:43:a5:
8f:74:fb:da:ad:d0:c6:38:c6:7a:fe:35:a6:ce:58:b9:4b:c0:
9d:f0:9b:07
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZnD5+Oa1uXZcT4TlHcvkwreMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMGRhNDNiNGE1ZDNkYjc4YmEzZjc3NGU1YjMxYjc3MDM3
MjAyZDUwHhcNMjUxMDA4MTI1OTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmNkMzlkMmNjOWI5ZDRmZWEwY2I0ZGE3NTM1YjgwOWI3MzVhMWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIy251vWZNU6edTslP2PLzHKSgw1
vnh1qLpsLOh6MP5cJdmADlL2OnRadFBZHeBYzH+2i4m+lJdXEtJOJCyT/3bpOoVr
LtDTqyZjwYWz6HCVmOJz1MUeFCqCsW6UVuw7nSAulpXhA0RZJcko6vjeY76TNVR4
XghmlmXNSA1yYXCfF2o1Cy8jSB94yo4cL2Uxl2baaVFZPel2EYCUeWxDWWL6aIEd
TOGmglj1T3gcOWq5S7FpT2sNyn597Gbk8TH4h/0DZfFTs/7BH0MAx8Ketk+XxMm3
t64ZnGRjpT88h0K8HoMtKB9qF1X6tJG3cKEEaZBhtfs63GfVdMCIiplsqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFObNOdLMm51P6gy02nU1uAm3NaGuMB8GA1UdIwQY
MBaAFK0NpDtKXT23i6P3dOWzG3cDcgLVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTct
YzUxNWYzNTRjYzVhLzEvNXMwNTBzeWJuVV9xRExUYWRUVzRDYmMxb2E0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTctYzUxNWYzNTRjYzVh
LzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYUmMA0G
CSqGSIb3DQEBCwUAA4IBAQAI2rbxHGGOy3B+Zk3U5t2qtikTr4yffNJTYSjujoVj
ZcqXDFEuicztXZIzrm3n6CSrokuQbjhZ7rY9Mzj4/KPuYdrqXZY2NaWw6dm8TnWA
czakI1vY4Q3wqPzmzjN17BsRrFEbFrJaZjwi6UnEF1MVcGaduI/onJjqww2OOuzS
P7J2XgXKhU/vP05bl6Nr9levFXGI+cQF+dsutHvxIMlyX01yIgR9msIkPHwYXD8D
1MXqR/BvS9aqgsyfrW/Oca6MXWnsMdLaPpAr2kL+ErZoNL8K65g0TWHPT/wuYJKk
hL1YuOEaSAC5Q6WPdPvardDGOMZ6/jWmzli5S8Cd8JsH
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:09:11 2025 by rpki-client