Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/1SJs80n4_nBUWv0Nl3YHjW8FIm0.roa
File: 1SJs80n4_nBUWv0Nl3YHjW8FIm0.roa (raw, json)
Hash identifier: UDBQm5vXA9ShJ/kmFETOiTB7A3mHYF43+5DDj2H8GCA=
Subject key identifier: D5:22:6C:F3:49:F8:FE:70:54:5A:FD:0D:97:76:07:8D:6F:05:22:6D
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 01989D3EA4008308BAEB5E4C4D21C90A5A5A
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/1SJs80n4_nBUWv0Nl3YHjW8FIm0.roa
Signing time: Tue 12 Aug 2025 07:46:24 +0000
ROA not before: Tue 12 Aug 2025 07:46:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62563
IP address blocks: 5.101.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:3e:a4:00:83:08:ba:eb:5e:4c:4d:21:c9:0a:5a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Aug 12 07:46:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5226cf349f8fe70545afd0d9776078d6f05226d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:17:b3:1f:5d:e0:08:dd:45:b0:52:ec:43:9d:
37:49:06:ac:51:97:e7:c1:c0:ef:05:1c:d0:02:47:
78:d1:f8:20:7f:6a:d6:12:b8:df:bc:58:d5:10:33:
b0:26:70:50:e1:6b:48:15:ce:67:67:bb:7b:29:76:
93:47:d8:cd:fb:01:5f:c9:92:70:81:97:62:4b:89:
02:85:06:43:77:ab:37:9e:b8:b8:cc:aa:d6:d1:31:
d9:ba:70:42:2e:6b:ae:8c:4e:52:c7:53:87:fd:58:
59:46:9b:7b:b1:31:59:70:75:55:74:9a:2b:e6:a8:
da:d7:39:12:4b:73:51:81:d4:ec:45:21:2f:a9:5c:
1c:0e:77:a0:5c:9d:7f:82:61:c2:b1:1d:e8:8d:40:
16:a1:76:2a:ab:81:7c:d1:25:49:7d:bf:f2:c8:f1:
36:79:c0:27:2d:7a:18:0a:09:67:3b:98:f5:74:c3:
8b:3e:e6:a9:3d:6e:ff:38:e8:43:49:b2:89:04:f0:
47:7b:fe:76:9d:87:dc:a2:18:9f:73:9b:57:af:c3:
fa:b0:c0:23:04:c2:11:66:ea:b5:71:99:00:ab:83:
6f:aa:bb:ae:07:5c:54:f5:04:3c:d6:0a:47:55:0c:
9f:5e:e6:15:ed:9d:b4:ee:77:e1:35:0c:c2:88:ab:
1e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:22:6C:F3:49:F8:FE:70:54:5A:FD:0D:97:76:07:8D:6F:05:22:6D
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/1SJs80n4_nBUWv0Nl3YHjW8FIm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.101.86.0/24
Signature Algorithm: sha256WithRSAEncryption
74:87:4c:c9:b7:b4:4c:85:65:4f:bb:68:89:51:f3:1d:1f:3a:
13:88:4d:d6:2b:0d:c5:12:63:2f:c8:3e:2b:e6:1e:8b:7b:aa:
cd:ce:77:b4:bf:b5:ae:45:47:c1:40:11:a0:20:43:d3:ae:b0:
68:55:98:dd:0b:18:8a:fb:38:ae:14:dd:a3:10:a6:aa:10:f0:
d0:ad:8a:c0:33:b8:93:37:78:32:04:cb:ef:98:2b:21:0f:bf:
e7:aa:70:b6:5e:4e:cb:d2:e4:cb:ee:14:6f:7a:93:11:00:a0:
e4:85:9f:4a:62:c8:fb:c4:c9:b2:7e:44:8e:c3:07:a7:5e:1d:
d4:f9:31:fe:8b:f8:1a:c8:b1:38:1f:5f:e4:7d:85:1e:a2:8c:
00:ce:d3:5f:91:1d:62:d1:02:71:76:26:d4:d5:e6:64:e9:55:
44:91:eb:0a:0f:20:7c:63:29:0e:59:bc:3c:b4:ad:fe:d2:70:
6d:4c:7c:15:84:e7:39:48:9e:c5:fc:a3:2e:57:e6:5e:e4:fb:
5e:cf:1a:7c:ad:7a:77:ac:8d:b1:84:5b:eb:76:1f:c7:c8:fa:
0e:fe:44:02:16:9b:6f:93:ca:f4:d2:ae:32:40:2a:18:b9:f6:
04:9b:a1:5a:d7:78:eb:95:1c:ec:f0:ff:7c:7a:ac:cc:6c:d1:
68:7d:28:7b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZidPqQAgwi6615MTSHJClpaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjUwODEyMDc0NjI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTIyNmNmMzQ5ZjhmZTcwNTQ1YWZkMGQ5Nzc2MDc4ZDZmMDUyMjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBezH13gCN1FsFLsQ503SQasUZfn
wcDvBRzQAkd40fggf2rWErjfvFjVEDOwJnBQ4WtIFc5nZ7t7KXaTR9jN+wFfyZJw
gZdiS4kChQZDd6s3nri4zKrW0THZunBCLmuujE5Sx1OH/VhZRpt7sTFZcHVVdJor
5qja1zkSS3NRgdTsRSEvqVwcDnegXJ1/gmHCsR3ojUAWoXYqq4F80SVJfb/yyPE2
ecAnLXoYCglnO5j1dMOLPuapPW7/OOhDSbKJBPBHe/52nYfcohifc5tXr8P6sMAj
BMIRZuq1cZkAq4NvqruuB1xU9QQ81gpHVQyfXuYV7Z207nfhNQzCiKseeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNUibPNJ+P5wVFr9DZd2B41vBSJtMB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvMVNKczgwbjRfbkJVV3YwTmwzWUhqVzhGSW0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABWVWMA0G
CSqGSIb3DQEBCwUAA4IBAQB0h0zJt7RMhWVPu2iJUfMdHzoTiE3WKw3FEmMvyD4r
5h6Le6rNzne0v7WuRUfBQBGgIEPTrrBoVZjdCxiK+ziuFN2jEKaqEPDQrYrAM7iT
N3gyBMvvmCshD7/nqnC2Xk7L0uTL7hRvepMRAKDkhZ9KYsj7xMmyfkSOwwenXh3U
+TH+i/gayLE4H1/kfYUeoowAztNfkR1i0QJxdibU1eZk6VVEkesKDyB8YykOWbw8
tK3+0nBtTHwVhOc5SJ7F/KMuV+Ze5Ptezxp8rXp3rI2xhFvrdh/HyPoO/kQCFptv
k8r00q4yQCoYufYEm6Fa13jrlRzs8P98eqzMbNFofSh7
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:22:09 2025 by rpki-client