Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/fe46bd-67da-4dfe-9cb4-e25d38f5c930/1/iUuETCEbGtwWmtCdQKzT9MtsuME.roa
File: iUuETCEbGtwWmtCdQKzT9MtsuME.roa (raw, json)
Hash identifier: MRtjhtm+DjeKhdCjunhlsOl8ue7lCEfAuSo2rForAtw=
Subject key identifier: 89:4B:84:4C:21:1B:1A:DC:16:9A:D0:9D:40:AC:D3:F4:CB:6C:B8:C1
Certificate issuer: /CN=a97ff9579d5ba045dbb901a28c2c51588d04fd11
Certificate serial: 019934065209B7D3AFCF874F419264558726
Authority key identifier: A9:7F:F9:57:9D:5B:A0:45:DB:B9:01:A2:8C:2C:51:58:8D:04:FD:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qX_5V51boEXbuQGijCxRWI0E_RE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/fe46bd-67da-4dfe-9cb4-e25d38f5c930/1/iUuETCEbGtwWmtCdQKzT9MtsuME.roa
Signing time: Wed 10 Sep 2025 14:27:33 +0000
ROA not before: Wed 10 Sep 2025 14:27:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215998
IP address blocks: 5.61.210.0/24 maxlen: 24
2a0d:9140::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/fe46bd-67da-4dfe-9cb4-e25d38f5c930/1/qX_5V51boEXbuQGijCxRWI0E_RE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/fe46bd-67da-4dfe-9cb4-e25d38f5c930/1/qX_5V51boEXbuQGijCxRWI0E_RE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qX_5V51boEXbuQGijCxRWI0E_RE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:06:52:09:b7:d3:af:cf:87:4f:41:92:64:55:87:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a97ff9579d5ba045dbb901a28c2c51588d04fd11
Validity
Not Before: Sep 10 14:27:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=894b844c211b1adc169ad09d40acd3f4cb6cb8c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d8:bc:33:66:7c:16:99:f2:e1:9f:48:20:e2:
03:fd:1a:ec:0a:43:2e:b6:b7:dd:62:de:2b:de:2b:
4d:b4:07:49:f2:a6:9c:7a:ff:fe:82:d3:4e:05:86:
3a:cb:56:53:ff:17:05:24:36:3e:88:22:ec:ee:19:
b2:08:6f:c7:57:da:6e:d6:7b:3e:a7:d5:33:d1:46:
79:f4:93:a6:e2:8d:05:d6:d0:cc:9d:4d:84:f3:78:
87:e4:0c:f2:4d:bc:1b:2e:21:b6:b7:19:ce:a6:4e:
5f:b6:d8:3f:9d:87:90:52:8f:be:8a:72:45:96:81:
4e:aa:2d:cf:8d:e3:4f:e8:f5:22:4b:ba:37:2e:7a:
11:75:37:e5:0a:87:22:65:d8:fc:6f:be:95:b3:8a:
69:73:0e:96:0c:39:28:38:ef:04:53:87:39:b5:14:
ec:ff:1e:2e:05:da:76:84:7e:2d:83:91:83:28:6a:
fa:04:53:a6:7e:e9:52:26:1f:46:cd:19:94:6f:4a:
e9:38:0d:d1:5f:84:4f:30:17:46:94:5a:43:78:b4:
de:53:4e:4c:45:2c:c2:8a:35:1e:99:dc:23:93:a7:
43:3a:03:4a:83:61:0c:8b:51:89:c0:7c:b2:66:1b:
89:30:60:f4:c6:cd:7e:63:f3:bb:3b:48:2f:d5:f0:
a0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4B:84:4C:21:1B:1A:DC:16:9A:D0:9D:40:AC:D3:F4:CB:6C:B8:C1
X509v3 Authority Key Identifier:
keyid:A9:7F:F9:57:9D:5B:A0:45:DB:B9:01:A2:8C:2C:51:58:8D:04:FD:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qX_5V51boEXbuQGijCxRWI0E_RE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fe46bd-67da-4dfe-9cb4-e25d38f5c930/1/iUuETCEbGtwWmtCdQKzT9MtsuME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fe46bd-67da-4dfe-9cb4-e25d38f5c930/1/qX_5V51boEXbuQGijCxRWI0E_RE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.210.0/24
IPv6:
2a0d:9140::/29
Signature Algorithm: sha256WithRSAEncryption
e4:ab:a1:46:67:39:19:2e:a9:44:a9:59:80:01:13:a1:29:27:
01:a2:f0:3c:62:19:1c:2f:af:d4:50:e3:4f:06:25:ac:33:05:
d7:a5:3e:5b:f8:04:35:fc:f4:10:55:1a:49:a5:5a:05:d1:47:
db:a3:27:4b:de:dc:af:1a:4e:c9:31:ed:66:23:cc:36:f2:3c:
b3:f9:e2:a9:22:f8:3c:da:ec:ff:fe:e0:c9:4a:8e:0f:99:de:
30:24:eb:c2:2d:7f:2a:d5:f5:61:00:7e:e9:45:60:26:da:f0:
ad:bb:31:44:c5:ad:24:fc:8c:08:0e:40:39:b5:75:6a:88:f6:
97:f7:02:5e:45:ed:c3:25:bc:f2:b7:e6:b0:dd:3a:35:05:e2:
9b:4b:58:4f:07:05:46:2c:39:ca:bc:22:4a:e6:f6:7c:e2:c2:
1a:fd:41:04:36:06:85:7f:49:bb:c8:47:31:8f:5b:a9:5a:22:
88:72:01:0e:f7:15:31:0e:12:eb:4a:7b:74:ff:09:4a:25:10:
f4:8c:b2:c5:71:89:a5:21:c7:cf:a6:d7:9b:f9:7e:b7:7f:78:
d2:d6:d8:27:df:1c:29:0a:81:c5:06:a5:5f:e3:ed:5f:e6:21:
19:68:54:7a:17:87:5e:75:c2:fc:a8:46:48:f0:b6:4c:d1:00:
82:12:49:8d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZk0BlIJt9Ovz4dPQZJkVYcmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5N2ZmOTU3OWQ1YmEwNDVkYmI5MDFhMjhjMmM1MTU4OGQw
NGZkMTEwHhcNMjUwOTEwMTQyNzMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTRiODQ0YzIxMWIxYWRjMTY5YWQwOWQ0MGFjZDNmNGNiNmNiOGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9i8M2Z8Fpny4Z9IIOID/RrsCkMu
trfdYt4r3itNtAdJ8qacev/+gtNOBYY6y1ZT/xcFJDY+iCLs7hmyCG/HV9pu1ns+
p9Uz0UZ59JOm4o0F1tDMnU2E83iH5AzyTbwbLiG2txnOpk5fttg/nYeQUo++inJF
loFOqi3PjeNP6PUiS7o3LnoRdTflCociZdj8b76Vs4ppcw6WDDkoOO8EU4c5tRTs
/x4uBdp2hH4tg5GDKGr6BFOmfulSJh9GzRmUb0rpOA3RX4RPMBdGlFpDeLTeU05M
RSzCijUemdwjk6dDOgNKg2EMi1GJwHyyZhuJMGD0xs1+Y/O7O0gv1fCgBwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFIlLhEwhGxrcFprQnUCs0/TLbLjBMB8GA1UdIwQY
MBaAFKl/+VedW6BF27kBoowsUViNBP0RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVhfNVY1MWJvRVhidVFHaWpDeFJXSTBFX1JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9mZTQ2YmQtNjdkYS00ZGZlLTljYjQt
ZTI1ZDM4ZjVjOTMwLzEvaVV1RVRDRWJHdHdXbXRDZFFLelQ5TXRzdU1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9mZTQ2YmQtNjdkYS00ZGZlLTljYjQtZTI1ZDM4ZjVjOTMw
LzEvcVhfNVY1MWJvRVhidVFHaWpDeFJXSTBFX1JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQABT3SMA0E
AgACMAcDBQMqDZFAMA0GCSqGSIb3DQEBCwUAA4IBAQDkq6FGZzkZLqlEqVmAAROh
KScBovA8YhkcL6/UUONPBiWsMwXXpT5b+AQ1/PQQVRpJpVoF0UfboydL3tyvGk7J
Me1mI8w28jyz+eKpIvg82uz//uDJSo4Pmd4wJOvCLX8q1fVhAH7pRWAm2vCtuzFE
xa0k/IwIDkA5tXVqiPaX9wJeRe3DJbzyt+aw3To1BeKbS1hPBwVGLDnKvCJK5vZ8
4sIa/UEENgaFf0m7yEcxj1upWiKIcgEO9xUxDhLrSnt0/wlKJRD0jLLFcYmlIcfP
pteb+X63f3jS1tgn3xwpCoHFBqVf4+1f5iEZaFR6F4dedcL8qEZI8LZM0QCCEkmN
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:31 2025 by rpki-client