
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5ZTJIsVlYBbN8QE0psP3eruCJE8.roa
File: 5ZTJIsVlYBbN8QE0psP3eruCJE8.roa (raw, json)
Hash identifier: Wqzy3xo9cCno52L7iKUirVfI5PFJbyhq8GDcxsARVoM=
Subject key identifier: E5:94:C9:22:C5:65:60:16:CD:F1:01:34:A6:C3:F7:7A:BB:82:24:4F
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0199A07FA165727F6A57E836C9E483128074
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5ZTJIsVlYBbN8QE0psP3eruCJE8.roa
Signing time: Wed 01 Oct 2025 15:59:02 +0000
ROA not before: Wed 01 Oct 2025 15:59:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13347
IP address blocks: 167.17.32.0/21 maxlen: 21
167.17.41.0/24 maxlen: 24
167.17.42.0/23 maxlen: 23
167.17.44.0/23 maxlen: 23
167.17.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a0:7f:a1:65:72:7f:6a:57:e8:36:c9:e4:83:12:80:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 1 15:59:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e594c922c5656016cdf10134a6c3f77abb82244f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:57:91:86:85:3a:cd:46:79:81:7a:54:d9:54:
58:b3:d2:fb:a4:6a:ba:ca:53:a2:f5:e2:04:67:68:
36:70:ba:38:41:89:64:89:d6:ea:06:da:fd:01:a4:
84:6a:f3:aa:09:e8:47:03:bf:7e:28:96:3d:b9:ee:
4c:a2:a3:cc:10:db:dc:26:40:26:05:10:ba:23:bf:
0f:a4:ba:a7:45:d5:01:9a:e5:60:eb:19:12:b2:33:
bd:96:1e:4f:62:ba:1e:f6:09:28:29:6e:76:5e:8a:
db:65:50:41:e5:c2:53:94:33:d4:84:53:7e:ff:e2:
1c:52:b6:2b:42:c9:01:2d:9d:d5:9b:07:9c:96:40:
e3:cf:e8:41:0f:2e:b0:9d:40:96:c4:f9:03:32:7e:
18:d6:87:98:69:09:51:c8:15:d8:4f:37:54:5e:84:
80:5a:13:5c:c1:47:ef:68:43:e2:16:08:1f:ed:9f:
7c:cf:86:fa:af:04:9a:41:4c:5d:89:66:50:62:5e:
70:48:08:d1:c6:87:25:db:33:10:a9:ff:d6:10:34:
a6:5b:f4:61:2d:a5:05:55:53:3d:a7:a7:16:94:9d:
b7:9f:b9:96:6e:db:53:a4:cd:28:0b:8e:70:14:5e:
68:fc:69:e3:fa:a4:72:d2:12:62:6c:20:bf:2e:08:
14:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:94:C9:22:C5:65:60:16:CD:F1:01:34:A6:C3:F7:7A:BB:82:24:4F
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5ZTJIsVlYBbN8QE0psP3eruCJE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.17.32.0/21
167.17.41.0-167.17.46.255
Signature Algorithm: sha256WithRSAEncryption
53:d1:7a:6e:90:bf:e8:11:3a:95:cd:41:96:4d:b6:e7:66:b7:
58:a5:8c:a8:08:f3:6c:05:e3:3c:44:c1:9e:f5:22:52:51:6a:
c0:50:36:5c:bb:ce:0b:6d:d9:95:6e:6f:eb:8c:d9:5d:f1:ac:
10:69:a3:95:9e:af:7e:a2:b0:02:7d:5e:cf:67:cc:8a:65:ef:
63:44:76:db:09:a0:a4:f1:59:64:1a:fa:ce:45:d8:e7:40:7b:
43:84:66:b3:99:86:cb:2a:aa:df:ff:51:19:97:a4:64:6f:31:
da:de:c9:e8:f9:8f:a6:ec:31:7c:b7:c6:e4:64:49:70:36:04:
6b:aa:3b:19:92:ff:58:30:9a:71:44:7e:7b:62:69:92:a3:c4:
a3:8d:e7:90:94:c5:87:38:09:56:31:09:3c:9a:3d:b5:de:87:
65:19:39:06:f8:2d:a5:52:36:4b:e4:75:b2:8d:39:94:21:8c:
1f:b0:11:8f:31:f1:fb:6b:10:92:59:ec:e0:f0:27:01:84:50:
05:67:53:a3:00:d2:7f:c9:b8:cc:bd:e9:43:fc:0a:d7:f7:18:
7f:31:81:25:26:2f:28:7f:f6:a8:67:ff:99:75:29:71:5c:13:
12:d7:98:cb:02:18:90:e7:de:62:88:2a:86:65:d2:ce:09:fc:
12:56:66:c9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:44 2025 by rpki-client