Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/XVtsR7QApMnuJxBGbKhRiugNLuM.roa
File: XVtsR7QApMnuJxBGbKhRiugNLuM.roa (raw, json)
Hash identifier: mBXTHq+MNZP6clXD4om9o4T9lzXQfLi50+F1yKfLWMA=
Subject key identifier: 5D:5B:6C:47:B4:00:A4:C9:EE:27:10:46:6C:A8:51:8A:E8:0D:2E:E3
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 01993F69A82DACD4565A15B02E1FA2FEFF1F
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/XVtsR7QApMnuJxBGbKhRiugNLuM.roa
Signing time: Fri 12 Sep 2025 19:31:52 +0000
ROA not before: Fri 12 Sep 2025 19:31:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215186
IP address blocks: 45.89.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3f:69:a8:2d:ac:d4:56:5a:15:b0:2e:1f:a2:fe:ff:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Sep 12 19:31:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d5b6c47b400a4c9ee2710466ca8518ae80d2ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:1a:2c:44:f8:88:fd:f6:7b:03:e8:3e:e8:e4:
5a:a9:ec:ea:fb:43:c4:8d:2e:6a:ef:3a:6d:7f:cb:
f1:0f:ac:bb:85:47:3e:be:fb:f3:8c:9f:88:90:9b:
18:c9:46:eb:84:e6:a8:58:81:4f:e5:f4:e5:17:68:
23:6f:01:86:ec:92:92:92:42:10:ff:f8:40:2f:9b:
98:1f:9a:27:db:61:d1:e8:49:09:d8:b4:90:0f:66:
2e:1f:cf:07:46:31:fa:99:7f:f0:b6:6a:25:0e:0c:
bc:01:70:d4:84:6c:d9:cd:6b:d5:77:36:68:fb:8f:
52:c6:c5:f0:b5:36:86:9d:64:53:0c:70:96:09:a3:
44:9e:ef:c4:f0:fd:5e:cb:e5:5d:c8:22:67:8d:47:
68:d9:c3:42:2c:d4:e8:3a:98:16:5a:1a:2f:61:79:
92:2f:5f:60:b6:77:76:4d:4a:0f:84:2e:c9:a2:02:
c5:da:64:cb:48:b4:b7:31:79:20:96:75:d1:6c:7a:
51:5d:20:7c:b5:39:33:f4:32:e2:b3:fe:2f:86:95:
3b:20:38:39:f6:1c:3e:43:38:67:57:6d:5e:b8:da:
b1:f3:eb:9f:a9:49:a0:10:6a:7d:74:7b:50:a3:cb:
4d:26:5c:6a:57:bf:cc:5f:dd:ca:3a:5f:f1:c8:90:
43:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:5B:6C:47:B4:00:A4:C9:EE:27:10:46:6C:A8:51:8A:E8:0D:2E:E3
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/XVtsR7QApMnuJxBGbKhRiugNLuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.29.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:bb:a0:e4:03:e1:0d:72:7c:ea:c8:5a:16:ce:79:8f:ee:8a:
58:95:08:4e:61:ac:09:c5:d3:16:e4:a4:03:0e:00:a7:43:63:
f7:a7:b7:a6:9c:a9:f9:ee:7c:26:d9:48:d9:4a:89:0d:c8:f6:
50:de:e1:3a:78:0e:62:cb:9d:37:bb:a7:27:65:bd:5d:5d:c6:
49:65:1c:1c:03:de:5a:72:f7:2f:0d:ab:1c:74:e0:b1:48:f2:
3b:52:a8:51:41:11:15:d5:7b:88:ad:23:b7:86:f8:eb:53:05:
c9:b8:da:11:81:ca:9c:9b:1e:b1:52:a9:18:2d:8e:48:b4:65:
6b:32:ee:e0:ec:c6:07:76:ad:2d:e8:85:db:9d:a5:09:25:4c:
db:e4:33:50:fe:38:d9:26:96:fa:c2:90:6d:89:59:57:67:3b:
11:de:15:40:49:6c:77:43:59:5b:8b:be:24:0b:d9:55:e8:3f:
a9:d9:88:59:ab:3e:56:48:39:af:bb:3d:6b:93:73:73:05:58:
0b:c0:8b:7b:03:16:26:c8:e4:08:0f:c3:c8:9b:b6:a6:14:08:
51:66:c0:d3:8f:4f:1d:45:11:b7:b7:9a:0c:58:cc:b9:4c:f4:
ac:40:f7:cb:3b:a0:e6:58:0f:63:54:8c:7a:35:f6:fb:fb:77:
a7:96:92:b4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZk/aagtrNRWWhWwLh+i/v8fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZWUwZDdlNzMwODRhNDJlNGM3ZjcxMThmMjM4M2ZjZmYz
NjliYTQwHhcNMjUwOTEyMTkzMTUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDViNmM0N2I0MDBhNGM5ZWUyNzEwNDY2Y2E4NTE4YWU4MGQyZWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8BosRPiI/fZ7A+g+6ORaqezq+0PE
jS5q7zptf8vxD6y7hUc+vvvzjJ+IkJsYyUbrhOaoWIFP5fTlF2gjbwGG7JKSkkIQ
//hAL5uYH5on22HR6EkJ2LSQD2YuH88HRjH6mX/wtmolDgy8AXDUhGzZzWvVdzZo
+49SxsXwtTaGnWRTDHCWCaNEnu/E8P1ey+VdyCJnjUdo2cNCLNToOpgWWhovYXmS
L19gtnd2TUoPhC7JogLF2mTLSLS3MXkglnXRbHpRXSB8tTkz9DLis/4vhpU7IDg5
9hw+QzhnV21euNqx8+ufqUmgEGp9dHtQo8tNJlxqV7/MX93KOl/xyJBDPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF1bbEe0AKTJ7icQRmyoUYroDS7jMB8GA1UdIwQY
MBaAFF7uDX5zCEpC5Mf3EY8jg/z/NpukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgt
ZGRjMjY2NTY0NmNjLzEvWFZ0c1I3UUFwTW51SnhCR2JLaFJpdWdOTHVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgtZGRjMjY2NTY0NmNj
LzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVkdMA0G
CSqGSIb3DQEBCwUAA4IBAQBcu6DkA+ENcnzqyFoWznmP7opYlQhOYawJxdMW5KQD
DgCnQ2P3p7emnKn57nwm2UjZSokNyPZQ3uE6eA5iy503u6cnZb1dXcZJZRwcA95a
cvcvDascdOCxSPI7UqhRQREV1XuIrSO3hvjrUwXJuNoRgcqcmx6xUqkYLY5ItGVr
Mu7g7MYHdq0t6IXbnaUJJUzb5DNQ/jjZJpb6wpBtiVlXZzsR3hVASWx3Q1lbi74k
C9lV6D+p2YhZqz5WSDmvuz1rk3NzBVgLwIt7AxYmyOQID8PIm7amFAhRZsDTj08d
RRG3t5oMWMy5TPSsQPfLO6DmWA9jVIx6Nfb7+3enlpK0
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:09:01 2025 by rpki-client