Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/BaNAYZVBZGE_hDSLUwUthaJ-7to.roa
File: BaNAYZVBZGE_hDSLUwUthaJ-7to.roa (raw, json)
Hash identifier: WX2AZ1waQ/AAMr6smAr3VmeyaXfX1n4Bjx+/ftAT4NM=
Subject key identifier: 05:A3:40:61:95:41:64:61:3F:84:34:8B:53:05:2D:85:A2:7E:EE:DA
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0198A97A5CCFA25BFE14547ACC3E2922B9AF
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/BaNAYZVBZGE_hDSLUwUthaJ-7to.roa
Signing time: Thu 14 Aug 2025 16:47:05 +0000
ROA not before: Thu 14 Aug 2025 16:47:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49581
IP address blocks: 5.231.26.0/24 maxlen: 24
5.231.105.0/24 maxlen: 24
89.106.69.0/24 maxlen: 24
89.106.71.0/24 maxlen: 24
2a02:2fc0:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a9:7a:5c:cf:a2:5b:fe:14:54:7a:cc:3e:29:22:b9:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 14 16:47:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05a34061954164613f84348b53052d85a27eeeda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:60:52:7f:63:bf:48:21:2c:f1:d6:76:d9:40:
ba:2e:58:50:be:60:6a:24:43:15:19:01:9c:5a:3f:
cc:28:cc:53:09:e6:02:9f:f3:99:e2:79:6c:16:78:
47:7e:c3:fc:c0:4e:39:04:80:24:52:df:7b:73:80:
c9:98:79:d9:c4:73:f6:c2:46:a1:02:6e:ee:01:29:
0b:20:9d:2f:0b:ee:63:4a:7e:7c:b5:24:79:4e:27:
02:a0:f6:6a:fd:b3:b5:f8:1e:6c:b9:99:f8:1c:2d:
01:fc:0a:60:1c:c1:a8:10:68:6c:c4:85:3c:c3:a3:
be:1f:cc:a1:9e:03:f2:fb:8b:a2:2f:54:0d:42:6f:
03:bb:87:1a:5b:d8:37:61:1f:ad:53:4b:d1:04:29:
ab:5d:cf:26:c1:2d:50:4c:c1:ac:9b:e0:db:e4:c7:
b6:22:03:23:b4:70:fc:ef:4d:d5:74:91:96:2d:44:
1b:51:e1:49:7d:e2:6e:5e:8a:8a:cb:d9:1f:9b:e6:
f8:4a:67:1b:a8:46:e0:79:57:d2:80:2b:d9:13:5b:
c8:3a:e4:0b:90:1e:16:79:8e:5c:2e:41:2c:8e:cb:
20:46:f3:47:e1:d3:9f:63:8a:c2:ee:8d:14:de:d7:
50:81:43:9a:09:87:d2:2e:76:55:39:e4:aa:ad:2d:
f4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A3:40:61:95:41:64:61:3F:84:34:8B:53:05:2D:85:A2:7E:EE:DA
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/BaNAYZVBZGE_hDSLUwUthaJ-7to.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.26.0/24
5.231.105.0/24
89.106.69.0/24
89.106.71.0/24
IPv6:
2a02:2fc0:11::/48
Signature Algorithm: sha256WithRSAEncryption
13:e6:61:95:28:6b:9d:0f:4b:af:3a:37:d4:a2:3b:22:00:19:
75:b0:51:14:fe:da:38:ee:a9:0d:c9:d6:63:38:11:b9:46:21:
ef:46:c9:a0:bb:94:5b:d0:97:d6:28:de:fe:b9:d5:53:0f:88:
da:7c:25:ff:ba:30:ae:ff:df:99:12:05:6e:46:be:33:51:d6:
8a:ff:f7:cc:9d:f5:80:41:ad:59:c7:0e:a8:87:bf:65:7f:18:
65:3c:11:51:d8:13:3a:99:b9:c8:6d:99:53:09:c1:11:3a:58:
82:50:1c:39:7a:4a:83:c6:c4:62:95:73:ef:18:ba:1e:dc:81:
41:b1:1d:17:c5:f7:ad:5b:0a:a8:4d:ce:8b:f5:99:00:17:0b:
0a:ed:69:79:3a:02:6d:4d:0e:17:a5:c8:e1:36:4e:39:6a:58:
f2:a2:3c:40:d0:38:f3:30:68:bb:31:7c:29:49:a1:b8:17:f3:
f1:99:a3:7b:56:b8:9c:cd:4e:22:c3:8c:de:5a:c5:1c:a6:e8:
4d:5a:63:55:8f:3b:e6:f1:5d:c1:9e:33:e5:6d:65:fa:70:05:
db:a5:6e:ad:7a:2f:cd:3f:e7:83:b6:92:57:b6:36:f6:e5:5f:
72:03:48:c1:0b:59:26:84:92:21:23:98:99:b4:22:30:65:84:
25:c1:f2:55
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAZipelzPolv+FFR6zD4pIrmvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwODE0MTY0NzA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNWEzNDA2MTk1NDE2NDYxM2Y4NDM0OGI1MzA1MmQ4NWEyN2VlZWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmBSf2O/SCEs8dZ22UC6LlhQvmBq
JEMVGQGcWj/MKMxTCeYCn/OZ4nlsFnhHfsP8wE45BIAkUt97c4DJmHnZxHP2wkah
Am7uASkLIJ0vC+5jSn58tSR5TicCoPZq/bO1+B5suZn4HC0B/ApgHMGoEGhsxIU8
w6O+H8yhngPy+4uiL1QNQm8Du4caW9g3YR+tU0vRBCmrXc8mwS1QTMGsm+Db5Me2
IgMjtHD8703VdJGWLUQbUeFJfeJuXoqKy9kfm+b4SmcbqEbgeVfSgCvZE1vIOuQL
kB4WeY5cLkEsjssgRvNH4dOfY4rC7o0U3tdQgUOaCYfSLnZVOeSqrS30qwIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFAWjQGGVQWRhP4Q0i1MFLYWifu7aMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvQmFOQVlaVkJaR0VfaERTTFV3VXRoYUotN3RvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQABecaAwQA
BedpAwQAWWpFAwQAWWpHMA8EAgACMAkDBwAqAi/AABEwDQYJKoZIhvcNAQELBQAD
ggEBABPmYZUoa50PS686N9SiOyIAGXWwURT+2jjuqQ3J1mM4EblGIe9GyaC7lFvQ
l9Yo3v651VMPiNp8Jf+6MK7/35kSBW5GvjNR1or/98yd9YBBrVnHDqiHv2V/GGU8
EVHYEzqZuchtmVMJwRE6WIJQHDl6SoPGxGKVc+8Yuh7cgUGxHRfF961bCqhNzov1
mQAXCwrtaXk6Am1NDhelyOE2TjlqWPKiPEDQOPMwaLsxfClJobgX8/GZo3tWuJzN
TiLDjN5axRym6E1aY1WPO+bxXcGeM+VtZfpwBdulbq16L80/54O2kle2NvblX3ID
SMELWSaEkiEjmJm0IjBlhCXB8lU=
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:56:48 2025 by rpki-client