Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/R65PH65k0gwzX81GAD8rU_ScyO4.roa
File: R65PH65k0gwzX81GAD8rU_ScyO4.roa (raw, json)
Hash identifier: Nr7OuzzGf5ue02dNRD602xmVvt2ExeHdCc/mpLjZtDk=
Subject key identifier: 47:AE:4F:1F:AE:64:D2:0C:33:5F:CD:46:00:3F:2B:53:F4:9C:C8:EE
Certificate issuer: /CN=79d565f99ff5e0ffb5bdf9995ed7a808d41406e5
Certificate serial: 0199E25E590BA7ABD89DAF56AC2F2C3F90D4
Authority key identifier: 79:D5:65:F9:9F:F5:E0:FF:B5:BD:F9:99:5E:D7:A8:08:D4:14:06:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edVl-Z_14P-1vfmZXteoCNQUBuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/R65PH65k0gwzX81GAD8rU_ScyO4.roa
Signing time: Tue 14 Oct 2025 10:57:38 +0000
ROA not before: Tue 14 Oct 2025 10:57:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57568
IP address blocks: 130.185.120.0/22 maxlen: 22
185.204.168.0/22 maxlen: 24
185.235.40.0/22 maxlen: 24
193.24.119.0/24 maxlen: 24
194.5.192.0/23 maxlen: 24
194.5.206.0/23 maxlen: 24
2a0f:94c0:100::/40 maxlen: 40
2a0f:94c0:200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/edVl-Z_14P-1vfmZXteoCNQUBuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/edVl-Z_14P-1vfmZXteoCNQUBuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/edVl-Z_14P-1vfmZXteoCNQUBuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e2:5e:59:0b:a7:ab:d8:9d:af:56:ac:2f:2c:3f:90:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d565f99ff5e0ffb5bdf9995ed7a808d41406e5
Validity
Not Before: Oct 14 10:57:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47ae4f1fae64d20c335fcd46003f2b53f49cc8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:91:35:5d:4f:90:d0:25:8b:0f:2b:b6:0a:64:
01:df:88:ab:16:9e:d6:a4:a2:c6:fe:20:73:45:06:
43:16:37:f9:45:a9:ce:a5:b4:9d:29:c4:34:b4:55:
e5:0f:c5:99:8e:e7:6e:04:0b:88:de:44:db:10:8a:
6d:54:d8:49:4e:3b:7c:21:e1:e9:32:dd:c7:16:92:
0b:7c:0a:81:15:33:8f:0a:46:38:9c:25:8b:a1:1d:
e3:cd:15:84:22:d6:71:77:3c:89:d0:4b:4d:42:06:
00:d2:cd:59:f7:8e:57:45:04:4e:d2:5a:76:6d:76:
ce:9d:b2:a6:67:62:98:3c:4e:ae:db:bd:0b:cb:ba:
6e:db:84:df:53:a3:c1:6f:20:53:36:90:76:af:8e:
40:b0:5a:dd:ee:ee:47:c0:5c:ba:2c:82:d4:f6:ca:
d8:74:7f:91:02:2a:20:3e:1a:2e:85:44:c0:56:f3:
c7:1f:f2:cd:1e:2d:88:9b:21:35:5f:6e:9d:1b:33:
d0:37:94:ba:8e:3b:67:aa:0c:35:bc:89:59:69:34:
af:02:20:c6:87:2f:d8:39:7c:e3:79:4c:b9:6c:c4:
90:d1:86:27:82:87:5c:b0:f7:14:70:ae:09:e5:e9:
63:de:79:c0:43:28:4d:30:fe:8a:91:e2:65:2f:7e:
69:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AE:4F:1F:AE:64:D2:0C:33:5F:CD:46:00:3F:2B:53:F4:9C:C8:EE
X509v3 Authority Key Identifier:
keyid:79:D5:65:F9:9F:F5:E0:FF:B5:BD:F9:99:5E:D7:A8:08:D4:14:06:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edVl-Z_14P-1vfmZXteoCNQUBuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/R65PH65k0gwzX81GAD8rU_ScyO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/edVl-Z_14P-1vfmZXteoCNQUBuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.185.120.0/22
185.204.168.0/22
185.235.40.0/22
193.24.119.0/24
194.5.192.0/23
194.5.206.0/23
IPv6:
2a0f:94c0:100::-2a0f:94c0:2ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a2:c1:42:52:95:9d:9a:a0:59:cc:cc:da:43:45:ad:a2:ec:60:
06:9c:25:94:5a:e0:9e:43:52:04:65:8a:8a:a4:f2:29:20:83:
0a:97:60:0b:6f:e7:96:c1:9f:dd:88:96:52:54:57:07:18:65:
16:42:4a:82:a5:b4:53:b9:4d:a5:53:75:0f:1a:38:11:a0:ac:
0b:11:65:c9:7a:06:56:ad:3d:57:65:ae:35:68:15:43:79:c5:
c3:8b:af:28:da:58:5b:94:69:76:3e:8e:1f:a4:2c:92:43:e9:
ad:ca:f1:56:b8:dd:c9:7d:5b:b9:f4:b5:6e:a4:31:aa:f6:53:
a1:8e:a3:5e:af:13:6a:a5:44:96:e8:f0:23:2f:e1:cd:65:c0:
65:f2:75:62:79:39:63:46:07:29:c8:1b:da:08:cb:78:2b:52:
f5:84:e4:9f:5e:d6:6b:b4:aa:cc:d9:93:36:a3:8f:80:b8:f4:
6a:bd:bb:d1:77:48:f9:bd:99:b0:bf:22:84:d5:0d:7c:c7:f1:
4f:10:46:b6:27:42:97:db:6b:8a:4f:6c:31:77:25:69:5a:a3:
62:d9:13:b8:31:35:d6:26:cb:63:05:45:09:5b:57:ab:10:a8:
b4:a5:97:f1:83:4d:74:b5:0b:60:4a:82:ef:a0:52:a7:dd:2c:
b9:41:d3:4b
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAZniXlkLp6vYna9WrC8sP5DUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ZDU2NWY5OWZmNWUwZmZiNWJkZjk5OTVlZDdhODA4ZDQx
NDA2ZTUwHhcNMjUxMDE0MTA1NzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2FlNGYxZmFlNjRkMjBjMzM1ZmNkNDYwMDNmMmI1M2Y0OWNjOGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZE1XU+Q0CWLDyu2CmQB34irFp7W
pKLG/iBzRQZDFjf5RanOpbSdKcQ0tFXlD8WZjuduBAuI3kTbEIptVNhJTjt8IeHp
Mt3HFpILfAqBFTOPCkY4nCWLoR3jzRWEItZxdzyJ0EtNQgYA0s1Z945XRQRO0lp2
bXbOnbKmZ2KYPE6u270Ly7pu24TfU6PBbyBTNpB2r45AsFrd7u5HwFy6LILU9srY
dH+RAiogPhouhUTAVvPHH/LNHi2ImyE1X26dGzPQN5S6jjtnqgw1vIlZaTSvAiDG
hy/YOXzjeUy5bMSQ0YYngodcsPcUcK4J5elj3nnAQyhNMP6KkeJlL35pIwIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFEeuTx+uZNIMM1/NRgA/K1P0nMjuMB8GA1UdIwQY
MBaAFHnVZfmf9eD/tb35mV7XqAjUFAblMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWRWbC1aXzE0UC0xdmZtWlh0ZW9DTlFVQnVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9lZTVjZDctYjMwZS00NjZiLWFhYWQt
NmMzYjg3NDQzZTA2LzEvUjY1UEg2NWswZ3d6WDgxR0FEOHJVX1NjeU80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9lZTVjZDctYjMwZS00NjZiLWFhYWQtNmMzYjg3NDQzZTA2
LzEvZWRWbC1aXzE0UC0xdmZtWlh0ZW9DTlFVQnVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjAqBAIAATAkAwQCgrl4AwQC
ucyoAwQCuesoAwQAwRh3AwQBwgXAAwQBwgXOMBgEAgACMBIwEAMGACoPlMABAwYA
Kg+UwAIwDQYJKoZIhvcNAQELBQADggEBAKLBQlKVnZqgWczM2kNFraLsYAacJZRa
4J5DUgRlioqk8ikggwqXYAtv55bBn92IllJUVwcYZRZCSoKltFO5TaVTdQ8aOBGg
rAsRZcl6BlatPVdlrjVoFUN5xcOLryjaWFuUaXY+jh+kLJJD6a3K8Va43cl9W7n0
tW6kMar2U6GOo16vE2qlRJbo8CMv4c1lwGXydWJ5OWNGBynIG9oIy3grUvWE5J9e
1mu0qszZkzajj4C49Gq9u9F3SPm9mbC/IoTVDXzH8U8QRrYnQpfba4pPbDF3JWla
o2LZE7gxNdYmy2MFRQlbV6sQqLSll/GDTXS1C2BKgu+gUqfdLLlB00s=
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:59:49 2025 by rpki-client