Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/Sn5j9mrsDzCn0e9SdfxRYinpue4.roa
File: Sn5j9mrsDzCn0e9SdfxRYinpue4.roa (raw, json)
Hash identifier: Pmm/ivnYdFW6uuCjzZHPDQpUkRs+mtt6nnTRFq0BYj0=
Subject key identifier: 4A:7E:63:F6:6A:EC:0F:30:A7:D1:EF:52:75:FC:51:62:29:E9:B9:EE
Certificate issuer: /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Certificate serial: 01997BF34304797FFB15CCF62B55811DA8BD
Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/Sn5j9mrsDzCn0e9SdfxRYinpue4.roa
Signing time: Wed 24 Sep 2025 13:39:23 +0000
ROA not before: Wed 24 Sep 2025 13:39:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28725
IP address blocks: 212.96.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7b:f3:43:04:79:7f:fb:15:cc:f6:2b:55:81:1d:a8:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Validity
Not Before: Sep 24 13:39:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a7e63f66aec0f30a7d1ef5275fc516229e9b9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:62:db:f0:00:4b:cc:72:8d:0b:6c:2a:23:cb:
d0:82:9b:a1:7b:35:e3:ca:52:f9:09:f9:03:f9:12:
22:10:d6:0e:85:5a:48:53:b9:74:a8:f5:79:1e:fa:
5b:de:8d:0a:28:23:3b:88:c9:59:7a:56:81:13:f9:
f5:f3:96:98:e7:c9:15:a9:88:ad:2e:06:f6:aa:65:
a5:e1:92:1c:13:fb:75:da:dc:47:9d:a6:e6:17:d7:
84:da:c2:1f:9b:6a:1e:e3:f6:f1:9b:f8:20:30:54:
a7:9b:f1:41:ea:4a:fc:ff:83:c6:f2:4d:eb:76:11:
f6:b1:2f:06:e7:45:82:e0:40:22:35:d8:8d:e4:5f:
52:e8:8b:c3:0a:88:0d:78:65:0d:6f:64:89:de:f7:
10:c5:98:0c:9f:b7:69:ee:51:d5:ff:60:54:fb:d0:
31:0e:a6:22:60:f6:59:40:8e:81:ad:09:f5:b6:6f:
93:be:38:a2:b2:ed:2f:21:49:75:50:7b:8c:8b:e9:
ce:94:e9:17:88:74:8c:07:05:97:6a:21:14:e0:db:
af:8d:68:92:2c:b2:27:12:27:93:22:83:43:1c:87:
7b:9b:b1:51:c5:e0:51:48:1f:e8:7b:45:62:14:ce:
2a:1a:a0:51:b6:6b:62:27:46:36:f5:65:1c:00:c6:
83:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7E:63:F6:6A:EC:0F:30:A7:D1:EF:52:75:FC:51:62:29:E9:B9:EE
X509v3 Authority Key Identifier:
keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/Sn5j9mrsDzCn0e9SdfxRYinpue4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.96.180.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:be:0f:71:67:b9:eb:68:43:1f:8b:77:cf:55:fa:a8:c3:6b:
fc:43:a7:d9:02:d4:c1:af:8a:fe:92:8d:b8:4f:8e:d6:78:46:
a7:5a:6e:d5:52:81:26:70:28:ce:3c:3b:1c:a3:98:a7:e2:4c:
48:03:cb:e7:6f:11:d4:70:b3:c2:3d:55:ff:35:a9:be:4c:d4:
e1:83:58:e0:57:56:aa:39:6d:ba:2d:2a:b0:be:11:76:5f:96:
14:39:e8:8b:7d:53:dd:72:33:3f:55:50:fe:d2:e8:10:da:83:
b0:94:f6:33:d0:7f:d1:35:58:6d:4e:b4:12:a1:6f:3b:a4:73:
16:b5:e7:6b:b4:dd:68:cb:1c:b9:fd:83:a7:bb:6c:c6:41:23:
d1:e0:d4:44:14:c2:28:d2:2c:7b:bc:75:f4:ae:68:fa:09:04:
90:22:d5:1a:9c:32:57:7f:f1:01:fd:ce:9a:d7:2a:3f:2d:2a:
c3:50:8d:1c:3e:ce:47:6b:40:33:1a:f6:1b:07:1c:e3:ad:1f:
f0:59:8e:c6:ff:ce:23:36:e7:a5:d3:99:fb:7d:7e:b2:bb:5a:
be:33:f1:d1:a0:69:75:03:7b:6c:c0:b9:7f:bc:9d:ce:f0:33:
3b:45:30:da:65:2d:50:09:f8:20:81:fb:66:8d:51:ce:b4:0c:
27:20:a1:4e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZl780MEeX/7Fcz2K1WBHai9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZDZjNmU4YmNlZDQwYmQwMzJkMTc3MThjMWIxZTM5YWU4
NDFhZTgwHhcNMjUwOTI0MTMzOTIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTdlNjNmNjZhZWMwZjMwYTdkMWVmNTI3NWZjNTE2MjI5ZTliOWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWLb8ABLzHKNC2wqI8vQgpuhezXj
ylL5CfkD+RIiENYOhVpIU7l0qPV5Hvpb3o0KKCM7iMlZelaBE/n185aY58kVqYit
Lgb2qmWl4ZIcE/t12txHnabmF9eE2sIfm2oe4/bxm/ggMFSnm/FB6kr8/4PG8k3r
dhH2sS8G50WC4EAiNdiN5F9S6IvDCogNeGUNb2SJ3vcQxZgMn7dp7lHV/2BU+9Ax
DqYiYPZZQI6BrQn1tm+Tvjiisu0vIUl1UHuMi+nOlOkXiHSMBwWXaiEU4NuvjWiS
LLInEieTIoNDHId7m7FRxeBRSB/oe0ViFM4qGqBRtmtiJ0Y29WUcAMaDgQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEp+Y/Zq7A8wp9HvUnX8UWIp6bnuMB8GA1UdIwQY
MBaAFOXWxui87UC9Ay0XcYwbHjmuhBroMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWRiRzZMenRRTDBETFJkeGpCc2VPYTZFR3VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wODk0ZjctZTI0ZC00NzI4LThjYWQt
YmQyNDliNjI1Nzk3LzEvU241ajltcnNEekNuMGU5U2RmeFJZaW5wdWU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wODk0ZjctZTI0ZC00NzI4LThjYWQtYmQyNDliNjI1Nzk3
LzEvNWRiRzZMenRRTDBETFJkeGpCc2VPYTZFR3VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1GC0MA0G
CSqGSIb3DQEBCwUAA4IBAQBavg9xZ7nraEMfi3fPVfqow2v8Q6fZAtTBr4r+ko24
T47WeEanWm7VUoEmcCjOPDsco5in4kxIA8vnbxHUcLPCPVX/Nam+TNThg1jgV1aq
OW26LSqwvhF2X5YUOeiLfVPdcjM/VVD+0ugQ2oOwlPYz0H/RNVhtTrQSoW87pHMW
tedrtN1oyxy5/YOnu2zGQSPR4NREFMIo0ix7vHX0rmj6CQSQItUanDJXf/EB/c6a
1yo/LSrDUI0cPs5Ha0AzGvYbBxzjrR/wWY7G/84jNuel05n7fX6yu1q+M/HRoGl1
A3tswLl/vJ3O8DM7RTDaZS1QCfgggftmjVHOtAwnIKFO
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:49 2025 by rpki-client