
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/m5N09co6Rq5v2IQ-_4xi7eLfNNc.roa
File: m5N09co6Rq5v2IQ-_4xi7eLfNNc.roa (raw, json)
Hash identifier: SXnTG5TlLj706RX4yQNLq91DLWXynAz84Uj/PBGzU8s=
Subject key identifier: 9B:93:74:F5:CA:3A:46:AE:6F:D8:84:3E:FF:8C:62:ED:E2:DF:34:D7
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019980104982064430EDDE7EB97064047FAC
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/m5N09co6Rq5v2IQ-_4xi7eLfNNc.roa
Signing time: Thu 25 Sep 2025 08:49:34 +0000
ROA not before: Thu 25 Sep 2025 08:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43180
IP address blocks: 2.57.241.0/24 maxlen: 24
167.17.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:80:10:49:82:06:44:30:ed:de:7e:b9:70:64:04:7f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 25 08:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b9374f5ca3a46ae6fd8843eff8c62ede2df34d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:50:b7:75:ce:48:ed:e7:4c:52:82:c1:40:43:
2a:e4:cd:bc:83:66:a0:20:9a:07:24:43:07:9b:ec:
b8:e0:26:23:f3:9c:f8:d4:da:7e:ba:89:d7:1f:af:
be:99:0f:1e:95:34:6a:be:7e:b3:73:ec:3a:5b:64:
4a:57:43:d0:d5:03:a8:75:ff:8a:9b:11:9b:75:7b:
f6:b1:b2:67:ea:46:d2:db:ac:e5:31:bc:35:aa:92:
1c:da:83:46:19:b5:ad:1c:6f:b8:e7:07:d4:d5:28:
ae:cf:93:b2:05:1f:b0:87:08:8d:6c:18:43:4a:99:
d1:65:e9:59:33:d2:f8:1c:54:2f:d6:88:90:ac:c3:
f4:34:76:c0:3a:1a:b3:82:58:ed:56:31:e0:ed:9c:
61:68:fb:a6:a9:06:68:ce:0d:24:66:78:78:0e:fa:
02:04:86:89:38:f0:a2:62:d9:c7:b7:a8:b4:a1:0e:
c9:a2:b8:ff:52:d9:01:65:50:47:a9:eb:ef:7e:f9:
6a:30:97:cb:52:37:c3:c6:2c:b5:67:5b:af:78:00:
9d:bd:0a:89:e1:84:4a:49:47:41:c6:e0:53:ad:a9:
2a:5a:d2:68:8a:e2:93:c6:f4:65:7e:2d:e8:2a:85:
36:75:ef:ac:03:88:bb:da:6a:b8:8b:b1:41:b0:b4:
cd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:93:74:F5:CA:3A:46:AE:6F:D8:84:3E:FF:8C:62:ED:E2:DF:34:D7
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/m5N09co6Rq5v2IQ-_4xi7eLfNNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.241.0/24
167.17.47.0/24
Signature Algorithm: sha256WithRSAEncryption
33:7d:c6:69:4c:79:6f:da:02:41:97:ab:27:5d:c1:33:6c:64:
c8:03:57:1c:d0:8b:b9:03:2d:fa:ce:ec:22:b3:d6:31:fa:df:
b8:df:b4:e9:3c:5f:5e:b3:af:cf:57:4d:c6:69:e9:5c:83:ee:
9a:10:e5:d9:77:a6:b3:1b:9a:9a:35:a1:9b:15:cf:48:ff:94:
0c:12:64:88:ec:30:ef:30:c5:59:f2:54:d4:e2:e0:67:cb:b6:
c8:f0:ff:6f:a6:5c:ce:7c:55:b0:3e:5f:a1:be:9e:e3:f8:87:
e5:9d:54:99:5f:d6:c8:e2:ba:4d:5d:af:ea:a1:90:0f:74:f3:
12:11:c2:ac:35:6d:fd:32:f6:6d:74:54:23:08:2f:7e:46:bc:
7d:3a:82:3f:41:db:e3:4b:88:ea:8b:3b:86:9d:3f:b5:2d:da:
9e:25:1b:38:0a:a1:cf:58:f6:29:5a:6e:ce:47:7c:b7:0a:b8:
40:e0:ee:b7:89:7b:f7:d6:32:94:61:99:a4:d7:46:39:7d:3c:
51:01:2b:a7:5e:3a:fb:11:f0:00:41:73:ed:f2:8d:a5:84:71:
29:dd:63:3a:a1:3f:45:1a:8c:07:f1:b9:dd:3c:15:52:33:c9:
dc:bc:0c:93:88:eb:76:48:ad:16:9a:7e:5b:c4:a2:b6:93:27:
0b:f6:82:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:51 2025 by rpki-client