Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ezRK43k8SrzlSQ-smaN6gUQqO7g.roa
File: ezRK43k8SrzlSQ-smaN6gUQqO7g.roa (raw, json)
Hash identifier: Wx4OC9HMDUBfr12wiDAN00LniPNoxEdvvgZepDctNqM=
Subject key identifier: 7B:34:4A:E3:79:3C:4A:BC:E5:49:0F:AC:99:A3:7A:81:44:2A:3B:B8
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0199EDE9137827B0899C0319A9F0FEA66977
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ezRK43k8SrzlSQ-smaN6gUQqO7g.roa
Signing time: Thu 16 Oct 2025 16:44:59 +0000
ROA not before: Thu 16 Oct 2025 16:44:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 5.231.71.0/24 maxlen: 24
5.231.74.0/24 maxlen: 24
5.231.92.0/24 maxlen: 24
5.231.106.0/24 maxlen: 24
5.231.107.0/24 maxlen: 24
5.231.108.0/24 maxlen: 24
5.231.109.0/24 maxlen: 24
5.231.110.0/24 maxlen: 24
5.231.116.0/24 maxlen: 24
5.231.122.0/24 maxlen: 24
5.231.123.0/24 maxlen: 24
5.231.241.0/24 maxlen: 24
5.231.253.0/24 maxlen: 24
94.249.190.0/24 maxlen: 24
94.249.195.0/24 maxlen: 24
94.249.230.0/24 maxlen: 24
94.249.238.0/24 maxlen: 24
94.249.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ed:e9:13:78:27:b0:89:9c:03:19:a9:f0:fe:a6:69:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 16 16:44:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b344ae3793c4abce5490fac99a37a81442a3bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:66:44:60:b3:e9:3e:2a:05:19:32:e8:40:f1:
99:57:0b:c7:f1:e4:5d:73:19:b5:40:0a:af:61:a5:
6c:35:5b:11:10:1a:44:e9:97:4e:f4:c7:04:1b:65:
cc:59:8f:1b:19:99:6f:e0:05:80:05:97:a9:b3:1f:
28:b4:8f:d2:8c:cc:9e:16:7f:a3:13:95:4e:48:af:
70:a9:11:d7:f6:98:7c:58:55:18:d9:f2:92:ff:66:
3b:1e:e8:cb:1c:26:e7:53:08:33:de:c6:8b:7b:dc:
99:42:2e:32:27:18:8a:79:4f:b9:bd:e6:54:f4:cd:
92:e3:a3:aa:0b:f1:f4:5b:66:85:a2:90:55:32:db:
8d:2c:7c:bb:55:e9:02:47:ba:c3:c6:2c:4a:7b:28:
72:93:1f:e5:7b:6c:f5:05:b9:fa:c0:de:aa:28:9f:
0c:49:45:1d:d7:bc:1c:c0:c6:f1:e8:71:55:3d:c1:
fe:04:50:c1:f6:c9:df:e1:29:4a:7c:38:2b:4e:7e:
d3:03:95:db:c5:bc:a6:cb:1b:40:a9:39:55:0f:0f:
93:12:63:f2:64:c1:6c:96:d8:ac:72:fb:a7:f1:5b:
5b:01:cd:e7:23:b4:ad:40:10:6b:88:97:e0:16:47:
1a:7d:c5:52:e6:0f:58:e2:be:6e:f3:91:67:be:6c:
05:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:34:4A:E3:79:3C:4A:BC:E5:49:0F:AC:99:A3:7A:81:44:2A:3B:B8
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ezRK43k8SrzlSQ-smaN6gUQqO7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.71.0/24
5.231.74.0/24
5.231.92.0/24
5.231.106.0-5.231.110.255
5.231.116.0/24
5.231.122.0/23
5.231.241.0/24
5.231.253.0/24
94.249.190.0/24
94.249.195.0/24
94.249.230.0/24
94.249.238.0/23
Signature Algorithm: sha256WithRSAEncryption
65:81:1b:b3:b7:fd:66:61:90:d0:10:65:4c:df:6f:1c:c0:83:
6b:63:99:7a:2b:11:fe:dd:8f:78:87:49:67:59:2e:6e:d4:b1:
b7:60:20:35:70:de:e7:d5:46:6d:a4:b4:67:66:7e:bc:ea:97:
e3:42:5f:ba:dd:b3:6e:bd:72:8b:0d:91:84:56:95:8a:af:b1:
40:87:dd:13:15:4f:9a:7e:26:47:bc:a2:ae:5a:8f:f1:f5:6c:
f2:ea:63:4d:a8:7a:09:16:f6:f4:8c:8b:1a:54:8e:c1:61:48:
66:be:8b:98:dc:ef:e1:c6:42:dc:78:ab:9b:fc:bc:f0:c9:46:
12:22:d0:0b:a4:36:bf:77:b2:1e:8d:20:93:9c:88:69:19:6f:
a2:53:7e:2b:70:63:9d:bb:93:e3:29:93:c4:42:77:fb:ec:a2:
a7:57:97:43:7e:96:72:9e:27:6c:87:1e:65:46:be:62:fa:85:
41:27:3c:88:2a:9f:76:0c:ed:b6:0d:5d:fb:b8:e8:66:f5:0d:
3f:5f:df:46:fc:7b:a0:fe:2d:43:0c:75:60:37:1f:18:a3:dc:
43:41:80:cf:b0:4c:28:c7:bf:74:16:2b:8e:6b:d1:4a:30:b0:
4d:54:7e:f4:23:ce:ec:8b:ba:05:bc:43:91:83:65:46:d5:da:
42:02:7d:67
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgISAZnt6RN4J7CJnAMZqfD+pml3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUxMDE2MTY0NDU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjM0NGFlMzc5M2M0YWJjZTU0OTBmYWM5OWEzN2E4MTQ0MmEzYmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2ZEYLPpPioFGTLoQPGZVwvH8eRd
cxm1QAqvYaVsNVsREBpE6ZdO9McEG2XMWY8bGZlv4AWABZepsx8otI/SjMyeFn+j
E5VOSK9wqRHX9ph8WFUY2fKS/2Y7HujLHCbnUwgz3saLe9yZQi4yJxiKeU+5veZU
9M2S46OqC/H0W2aFopBVMtuNLHy7VekCR7rDxixKeyhykx/le2z1Bbn6wN6qKJ8M
SUUd17wcwMbx6HFVPcH+BFDB9snf4SlKfDgrTn7TA5XbxbymyxtAqTlVDw+TEmPy
ZMFsltiscvun8VtbAc3nI7StQBBriJfgFkcafcVS5g9Y4r5u85FnvmwFDwIDAQAB
o4ICUzCCAk8wHQYDVR0OBBYEFHs0SuN5PEq85UkPrJmjeoFEKju4MB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvZXpSSzQzazhTcnpsU1Etc21hTjZnVVFxTzdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQAwQABedHAwQA
BedKAwQABedcMAwDBAEF52oDBAAF524DBAAF53QDBAEF53oDBAAF5/EDBAAF5/0D
BABe+b4DBABe+cMDBABe+eYDBAFe+e4wDQYJKoZIhvcNAQELBQADggEBAGWBG7O3
/WZhkNAQZUzfbxzAg2tjmXorEf7dj3iHSWdZLm7UsbdgIDVw3ufVRm2ktGdmfrzq
l+NCX7rds269cosNkYRWlYqvsUCH3RMVT5p+Jke8oq5aj/H1bPLqY02oegkW9vSM
ixpUjsFhSGa+i5jc7+HGQtx4q5v8vPDJRhIi0AukNr93sh6NIJOciGkZb6JTfitw
Y527k+Mpk8RCd/vsoqdXl0N+lnKeJ2yHHmVGvmL6hUEnPIgqn3YM7bYNXfu46Gb1
DT9f30b8e6D+LUMMdWA3Hxij3ENBgM+wTCjHv3QWK45r0UowsE1UfvQjzuyLugW8
Q5GDZUbV2kICfWc=
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:58:55 2025 by rpki-client