Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4jG_BASr8tGCf3YTG7e7djVD2mE.roa
File: 4jG_BASr8tGCf3YTG7e7djVD2mE.roa (raw, json)
Hash identifier: 6VD0sY64ulFBhRp8CQhfN7fZNOZhP8fyalFwRR3/DnA=
Subject key identifier: E2:31:BF:04:04:AB:F2:D1:82:7F:76:13:1B:B7:BB:76:35:43:DA:61
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019956609C993807F9ACAA18E99A2DBF8BD5
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4jG_BASr8tGCf3YTG7e7djVD2mE.roa
Signing time: Wed 17 Sep 2025 06:33:16 +0000
ROA not before: Wed 17 Sep 2025 06:33:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211301
IP address blocks: 5.175.249.0/24 maxlen: 24
77.90.57.0/24 maxlen: 24
89.144.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:56:60:9c:99:38:07:f9:ac:aa:18:e9:9a:2d:bf:8b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 17 06:33:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e231bf0404abf2d1827f76131bb7bb763543da61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2e:e1:e9:cf:3a:d4:7e:9c:e0:1b:88:79:ee:
4e:83:14:2b:c5:26:fd:98:c4:48:41:10:e8:1f:48:
77:78:8b:c5:96:b8:0c:6c:85:75:b7:34:6f:16:c0:
f9:32:09:a0:ef:b6:d1:b6:7c:4a:14:fa:68:ad:e1:
b4:19:16:02:82:fb:b8:0b:3a:4d:34:d4:8e:2e:51:
14:e6:a1:a4:8b:d7:05:53:37:26:af:b9:37:9b:f2:
0e:e2:09:48:c8:3f:8b:3d:7b:ea:97:8a:03:52:d3:
9d:95:cc:fb:75:62:f7:20:2b:9e:3d:24:2e:9d:69:
34:42:93:6a:fa:cf:de:db:83:d6:ee:0f:7c:2b:89:
81:7a:4d:77:cf:cc:8d:64:c1:3c:ee:0d:9d:13:53:
3a:81:a9:13:cc:9a:b9:d2:f5:ea:74:41:5f:2f:68:
df:10:37:39:6c:d3:7c:ed:bd:c7:c3:e7:0a:56:d3:
91:63:cc:01:08:4f:53:84:c0:6f:bf:1c:da:ae:58:
cb:ab:1a:76:e5:d7:6e:17:f8:53:ac:67:32:61:3e:
91:55:f0:04:b9:30:31:fe:22:0e:8d:5f:3d:d3:da:
35:5c:e7:0c:f9:d5:32:94:93:86:bb:41:da:53:78:
30:6a:f4:cb:62:fd:3b:76:3c:95:ea:8e:1d:f6:6b:
cd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:31:BF:04:04:AB:F2:D1:82:7F:76:13:1B:B7:BB:76:35:43:DA:61
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4jG_BASr8tGCf3YTG7e7djVD2mE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.249.0/24
77.90.57.0/24
89.144.30.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:b0:22:4f:7e:9f:14:03:de:7a:17:b7:1a:c9:b4:54:39:86:
e5:96:c8:e5:d1:f1:89:48:fc:54:61:44:4d:05:ff:69:2b:cf:
59:0d:6e:06:f5:c8:5c:3a:e6:ab:19:02:83:81:f1:d5:9c:e6:
a5:37:12:3a:bb:a3:4a:8f:a7:6c:db:ed:db:92:a6:70:55:96:
4c:65:8d:b5:6c:fd:c8:4a:e7:e9:b2:72:42:56:31:d6:1b:d4:
ab:8a:bd:b7:e5:ee:8a:0a:e2:8b:70:88:5d:bb:06:9d:7c:d0:
cc:82:33:5a:4f:ca:72:32:c1:9f:cc:eb:8d:5a:a2:42:9b:9d:
1c:28:c2:7c:cf:b0:13:c9:ea:e6:a9:f1:8f:92:6f:8f:20:ef:
81:9b:ba:32:e3:69:09:4c:6f:74:29:33:b9:62:55:41:ff:89:
ed:05:80:44:2f:d9:ab:fa:5c:00:45:73:f6:79:88:bf:3b:5c:
67:9b:9c:37:5e:70:dd:73:79:7d:58:a3:3b:3b:65:cc:26:0a:
8c:6e:76:5b:af:22:69:39:49:d3:0e:71:5a:ba:01:dc:6e:62:
f9:88:5a:eb:8e:8d:65:73:61:ad:95:74:3f:e2:40:19:a3:cc:
66:ec:67:fc:20:45:80:40:96:9f:f4:f1:bd:6a:cc:8c:8d:ac:
f3:20:99:be
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZlWYJyZOAf5rKoY6Zotv4vVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwOTE3MDYzMzE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjMxYmYwNDA0YWJmMmQxODI3Zjc2MTMxYmI3YmI3NjM1NDNkYTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApy7h6c861H6c4BuIee5OgxQrxSb9
mMRIQRDoH0h3eIvFlrgMbIV1tzRvFsD5Mgmg77bRtnxKFPporeG0GRYCgvu4CzpN
NNSOLlEU5qGki9cFUzcmr7k3m/IO4glIyD+LPXvql4oDUtOdlcz7dWL3ICuePSQu
nWk0QpNq+s/e24PW7g98K4mBek13z8yNZME87g2dE1M6gakTzJq50vXqdEFfL2jf
EDc5bNN87b3Hw+cKVtORY8wBCE9ThMBvvxzarljLqxp25dduF/hTrGcyYT6RVfAE
uTAx/iIOjV8909o1XOcM+dUylJOGu0HaU3gwavTLYv07djyV6o4d9mvNYwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOIxvwQEq/LRgn92Exu3u3Y1Q9phMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvNGpHX0JBU3I4dEdDZjNZVEc3ZTdkalZEMm1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABa/5AwQA
TVo5AwQAWZAeMA0GCSqGSIb3DQEBCwUAA4IBAQCxsCJPfp8UA956F7caybRUOYbl
lsjl0fGJSPxUYURNBf9pK89ZDW4G9chcOuarGQKDgfHVnOalNxI6u6NKj6ds2+3b
kqZwVZZMZY21bP3ISufpsnJCVjHWG9Srir235e6KCuKLcIhduwadfNDMgjNaT8py
MsGfzOuNWqJCm50cKMJ8z7ATyermqfGPkm+PIO+Bm7oy42kJTG90KTO5YlVB/4nt
BYBEL9mr+lwARXP2eYi/O1xnm5w3XnDdc3l9WKM7O2XMJgqMbnZbryJpOUnTDnFa
ugHcbmL5iFrrjo1lc2GtlXQ/4kAZo8xm7Gf8IEWAQJaf9PG9asyMjazzIJm+
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:56:41 2025 by rpki-client