Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/dt57E0YfS0blH1wCyWamZkKzwk4.roa
File: dt57E0YfS0blH1wCyWamZkKzwk4.roa (raw, json)
Hash identifier: a2la4apbHjBK55MFLR525BkDIC/NPJ1Nk/TRuAuxAYc=
Subject key identifier: 76:DE:7B:13:46:1F:4B:46:E5:1F:5C:02:C9:66:A6:66:42:B3:C2:4E
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 0199B92E90E2F0B70FE38DC274BABA278F93
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/dt57E0YfS0blH1wCyWamZkKzwk4.roa
Signing time: Mon 06 Oct 2025 11:01:00 +0000
ROA not before: Mon 06 Oct 2025 11:01:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213999
IP address blocks: 45.132.252.0/24 maxlen: 24
185.200.188.0/24 maxlen: 24
193.168.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b9:2e:90:e2:f0:b7:0f:e3:8d:c2:74:ba:ba:27:8f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Oct 6 11:01:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76de7b13461f4b46e51f5c02c966a66642b3c24e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9f:96:74:51:df:d5:6c:93:17:12:cd:2a:1c:
5e:8a:04:62:c0:7f:8a:51:a3:62:ad:4e:a5:e2:9c:
b7:57:36:cf:64:b5:8d:d6:94:b1:70:d8:42:96:29:
36:fc:ae:ae:cf:13:da:53:e7:af:d3:31:ed:f8:02:
ac:5f:11:86:89:0b:87:e5:da:af:67:49:84:3c:c9:
b6:1a:a5:7f:d9:34:86:20:f6:ae:3f:6a:c5:5b:77:
fc:3b:d8:c6:1d:7e:f0:97:8c:97:41:1f:34:75:b4:
52:26:10:80:df:b6:d9:05:67:66:6f:dc:fc:87:24:
e7:28:c1:12:58:f4:a8:fd:26:84:b6:61:84:60:40:
05:9e:e2:e5:56:ca:1d:90:69:9b:85:23:6d:f6:1e:
bb:ce:30:44:6f:ec:d7:f2:ce:de:28:1c:ba:b8:b7:
c1:10:32:b6:04:67:9b:9c:2e:fc:b8:cb:45:da:ff:
ad:b9:6f:e2:6d:e9:86:5a:25:c4:5e:af:da:16:d4:
0d:23:da:dd:3b:93:d9:fd:22:b8:77:b4:09:3e:c2:
56:6c:34:77:2c:10:c0:f6:33:58:38:8b:31:a0:30:
19:93:eb:2a:36:63:80:5f:53:03:2f:97:8d:dd:4b:
77:95:7f:59:63:3d:c8:f1:0b:66:1b:51:f1:36:cc:
36:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DE:7B:13:46:1F:4B:46:E5:1F:5C:02:C9:66:A6:66:42:B3:C2:4E
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/dt57E0YfS0blH1wCyWamZkKzwk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.252.0/24
185.200.188.0/24
193.168.224.0/24
Signature Algorithm: sha256WithRSAEncryption
37:df:42:aa:de:4d:45:2d:12:10:2c:79:e9:82:c7:ae:46:39:
7d:bd:a8:41:f4:b1:90:8b:6d:d0:e3:24:85:27:7d:df:c4:8c:
f4:66:0a:cb:7d:4b:45:16:54:54:71:6d:88:7b:2e:e4:33:7c:
11:78:80:5b:a7:d2:85:c2:c1:ae:c4:6e:82:b4:e1:3c:c3:8c:
ed:93:05:4e:a6:f6:b0:a6:a0:1a:18:58:37:34:25:ec:33:88:
1e:f3:e5:32:26:64:4a:5c:8c:f6:7a:33:4c:29:90:58:7e:41:
7a:1f:68:dd:8b:1b:89:09:af:72:7f:55:53:b8:c5:48:0f:e2:
a8:87:8d:0b:48:ab:24:0a:5f:1f:e7:04:a8:49:04:c3:f4:ae:
34:79:85:c1:f5:61:b4:e0:4d:27:74:6d:77:0d:a8:be:70:08:
90:aa:bc:1d:2a:db:96:ac:12:91:25:4b:a5:de:02:af:3f:21:
ad:d6:58:c4:75:88:51:76:59:18:43:b9:34:28:8f:21:aa:29:
46:0a:32:4a:f4:e1:01:4c:4d:35:29:04:f1:b3:63:cb:6b:40:
30:7f:2b:88:e8:fe:82:5a:05:e5:12:59:30:22:cf:f6:f2:d1:
f4:18:62:52:f2:c2:08:57:3d:be:cb:e3:c9:bf:a0:4f:fb:55:
67:a7:ed:c8
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZm5LpDi8LcP443CdLq6J4+TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3
Mjc4MmEwHhcNMjUxMDA2MTEwMTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NmRlN2IxMzQ2MWY0YjQ2ZTUxZjVjMDJjOTY2YTY2NjQyYjNjMjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvp+WdFHf1WyTFxLNKhxeigRiwH+K
UaNirU6l4py3VzbPZLWN1pSxcNhClik2/K6uzxPaU+ev0zHt+AKsXxGGiQuH5dqv
Z0mEPMm2GqV/2TSGIPauP2rFW3f8O9jGHX7wl4yXQR80dbRSJhCA37bZBWdmb9z8
hyTnKMESWPSo/SaEtmGEYEAFnuLlVsodkGmbhSNt9h67zjBEb+zX8s7eKBy6uLfB
EDK2BGebnC78uMtF2v+tuW/ibemGWiXEXq/aFtQNI9rdO5PZ/SK4d7QJPsJWbDR3
LBDA9jNYOIsxoDAZk+sqNmOAX1MDL5eN3Ut3lX9ZYz3I8QtmG1HxNsw2EQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHbeexNGH0tG5R9cAslmpmZCs8JOMB8GA1UdIwQY
MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt
YjU3YTM2ZjJhZmNkLzEvZHQ1N0UwWWZTMGJsSDF3Q3lXYW1aa0t6d2s0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk
LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALYT8AwQA
uci8AwQAwajgMA0GCSqGSIb3DQEBCwUAA4IBAQA330Kq3k1FLRIQLHnpgseuRjl9
vahB9LGQi23Q4ySFJ33fxIz0ZgrLfUtFFlRUcW2Iey7kM3wReIBbp9KFwsGuxG6C
tOE8w4ztkwVOpvawpqAaGFg3NCXsM4ge8+UyJmRKXIz2ejNMKZBYfkF6H2jdixuJ
Ca9yf1VTuMVID+Koh40LSKskCl8f5wSoSQTD9K40eYXB9WG04E0ndG13Dai+cAiQ
qrwdKtuWrBKRJUul3gKvPyGt1ljEdYhRdlkYQ7k0KI8hqilGCjJK9OEBTE01KQTx
s2PLa0AwfyuI6P6CWgXlElkwIs/28tH0GGJS8sIIVz2+y+PJv6BP+1Vnp+3I
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:35:58 2025 by rpki-client