Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4ltDOcVb7xtDTF2FvxPg4vV3F2w.roa
File: 4ltDOcVb7xtDTF2FvxPg4vV3F2w.roa (raw, json)
Hash identifier: Z+rHaCatGy96KUU1RHUOHadWZfisMibMGpojTWieBIA=
Subject key identifier: E2:5B:43:39:C5:5B:EF:1B:43:4C:5D:85:BF:13:E0:E2:F5:77:17:6C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0199EAC0AC328BCFD8E62888697BE15F27A3
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4ltDOcVb7xtDTF2FvxPg4vV3F2w.roa
Signing time: Thu 16 Oct 2025 02:01:59 +0000
ROA not before: Thu 16 Oct 2025 02:01:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200456
IP address blocks: 5.175.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ea:c0:ac:32:8b:cf:d8:e6:28:88:69:7b:e1:5f:27:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 16 02:01:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e25b4339c55bef1b434c5d85bf13e0e2f577176c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:63:3a:62:0b:58:a7:e5:c7:e2:bf:3a:6f:88:
42:d9:ca:dd:78:9d:33:b6:6b:6a:b0:0c:05:a6:52:
77:d4:9e:7a:a2:18:13:69:ad:29:00:ac:8e:28:00:
23:d6:a5:22:18:c7:76:47:d1:e8:10:31:40:c1:72:
85:aa:ba:b1:27:a3:a7:2c:f4:65:26:c3:3b:73:40:
44:79:37:a2:86:5d:78:44:39:83:d7:37:31:f9:71:
14:9c:f9:9d:8a:40:1d:b7:5b:29:76:2a:b9:0f:e4:
9b:16:48:39:ed:1b:79:36:63:37:aa:7f:04:97:59:
9d:96:33:87:40:3e:3c:f7:c5:51:ad:95:ce:50:2e:
c8:7d:65:8a:dc:9e:35:22:bc:73:0a:16:a7:81:b6:
be:76:bb:12:c2:bb:94:ae:f7:a6:34:ac:ae:d1:b4:
9d:0a:8d:52:b8:e4:f5:7f:65:1c:61:19:dd:4e:63:
45:8a:6b:89:9c:d7:64:5c:7b:ed:03:b6:ba:56:46:
2b:05:8e:14:9a:93:9c:19:f6:83:1e:20:83:f8:e5:
73:ff:2e:86:04:f1:57:fc:d0:ff:49:33:23:4f:a6:
89:87:26:fe:b1:35:4a:b5:69:61:bc:87:cf:e6:89:
35:4b:1a:49:bb:bb:8e:d5:57:a0:d9:e6:fb:de:4d:
6a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5B:43:39:C5:5B:EF:1B:43:4C:5D:85:BF:13:E0:E2:F5:77:17:6C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4ltDOcVb7xtDTF2FvxPg4vV3F2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.201.0/24
Signature Algorithm: sha256WithRSAEncryption
91:0b:a7:0d:47:f4:14:0c:9d:9c:41:b8:d6:6b:53:14:89:17:
f4:86:51:b2:d8:58:14:b5:f1:06:a4:c0:51:a2:1b:50:ff:aa:
de:1e:97:e4:24:53:3a:eb:18:e9:16:08:19:d5:14:0a:a4:4d:
9d:b9:64:d2:6a:7d:28:2d:f4:75:e0:93:41:94:d2:cf:62:d1:
81:cc:70:e5:56:f4:ce:30:0b:58:dc:24:77:90:d5:f2:db:69:
8c:b1:42:18:c3:65:ba:98:fe:30:65:5a:d8:c6:c1:63:93:01:
6d:4c:ac:5b:de:4a:65:1a:64:13:38:d7:57:26:6f:f8:3b:f0:
32:cd:c9:6a:2e:a3:15:5e:48:a4:ca:65:aa:ef:2d:f6:89:a4:
3d:d3:58:76:21:6a:1f:63:c9:df:be:5d:de:f0:5d:15:74:1b:
65:bd:ff:22:b7:ae:93:c5:ef:2b:20:13:22:dd:4e:53:bf:71:
32:75:61:c8:13:e7:7c:3d:94:9b:7f:c8:54:a2:08:5a:1b:9e:
a4:e0:ab:bf:75:66:bb:60:f9:d6:99:1d:56:4e:e9:83:5a:b4:
d8:28:0e:c9:e8:d6:b5:c9:55:e0:d0:cf:47:3d:5d:a6:4b:6a:
f5:1b:b3:fb:bc:80:96:7c:df:fb:38:66:23:67:88:17:23:e4:
52:ff:38:06
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZnqwKwyi8/Y5iiIaXvhXyejMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUxMDE2MDIwMTU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjViNDMzOWM1NWJlZjFiNDM0YzVkODViZjEzZTBlMmY1NzcxNzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGM6YgtYp+XH4r86b4hC2crdeJ0z
tmtqsAwFplJ31J56ohgTaa0pAKyOKAAj1qUiGMd2R9HoEDFAwXKFqrqxJ6OnLPRl
JsM7c0BEeTeihl14RDmD1zcx+XEUnPmdikAdt1spdiq5D+SbFkg57Rt5NmM3qn8E
l1mdljOHQD4898VRrZXOUC7IfWWK3J41IrxzChangba+drsSwruUrvemNKyu0bSd
Co1SuOT1f2UcYRndTmNFimuJnNdkXHvtA7a6VkYrBY4UmpOcGfaDHiCD+OVz/y6G
BPFX/ND/STMjT6aJhyb+sTVKtWlhvIfP5ok1SxpJu7uO1Veg2eb73k1q6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOJbQznFW+8bQ0xdhb8T4OL1dxdsMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvNGx0RE9jVmI3eHREVEYyRnZ4UGc0dlYzRjJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABa/JMA0G
CSqGSIb3DQEBCwUAA4IBAQCRC6cNR/QUDJ2cQbjWa1MUiRf0hlGy2FgUtfEGpMBR
ohtQ/6reHpfkJFM66xjpFggZ1RQKpE2duWTSan0oLfR14JNBlNLPYtGBzHDlVvTO
MAtY3CR3kNXy22mMsUIYw2W6mP4wZVrYxsFjkwFtTKxb3kplGmQTONdXJm/4O/Ay
zclqLqMVXkikymWq7y32iaQ901h2IWofY8nfvl3e8F0VdBtlvf8it66Txe8rIBMi
3U5Tv3EydWHIE+d8PZSbf8hUoghaG56k4Ku/dWa7YPnWmR1WTumDWrTYKA7J6Na1
yVXg0M9HPV2mS2r1G7P7vICWfN/7OGYjZ4gXI+RS/zgG
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:59:37 2025 by rpki-client