Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/oVs5_KZDctgB_SxDxXBc7jFWGSQ.roa
File: oVs5_KZDctgB_SxDxXBc7jFWGSQ.roa (raw, json)
Hash identifier: S1aX3TBNextGznYBV2sBZ4ei/brLO4wIVRBwdKjAlXc=
Subject key identifier: A1:5B:39:FC:A6:43:72:D8:01:FD:2C:43:C5:70:5C:EE:31:56:19:24
Certificate issuer: /CN=44a88637498b188fc0bceae0bbf0681761a49d4b
Certificate serial: 0199611E0DAFA2CB3D877001952EDF27FDBE
Authority key identifier: 44:A8:86:37:49:8B:18:8F:C0:BC:EA:E0:BB:F0:68:17:61:A4:9D:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/oVs5_KZDctgB_SxDxXBc7jFWGSQ.roa
Signing time: Fri 19 Sep 2025 08:36:23 +0000
ROA not before: Fri 19 Sep 2025 08:36:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41877
IP address blocks: 5.133.160.0/24 maxlen: 24
5.133.161.0/24 maxlen: 24
80.92.176.0/20 maxlen: 20
80.92.177.0/24 maxlen: 24
80.92.183.0/24 maxlen: 24
80.92.184.0/24 maxlen: 24
80.92.186.0/24 maxlen: 24
80.92.187.0/24 maxlen: 24
80.92.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:61:1e:0d:af:a2:cb:3d:87:70:01:95:2e:df:27:fd:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a88637498b188fc0bceae0bbf0681761a49d4b
Validity
Not Before: Sep 19 08:36:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a15b39fca64372d801fd2c43c5705cee31561924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:58:fd:3a:0d:b2:74:55:b5:28:17:3c:09:d3:
ee:92:be:17:db:46:22:2b:33:1d:14:ce:22:9f:f2:
47:d2:9a:5e:52:0d:ed:da:c7:e3:4d:05:4b:8b:ae:
be:b8:fa:b7:45:6b:0e:3a:dd:c1:e4:57:a6:e4:85:
a9:dc:e7:82:2a:f1:93:64:70:4c:08:75:3b:76:37:
55:e6:68:29:4a:17:2e:6a:47:3c:a2:dc:fa:2c:7f:
30:56:45:50:ce:be:61:ed:99:83:29:fd:fd:d2:11:
0b:a4:c3:58:5b:0c:fd:92:50:df:5b:4c:af:0c:8e:
1f:94:8b:4e:3e:11:dd:b5:02:62:66:c2:dd:cf:aa:
38:6f:2a:49:4e:1e:69:b0:2f:8c:8d:71:9c:6b:0b:
3d:2f:21:7b:9c:b6:b5:d1:b4:aa:5f:62:89:15:c7:
64:48:68:c2:61:d9:21:2f:95:2b:dc:66:ef:b5:9f:
85:b0:fc:56:a7:52:7d:f8:88:de:b1:d3:47:35:bd:
1a:57:25:99:00:ee:84:c6:43:31:65:4c:6b:7d:c0:
eb:6e:1b:30:9d:dc:13:4a:5c:0e:2f:9e:15:64:07:
c3:30:c3:a6:5e:45:78:e3:0b:29:7f:2a:aa:35:7a:
74:cd:62:dd:2b:93:ba:73:d4:41:dd:11:81:54:b5:
9d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5B:39:FC:A6:43:72:D8:01:FD:2C:43:C5:70:5C:EE:31:56:19:24
X509v3 Authority Key Identifier:
keyid:44:A8:86:37:49:8B:18:8F:C0:BC:EA:E0:BB:F0:68:17:61:A4:9D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/oVs5_KZDctgB_SxDxXBc7jFWGSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.160.0/23
80.92.176.0/20
Signature Algorithm: sha256WithRSAEncryption
22:05:89:72:5a:80:ad:0e:1e:ab:3b:f1:35:80:97:fb:47:43:
86:69:27:1e:1d:4b:c9:fb:4a:3a:d4:e7:6e:a4:d7:3b:7a:0e:
92:cb:6d:1e:fa:b6:86:88:7c:f6:dc:28:a3:ef:36:39:70:b3:
ef:9e:1f:d4:2d:e3:42:ac:8c:17:a0:95:75:46:43:c6:fc:50:
8b:02:10:91:8a:aa:01:fd:65:7f:20:14:66:94:55:2d:02:b1:
a7:87:02:68:9e:18:56:20:68:59:b1:55:e5:11:63:6e:97:5f:
ac:8f:35:98:e5:2d:8c:e5:8c:21:9c:9e:2a:ce:78:2d:23:8f:
a3:18:94:51:a4:6f:9c:e9:3a:3b:e9:ee:84:3a:00:0f:21:47:
d8:af:d5:d7:dd:0b:63:23:43:09:2c:9b:d0:c5:6f:69:d5:1d:
7e:56:4b:ea:0c:d6:9d:80:91:b4:0b:28:1d:bd:f1:98:1e:1d:
09:ad:2e:00:c7:23:60:86:49:9a:7b:a1:2f:ed:60:35:6b:ee:
4c:4a:eb:11:60:92:3d:dd:3c:81:3f:b8:37:0e:59:91:eb:f0:
c2:bc:38:f0:1b:90:82:0f:42:e9:c4:76:8a:b1:44:f7:7c:9f:
12:ac:2e:e6:61:c7:8e:57:ee:a6:43:50:ca:21:94:2e:d0:e3:
f9:dd:f3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:14:40 2025 by rpki-client