Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/5-grPTSSQ46ki6vrVlQC7SeehIc.roa
File: 5-grPTSSQ46ki6vrVlQC7SeehIc.roa (raw, json)
Hash identifier: vQAPGdX1KSbjltYnmf1gVhaVezYrxmfY7AB2aHZ+pA4=
Subject key identifier: E7:E8:2B:3D:34:92:43:8E:A4:8B:AB:EB:56:54:02:ED:27:9E:84:87
Certificate issuer: /CN=d515932960f3c174d4957abe9f5ab295264d5453
Certificate serial: 01978214E8A37E9F68FCB03D3595E1553DEA
Authority key identifier: D5:15:93:29:60:F3:C1:74:D4:95:7A:BE:9F:5A:B2:95:26:4D:54:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/5-grPTSSQ46ki6vrVlQC7SeehIc.roa
Signing time: Wed 18 Jun 2025 08:08:17 +0000
ROA not before: Wed 18 Jun 2025 08:08:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48273
IP address blocks: 92.119.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:14:e8:a3:7e:9f:68:fc:b0:3d:35:95:e1:55:3d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d515932960f3c174d4957abe9f5ab295264d5453
Validity
Not Before: Jun 18 08:08:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7e82b3d3492438ea48babeb565402ed279e8487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:90:98:41:7a:3c:c3:e8:1e:10:76:02:2a:49:
0c:3e:b4:6a:de:bc:2e:8a:05:1c:86:d4:f8:ef:90:
61:dd:79:e7:7c:d9:76:cf:a9:09:36:ec:b1:16:c7:
80:32:e0:96:b9:7b:e4:a3:7d:52:07:d2:4e:e5:bb:
31:86:bc:01:f5:a2:0d:6b:ca:ec:63:43:81:02:77:
f7:86:cc:a6:d8:13:2e:4b:38:af:3e:0e:ac:21:87:
e7:fb:6e:e7:fb:0f:db:91:32:0d:02:60:2d:9b:f7:
84:58:16:26:6b:f2:1c:06:e8:fa:54:32:f5:1e:89:
a2:47:a4:be:53:4a:31:42:49:55:8f:0d:6b:68:c8:
5f:a3:9b:db:75:a2:da:f2:cc:ba:e1:45:ba:07:7d:
a1:8f:c5:c1:0f:b8:de:b4:07:f8:72:b7:7f:99:71:
df:0b:1a:91:dc:7c:8d:03:7b:80:78:0b:9d:44:54:
72:35:3e:30:f9:2f:bb:ea:09:0c:ec:dc:09:13:be:
0c:34:b8:67:1c:54:c0:38:4f:fd:3d:5c:87:b7:7b:
48:24:3d:f6:31:fe:7a:48:b7:56:6d:21:11:08:76:
b0:c9:f9:4e:dc:db:f8:66:2b:c0:5b:a8:9f:76:21:
1c:79:82:75:f3:61:fb:7c:05:84:62:1a:19:d3:19:
70:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E8:2B:3D:34:92:43:8E:A4:8B:AB:EB:56:54:02:ED:27:9E:84:87
X509v3 Authority Key Identifier:
keyid:D5:15:93:29:60:F3:C1:74:D4:95:7A:BE:9F:5A:B2:95:26:4D:54:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/5-grPTSSQ46ki6vrVlQC7SeehIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.144.0/24
Signature Algorithm: sha256WithRSAEncryption
10:85:4c:28:3f:39:35:da:8f:ba:2b:cb:e5:3d:55:bb:be:67:
cc:38:f2:91:99:f2:1b:2a:72:8f:ea:da:c1:94:d1:b4:6e:a5:
ce:a0:37:d9:e1:45:c5:24:12:5a:3d:9f:e9:4d:05:80:83:5d:
38:f1:0d:3f:0c:34:c4:13:38:97:bb:e2:fe:90:7b:51:04:6d:
8e:0d:29:80:12:da:26:36:e7:34:0c:29:5b:6d:25:9c:77:c3:
7c:c0:69:7a:2e:6c:2b:88:a0:a7:a0:e6:be:81:5e:24:db:b7:
95:e9:c2:77:77:e1:55:cf:be:10:53:8d:7e:77:4b:f9:ce:a5:
5d:31:fa:07:a2:99:a6:9b:aa:5a:a7:0a:09:f5:85:f9:21:38:
f5:fd:80:3a:9f:f9:b9:b1:fe:17:3a:9d:cc:08:d5:ac:72:2d:
3f:2d:54:06:51:bf:9e:f5:0d:ad:e1:ab:74:51:c1:a0:3e:f0:
85:42:9b:2c:f6:57:f6:d5:e9:6b:73:e6:11:dc:e7:3f:ab:36:
2b:4a:1a:e2:35:ad:4d:cc:95:5b:27:3b:20:ce:f2:d6:77:55:
28:62:2e:aa:78:13:96:22:06:ed:bc:52:b3:48:83:15:02:db:
e3:8a:43:8e:8a:93:ea:29:ce:c3:6b:c5:ba:14:e8:81:5e:7a:
2f:b6:d4:ae
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZeCFOijfp9o/LA9NZXhVT3qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MTU5MzI5NjBmM2MxNzRkNDk1N2FiZTlmNWFiMjk1MjY0
ZDU0NTMwHhcNMjUwNjE4MDgwODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2U4MmIzZDM0OTI0MzhlYTQ4YmFiZWI1NjU0MDJlZDI3OWU4NDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZCYQXo8w+geEHYCKkkMPrRq3rwu
igUchtT475Bh3XnnfNl2z6kJNuyxFseAMuCWuXvko31SB9JO5bsxhrwB9aINa8rs
Y0OBAnf3hsym2BMuSzivPg6sIYfn+27n+w/bkTINAmAtm/eEWBYma/IcBuj6VDL1
HomiR6S+U0oxQklVjw1raMhfo5vbdaLa8sy64UW6B32hj8XBD7jetAf4crd/mXHf
CxqR3HyNA3uAeAudRFRyNT4w+S+76gkM7NwJE74MNLhnHFTAOE/9PVyHt3tIJD32
Mf56SLdWbSERCHawyflO3Nv4ZivAW6ifdiEceYJ182H7fAWEYhoZ0xlwJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOfoKz00kkOOpIur61ZUAu0nnoSHMB8GA1UdIwQY
MBaAFNUVkylg88F01JV6vp9aspUmTVRTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVJXVEtXRHp3WFRVbFhxLW4xcXlsU1pOVkZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi83Mjg1NWYtYWZhOC00ZDZmLThlZjkt
MTNmNjViNTQzY2M0LzEvNS1nclBUU1NRNDZraTZ2clZsUUM3U2VlaEljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi83Mjg1NWYtYWZhOC00ZDZmLThlZjktMTNmNjViNTQzY2M0
LzEvMVJXVEtXRHp3WFRVbFhxLW4xcXlsU1pOVkZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXHeQMA0G
CSqGSIb3DQEBCwUAA4IBAQAQhUwoPzk12o+6K8vlPVW7vmfMOPKRmfIbKnKP6trB
lNG0bqXOoDfZ4UXFJBJaPZ/pTQWAg1048Q0/DDTEEziXu+L+kHtRBG2ODSmAEtom
Nuc0DClbbSWcd8N8wGl6LmwriKCnoOa+gV4k27eV6cJ3d+FVz74QU41+d0v5zqVd
MfoHopmmm6papwoJ9YX5ITj1/YA6n/m5sf4XOp3MCNWsci0/LVQGUb+e9Q2t4at0
UcGgPvCFQpss9lf21elrc+YR3Oc/qzYrShriNa1NzJVbJzsgzvLWd1UoYi6qeBOW
IgbtvFKzSIMVAtvjikOOipPqKc7Da8W6FOiBXnovttSu
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:02:29 2025 by rpki-client