Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/pbCRn5qHfv9kAFmGRVO_GwJ-FGU.roa
File: pbCRn5qHfv9kAFmGRVO_GwJ-FGU.roa (raw, json)
Hash identifier: DuA/Ogfo71srzFpKEqoNkfpCys4Br/KSRmwQFn52q84=
Subject key identifier: A5:B0:91:9F:9A:87:7E:FF:64:00:59:86:45:53:BF:1B:02:7E:14:65
Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f
Certificate serial: 0199F0F346A52EF9434FE23A98C91F7C3502
Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/pbCRn5qHfv9kAFmGRVO_GwJ-FGU.roa
Signing time: Fri 17 Oct 2025 06:54:59 +0000
ROA not before: Fri 17 Oct 2025 06:54:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29205
IP address blocks: 45.156.236.0/22 maxlen: 24
91.230.36.0/23 maxlen: 23
185.49.12.0/22 maxlen: 24
185.100.228.0/23 maxlen: 24
185.100.231.0/24 maxlen: 24
185.192.102.0/24 maxlen: 24
188.214.16.0/21 maxlen: 24
188.215.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f0:f3:46:a5:2e:f9:43:4f:e2:3a:98:c9:1f:7c:35:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f
Validity
Not Before: Oct 17 06:54:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5b0919f9a877eff640059864553bf1b027e1465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:52:8b:a6:c8:d8:6b:d3:e4:8d:bb:29:cc:52:
f9:7c:11:3c:95:8b:70:05:d7:d5:10:5e:ba:88:d7:
62:0c:e7:d3:42:0c:ec:cf:bf:35:a8:bb:ce:b3:b6:
95:a5:d8:d2:9c:69:d9:46:53:e5:09:b0:9f:0f:49:
fa:de:cc:1e:1b:d8:12:79:b1:a5:b6:1d:f0:be:aa:
c7:35:0a:03:9a:f8:39:f6:eb:e0:e3:11:f8:79:77:
22:34:40:db:35:2a:35:6e:83:e3:de:95:ad:3d:09:
d6:92:9b:bd:64:32:59:a2:cb:1d:30:87:ac:a8:51:
69:f8:2e:72:e3:c9:60:0c:50:78:74:c7:c4:79:78:
64:4b:da:67:06:d7:6b:16:42:cf:39:93:0f:8b:41:
38:65:eb:06:df:d0:02:e9:54:01:89:8f:b9:03:de:
c3:d0:c9:a7:b3:ed:8e:c7:31:fd:94:16:46:51:77:
4c:fd:3f:af:2f:eb:0c:cb:ee:37:f4:9a:5d:ad:f7:
44:1f:b7:91:dc:04:9c:29:43:b1:d8:4e:9f:70:98:
dd:fd:4f:29:fc:9d:0e:73:92:d5:22:25:f1:5e:75:
c4:b4:ec:af:0d:62:cb:3a:bd:15:ba:06:ca:11:07:
05:91:b8:d8:97:bc:e2:68:cf:d3:49:02:42:bb:6a:
84:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B0:91:9F:9A:87:7E:FF:64:00:59:86:45:53:BF:1B:02:7E:14:65
X509v3 Authority Key Identifier:
keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/pbCRn5qHfv9kAFmGRVO_GwJ-FGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.236.0/22
91.230.36.0/23
185.49.12.0/22
185.100.228.0/23
185.100.231.0/24
185.192.102.0/24
188.214.16.0/21
188.215.64.0/24
Signature Algorithm: sha256WithRSAEncryption
74:2d:eb:dc:c0:47:61:8a:4a:1d:84:b5:f6:c1:9b:02:33:f8:
e9:23:8b:34:10:7e:5d:07:89:d9:0b:b9:42:de:42:7a:f6:f7:
44:8e:ce:89:ba:a9:50:fc:3c:ae:20:ef:17:d7:33:7c:49:2a:
dd:60:25:64:6a:f4:76:51:ef:2f:d5:b6:eb:b3:df:ca:ea:fb:
67:11:a7:95:20:3a:84:9d:6b:45:d8:bc:f4:7f:82:31:b3:bd:
33:42:b8:62:61:fd:de:9f:77:42:3a:c4:ed:c6:d1:6f:e6:77:
1c:8b:8b:b5:72:0c:7e:05:df:22:f8:36:e1:05:a0:bb:95:25:
c5:80:43:cb:e3:49:86:80:d3:4c:c9:e5:f2:8f:61:75:35:5e:
3f:83:f8:02:f4:1e:c6:88:9a:9d:49:6e:d2:ba:b4:65:54:38:
83:79:93:58:cc:02:10:d7:8b:a5:e4:aa:86:04:b0:6f:91:2b:
f0:d5:53:7c:f3:ad:ea:93:11:12:f5:9b:29:b7:fd:ea:f3:40:
bd:55:ea:32:5e:be:c9:c4:8f:bc:ba:92:a5:33:36:65:35:5e:
de:15:dd:61:5a:9c:82:f6:e6:d0:43:b8:9b:5d:f5:fc:2c:c7:
7e:3e:7f:de:62:7a:53:17:50:7c:fe:fc:89:cf:69:16:2a:9d:
6e:19:de:56
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZnw80alLvlDT+I6mMkffDUCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmN2RhNTY4YWQwMjdiOWUyNDljMTNlMjIzZDMyMjc2OTg4
MWEyOWYwHhcNMjUxMDE3MDY1NDU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNWIwOTE5ZjlhODc3ZWZmNjQwMDU5ODY0NTUzYmYxYjAyN2UxNDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVKLpsjYa9PkjbspzFL5fBE8lYtw
BdfVEF66iNdiDOfTQgzsz781qLvOs7aVpdjSnGnZRlPlCbCfD0n63sweG9gSebGl
th3wvqrHNQoDmvg59uvg4xH4eXciNEDbNSo1boPj3pWtPQnWkpu9ZDJZossdMIes
qFFp+C5y48lgDFB4dMfEeXhkS9pnBtdrFkLPOZMPi0E4ZesG39AC6VQBiY+5A97D
0Mmns+2OxzH9lBZGUXdM/T+vL+sMy+439JpdrfdEH7eR3AScKUOx2E6fcJjd/U8p
/J0Oc5LVIiXxXnXEtOyvDWLLOr0VugbKEQcFkbjYl7ziaM/TSQJCu2qEAQIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFKWwkZ+ah37/ZABZhkVTvxsCfhRlMB8GA1UdIwQY
MBaAFF99pWitAnueJJwT4iPTInaYgaKfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUt
Mzc1NzUzOWMyYWM5LzEvcGJDUm41cUhmdjlrQUZtR1JWT19Hd0otRkdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUtMzc1NzUzOWMyYWM5
LzEvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQCLZzsAwQB
W+YkAwQCuTEMAwQBuWTkAwQAuWTnAwQAucBmAwQDvNYQAwQAvNdAMA0GCSqGSIb3
DQEBCwUAA4IBAQB0LevcwEdhikodhLX2wZsCM/jpI4s0EH5dB4nZC7lC3kJ69vdE
js6JuqlQ/DyuIO8X1zN8SSrdYCVkavR2Ue8v1bbrs9/K6vtnEaeVIDqEnWtF2Lz0
f4Ixs70zQrhiYf3en3dCOsTtxtFv5ncci4u1cgx+Bd8i+DbhBaC7lSXFgEPL40mG
gNNMyeXyj2F1NV4/g/gC9B7GiJqdSW7SurRlVDiDeZNYzAIQ14ul5KqGBLBvkSvw
1VN8863qkxES9Zspt/3q80C9VeoyXr7JxI+8upKlMzZlNV7eFd1hWpyC9ubQQ7ib
XfX8LMd+Pn/eYnpTF1B8/vyJz2kWKp1uGd5W
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:15:11 2025 by rpki-client