Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/5CPU9aA-a5aIFtlnU81L75Yc2HI.roa
File: 5CPU9aA-a5aIFtlnU81L75Yc2HI.roa (raw, json)
Hash identifier: lW4ZfWRK/bV841l1Iwcn3cs1Q/PztznOKDD9zjziI3c=
Subject key identifier: E4:23:D4:F5:A0:3E:6B:96:88:16:D9:67:53:CD:4B:EF:96:1C:D8:72
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0198BEB400C731B8752A6E998EDABD3F0D5F
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/5CPU9aA-a5aIFtlnU81L75Yc2HI.roa
Signing time: Mon 18 Aug 2025 19:42:04 +0000
ROA not before: Mon 18 Aug 2025 19:42:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401163
IP address blocks: 45.149.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:be:b4:00:c7:31:b8:75:2a:6e:99:8e:da:bd:3f:0d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Aug 18 19:42:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e423d4f5a03e6b968816d96753cd4bef961cd872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a1:61:3a:fb:d8:ce:b1:5f:22:36:ee:12:92:
2d:8c:34:11:01:f8:e1:31:36:11:6d:5f:b7:1f:bf:
27:ca:d6:73:4f:37:29:d5:91:a0:a4:eb:b8:84:7b:
15:3e:64:1d:9c:93:02:c9:20:2a:ce:a8:bb:fd:50:
eb:27:f4:d7:fa:81:93:75:d8:14:dd:3e:e1:5c:da:
10:50:7c:74:35:25:65:6d:cf:b1:e4:9b:b1:76:cb:
28:3c:11:2f:03:ba:fc:f4:2a:89:4f:00:19:43:85:
f1:db:b1:40:95:d5:83:69:35:97:22:65:33:04:74:
0d:4d:e4:cc:cf:f1:f2:3b:5f:3c:9f:c3:c1:ec:91:
38:0c:e4:b3:e1:4d:31:fe:79:41:61:43:d0:60:22:
81:40:ad:3f:73:33:46:51:b3:9f:6c:32:71:47:40:
77:0d:8c:89:80:9b:6e:63:4e:ab:84:3d:b6:f1:f6:
75:be:8d:7c:a4:88:53:2a:d1:96:dc:cd:7d:f4:13:
88:4a:27:a6:af:80:69:e6:d5:a1:fc:8d:2d:6c:63:
cc:a2:a4:c8:75:1f:d4:7e:95:6e:cc:60:1f:de:12:
e7:e5:16:5a:c6:84:e6:86:cd:e1:9b:d8:99:76:a5:
09:0f:d8:76:58:e9:e6:2b:4b:88:9d:03:d7:65:20:
a2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:23:D4:F5:A0:3E:6B:96:88:16:D9:67:53:CD:4B:EF:96:1C:D8:72
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/5CPU9aA-a5aIFtlnU81L75Yc2HI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.27.0/24
Signature Algorithm: sha256WithRSAEncryption
88:e7:10:53:40:2d:97:f2:70:da:c1:fd:6f:cc:35:2f:a3:81:
52:2e:e5:e3:9c:c8:90:6e:2f:84:35:19:71:f2:49:47:ba:b1:
73:76:bf:c7:56:34:3e:fb:74:14:83:84:0b:29:f7:e4:91:2f:
1b:78:15:b5:a8:7d:06:a8:ab:34:b1:26:dd:c8:07:7b:7b:80:
4e:d0:d8:96:a9:b2:39:a4:8b:a4:64:ac:72:9e:00:8f:ad:ae:
5a:2d:2d:eb:b8:d1:39:f6:e8:ae:71:1f:f8:7a:3a:bd:ab:cc:
5f:aa:f7:92:f4:78:bd:72:cb:1b:08:6a:10:1a:74:35:4e:ca:
5e:65:ce:7c:3e:7a:5f:9c:12:de:24:8a:b2:63:fd:db:f4:d1:
5c:4d:24:10:f3:38:12:18:13:f5:30:8f:80:90:a5:2f:ea:56:
79:3e:03:a2:57:a5:15:8a:e4:4e:c8:52:93:ad:19:64:0f:6e:
f6:7e:6a:d2:13:73:7a:cf:64:d5:da:0d:ce:94:1e:a7:5a:df:
c5:e5:7f:49:8d:b4:58:d9:74:ea:fb:2d:eb:fa:9d:5a:ff:bf:
18:2a:c3:38:91:d1:61:e0:e2:64:ed:ff:12:45:de:3f:84:a7:
99:be:74:58:37:40:8b:5b:fc:f3:ff:12:72:48:81:ba:d8:73:
58:b8:57:e2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZi+tADHMbh1Km6Zjtq9Pw1fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjUwODE4MTk0MjA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDIzZDRmNWEwM2U2Yjk2ODgxNmQ5Njc1M2NkNGJlZjk2MWNkODcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6FhOvvYzrFfIjbuEpItjDQRAfjh
MTYRbV+3H78nytZzTzcp1ZGgpOu4hHsVPmQdnJMCySAqzqi7/VDrJ/TX+oGTddgU
3T7hXNoQUHx0NSVlbc+x5JuxdssoPBEvA7r89CqJTwAZQ4Xx27FAldWDaTWXImUz
BHQNTeTMz/HyO188n8PB7JE4DOSz4U0x/nlBYUPQYCKBQK0/czNGUbOfbDJxR0B3
DYyJgJtuY06rhD228fZ1vo18pIhTKtGW3M199BOISiemr4Bp5tWh/I0tbGPMoqTI
dR/UfpVuzGAf3hLn5RZaxoTmhs3hm9iZdqUJD9h2WOnmK0uInQPXZSCiDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOQj1PWgPmuWiBbZZ1PNS++WHNhyMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvNUNQVTlhQS1hNWFJRnRsblU4MUw3NVljMkhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZUbMA0G
CSqGSIb3DQEBCwUAA4IBAQCI5xBTQC2X8nDawf1vzDUvo4FSLuXjnMiQbi+ENRlx
8klHurFzdr/HVjQ++3QUg4QLKffkkS8beBW1qH0GqKs0sSbdyAd7e4BO0NiWqbI5
pIukZKxyngCPra5aLS3ruNE59uiucR/4ejq9q8xfqveS9Hi9cssbCGoQGnQ1Tspe
Zc58PnpfnBLeJIqyY/3b9NFcTSQQ8zgSGBP1MI+AkKUv6lZ5PgOiV6UViuROyFKT
rRlkD272fmrSE3N6z2TV2g3OlB6nWt/F5X9JjbRY2XTq+y3r+p1a/78YKsM4kdFh
4OJk7f8SRd4/hKeZvnRYN0CLW/zz/xJySIG62HNYuFfi
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:01:11 2025 by rpki-client