Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rf_5lgbeTpQiDqmtaPQbongHbYI.roa
File: rf_5lgbeTpQiDqmtaPQbongHbYI.roa (raw, json)
Hash identifier: KUPPU2P0YM3naPU4PmOjhOtP0tpvrhaTHO0L21x5rZY=
Subject key identifier: AD:FF:F9:96:06:DE:4E:94:22:0E:A9:AD:68:F4:1B:A2:78:07:6D:82
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0199530B57551C16FCC6F273BDF944081698
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rf_5lgbeTpQiDqmtaPQbongHbYI.roa
Signing time: Tue 16 Sep 2025 15:01:15 +0000
ROA not before: Tue 16 Sep 2025 15:01:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63473
IP address blocks: 5.231.73.0/24 maxlen: 24
77.90.31.0/24 maxlen: 24
77.90.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:53:0b:57:55:1c:16:fc:c6:f2:73:bd:f9:44:08:16:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 16 15:01:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=adfff99606de4e94220ea9ad68f41ba278076d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:50:8a:ab:0b:9e:65:ea:ae:f4:5d:0b:62:97:
8b:28:08:87:38:e2:fc:90:22:2a:02:03:07:cd:99:
f8:75:7a:aa:c6:5f:b2:c5:77:d8:a2:aa:42:e3:d1:
7b:2b:ff:fe:70:17:1d:1e:85:e3:2e:b5:1e:56:de:
67:dd:29:e5:7a:de:66:8f:4a:57:35:87:a7:67:7e:
7b:0f:74:87:e4:2e:01:d7:5b:62:93:e7:5a:43:dd:
ef:ce:ce:16:91:8b:de:c0:af:88:49:7b:92:3d:93:
41:43:d0:b1:a2:b9:c9:f9:7a:8f:64:59:76:70:58:
25:57:58:49:09:19:5d:fe:99:15:46:be:e8:2b:96:
ad:e1:2a:c6:2b:d8:5a:12:df:80:eb:cd:e0:fa:30:
7b:15:0b:b8:5f:d7:41:70:57:91:f0:0d:5d:71:d5:
99:17:eb:13:50:48:a8:a1:c7:24:54:9f:73:cc:83:
3f:65:59:04:66:fc:62:5d:cb:d9:7d:79:d3:15:19:
fd:4c:4c:21:bb:2e:4a:10:c9:7d:66:68:05:92:05:
d2:5b:70:23:9a:a3:17:89:bf:4c:1d:ae:12:e1:ff:
19:8c:e6:d7:15:cf:05:90:6b:4e:7c:f6:55:e1:a1:
95:13:c0:ee:16:86:5b:8e:75:ad:55:c6:1f:c9:64:
3e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:FF:F9:96:06:DE:4E:94:22:0E:A9:AD:68:F4:1B:A2:78:07:6D:82
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rf_5lgbeTpQiDqmtaPQbongHbYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.73.0/24
77.90.31.0/24
77.90.35.0/24
Signature Algorithm: sha256WithRSAEncryption
e9:4f:85:a4:b1:af:5e:9d:e3:61:fb:ee:b6:36:f3:00:fd:9a:
1b:53:75:b9:bc:85:72:5f:00:25:66:70:5c:0a:87:fc:4a:84:
8f:f3:e0:5c:e7:53:e7:7c:9c:5e:c2:a3:0a:df:db:75:20:cc:
b3:1f:6d:09:7e:d6:c5:28:f2:3b:e1:71:b0:2e:95:ee:6c:08:
69:d5:c5:c7:d3:dc:da:69:20:1f:d4:6e:dc:b3:ae:d1:3f:db:
12:a2:0d:5e:12:e8:19:0a:19:74:05:4f:e2:fb:78:ac:9c:b9:
68:22:9d:de:ca:1f:57:92:ea:86:86:a8:b5:0b:5c:05:17:b4:
3d:7c:23:7c:bf:27:82:f9:ac:ef:ee:3d:7a:df:7d:3c:90:20:
db:e5:50:c8:7c:0e:b6:10:2f:8a:3d:57:53:85:b7:03:01:06:
65:f0:d1:e2:2d:42:3d:d6:e5:38:07:a4:ac:5e:9f:13:63:62:
89:65:0e:19:9b:2f:d3:b4:e0:4e:c7:50:2b:aa:ab:fa:8b:88:
84:29:d4:ae:f4:b0:0b:1d:e5:91:4e:66:f1:42:1c:15:de:d6:
2b:07:7f:09:aa:25:73:45:8b:1c:43:fb:55:ac:b0:b3:92:fa:
8f:86:50:f5:8c:cf:d2:69:8d:c6:7e:04:8b:73:5d:2c:07:c3:
56:bb:d5:cd
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZlTC1dVHBb8xvJzvflECBaYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwOTE2MTUwMTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZGZmZjk5NjA2ZGU0ZTk0MjIwZWE5YWQ2OGY0MWJhMjc4MDc2ZDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1CKqwueZequ9F0LYpeLKAiHOOL8
kCIqAgMHzZn4dXqqxl+yxXfYoqpC49F7K//+cBcdHoXjLrUeVt5n3Snlet5mj0pX
NYenZ357D3SH5C4B11tik+daQ93vzs4WkYvewK+ISXuSPZNBQ9CxornJ+XqPZFl2
cFglV1hJCRld/pkVRr7oK5at4SrGK9haEt+A683g+jB7FQu4X9dBcFeR8A1dcdWZ
F+sTUEioocckVJ9zzIM/ZVkEZvxiXcvZfXnTFRn9TEwhuy5KEMl9ZmgFkgXSW3Aj
mqMXib9MHa4S4f8ZjObXFc8FkGtOfPZV4aGVE8DuFoZbjnWtVcYfyWQ+1QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFK3/+ZYG3k6UIg6prWj0G6J4B22CMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvcmZfNWxnYmVUcFFpRHFtdGFQUWJvbmdIYllJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABedJAwQA
TVofAwQATVojMA0GCSqGSIb3DQEBCwUAA4IBAQDpT4Wksa9eneNh++62NvMA/Zob
U3W5vIVyXwAlZnBcCof8SoSP8+Bc51PnfJxewqMK39t1IMyzH20JftbFKPI74XGw
LpXubAhp1cXH09zaaSAf1G7cs67RP9sSog1eEugZChl0BU/i+3isnLloIp3eyh9X
kuqGhqi1C1wFF7Q9fCN8vyeC+azv7j163308kCDb5VDIfA62EC+KPVdThbcDAQZl
8NHiLUI91uU4B6SsXp8TY2KJZQ4Zmy/TtOBOx1Arqqv6i4iEKdSu9LALHeWRTmbx
QhwV3tYrB38JqiVzRYscQ/tVrLCzkvqPhlD1jM/SaY3GfgSLc10sB8NWu9XN
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:12 2025 by rpki-client