Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JA5yKl11zmQqFgsCMCwLqvOKEbQ.roa
File: JA5yKl11zmQqFgsCMCwLqvOKEbQ.roa (raw, json)
Hash identifier: QYF8jxp4dTNZBsYkfKE5Jk87hKpGdESJ1ReJTbd8pJg=
Subject key identifier: 24:0E:72:2A:5D:75:CE:64:2A:16:0B:02:30:2C:0B:AA:F3:8A:11:B4
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0199BB913FD18FFD2D5C60D726FEB8256C9D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JA5yKl11zmQqFgsCMCwLqvOKEbQ.roa
Signing time: Mon 06 Oct 2025 22:08:02 +0000
ROA not before: Mon 06 Oct 2025 22:08:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197071
IP address blocks: 5.175.206.0/24 maxlen: 24
5.231.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:bb:91:3f:d1:8f:fd:2d:5c:60:d7:26:fe:b8:25:6c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 6 22:08:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=240e722a5d75ce642a160b02302c0baaf38a11b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:93:0b:0f:0f:80:14:78:0d:5a:e5:2b:37:77:
8e:bb:86:8f:a3:6a:0d:b3:33:8b:ba:22:53:f5:00:
d5:7a:c6:db:54:36:57:82:70:09:e5:22:e2:a2:ff:
30:20:80:23:a5:be:54:47:df:3c:a0:9c:e0:78:f6:
a1:57:d4:4e:2f:40:7d:4c:a2:80:e0:27:5e:32:f7:
73:67:b5:28:1a:70:b2:b6:ac:a9:39:08:bd:64:30:
9d:ae:09:50:9b:af:5b:98:da:8b:fe:eb:26:de:e4:
f8:70:03:43:83:39:75:1a:46:1e:98:18:9b:e6:4f:
dc:ab:87:9a:b0:08:dc:a6:fc:96:b8:1b:4a:de:c6:
a6:9c:5f:70:cd:df:2b:cf:58:99:c9:b0:eb:99:3c:
18:de:62:02:43:b2:73:bf:55:53:a0:f1:3b:8b:85:
d7:cb:61:61:57:3a:4a:62:57:50:af:9d:45:58:16:
e5:04:af:58:56:d7:bb:27:02:a5:54:34:85:b5:88:
7e:ca:76:d9:ac:fd:a6:71:98:6c:e7:4c:b0:d2:f4:
e9:96:7b:59:0c:b4:96:71:68:ff:73:52:e8:19:2a:
63:98:22:43:19:57:62:61:2d:56:ce:d7:97:65:27:
49:fc:a0:36:a9:31:27:65:22:e1:77:bf:f7:38:c1:
6e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:0E:72:2A:5D:75:CE:64:2A:16:0B:02:30:2C:0B:AA:F3:8A:11:B4
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JA5yKl11zmQqFgsCMCwLqvOKEbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.206.0/24
5.231.115.0/24
Signature Algorithm: sha256WithRSAEncryption
55:89:70:e0:77:a5:3d:b5:a3:6a:64:38:52:e0:45:7b:b2:ae:
89:d1:b9:b3:95:a2:f8:5b:57:09:af:d2:e0:f5:cf:2e:f3:27:
f2:8f:c6:9e:1f:6d:be:df:2f:0c:08:c3:be:be:7c:c1:79:cb:
3b:c3:ab:07:45:c9:ab:5b:80:70:cd:e9:e7:93:21:85:3f:32:
7d:db:d8:2d:63:c6:d2:bc:bc:4d:a8:6d:1d:74:2c:2c:2e:73:
a0:51:9a:03:2b:ee:42:a7:cb:48:2e:88:7c:23:ed:94:d3:f5:
49:cb:20:3c:93:74:81:e6:6a:31:1f:15:f3:d5:6a:86:bb:63:
ac:ee:b1:47:28:c5:3f:31:4f:f3:3b:46:83:ba:f5:2e:11:62:
5e:c2:e4:2f:31:b0:ce:fb:b2:c6:9a:64:0c:11:b0:7c:07:b9:
5d:a1:f6:fe:df:ae:cc:d1:00:c1:c9:76:46:eb:7e:91:2f:95:
c0:14:cb:1c:3c:37:76:60:75:76:48:d8:84:6e:33:84:c2:55:
12:a8:85:be:6d:a8:b9:6a:cf:06:38:ae:3d:46:81:88:1f:e5:
20:2c:82:29:0b:4b:62:55:ad:d1:21:96:05:1c:98:22:09:7d:
78:a2:a1:9b:db:5d:a8:da:f5:10:2c:a6:f7:0a:e8:70:53:2f:
e1:d6:9e:5d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZm7kT/Rj/0tXGDXJv64JWydMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUxMDA2MjIwODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDBlNzIyYTVkNzVjZTY0MmExNjBiMDIzMDJjMGJhYWYzOGExMWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZMLDw+AFHgNWuUrN3eOu4aPo2oN
szOLuiJT9QDVesbbVDZXgnAJ5SLiov8wIIAjpb5UR988oJzgePahV9ROL0B9TKKA
4CdeMvdzZ7UoGnCytqypOQi9ZDCdrglQm69bmNqL/usm3uT4cANDgzl1GkYemBib
5k/cq4easAjcpvyWuBtK3samnF9wzd8rz1iZybDrmTwY3mICQ7Jzv1VToPE7i4XX
y2FhVzpKYldQr51FWBblBK9YVte7JwKlVDSFtYh+ynbZrP2mcZhs50yw0vTplntZ
DLSWcWj/c1LoGSpjmCJDGVdiYS1WzteXZSdJ/KA2qTEnZSLhd7/3OMFujwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCQOcipddc5kKhYLAjAsC6rzihG0MB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvSkE1eUtsMTF6bVFxRmdzQ01Dd0xxdk9LRWJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABa/OAwQA
BedzMA0GCSqGSIb3DQEBCwUAA4IBAQBViXDgd6U9taNqZDhS4EV7sq6J0bmzlaL4
W1cJr9Lg9c8u8yfyj8aeH22+3y8MCMO+vnzBecs7w6sHRcmrW4BwzennkyGFPzJ9
29gtY8bSvLxNqG0ddCwsLnOgUZoDK+5Cp8tILoh8I+2U0/VJyyA8k3SB5moxHxXz
1WqGu2Os7rFHKMU/MU/zO0aDuvUuEWJewuQvMbDO+7LGmmQMEbB8B7ldofb+367M
0QDByXZG636RL5XAFMscPDd2YHV2SNiEbjOEwlUSqIW+bai5as8GOK49RoGIH+Ug
LIIpC0tiVa3RIZYFHJgiCX14oqGb212o2vUQLKb3CuhwUy/h1p5d
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:37:26 2025 by rpki-client