Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/opGiqd1EaZ4LjFf_mBRxRWMEJ9I.roa
File: opGiqd1EaZ4LjFf_mBRxRWMEJ9I.roa (raw, json)
Hash identifier: nszAzu935HQlCyZMmDgpA9FbHtuxCNO+fnERnO7qyoI=
Subject key identifier: A2:91:A2:A9:DD:44:69:9E:0B:8C:57:FF:98:14:71:45:63:04:27:D2
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019946E19FA24132BC538AEBA792C6BAAE02
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/opGiqd1EaZ4LjFf_mBRxRWMEJ9I.roa
Signing time: Sun 14 Sep 2025 06:20:15 +0000
ROA not before: Sun 14 Sep 2025 06:20:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197343
IP address blocks: 5.56.128.0/22 maxlen: 22
37.32.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:46:e1:9f:a2:41:32:bc:53:8a:eb:a7:92:c6:ba:ae:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Sep 14 06:20:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a291a2a9dd44699e0b8c57ff98147145630427d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d1:10:91:99:7e:b2:6a:fe:d7:78:83:eb:20:
0b:fc:37:09:88:08:31:a4:aa:9e:25:af:90:86:60:
75:83:bd:46:ec:5e:12:07:51:b4:b4:8f:ad:59:92:
08:31:b3:27:f8:67:21:b0:fc:2f:05:90:61:ab:a6:
57:de:00:3d:9b:a0:9a:66:3b:ae:7f:5a:07:75:1a:
2d:d6:10:d5:b5:14:1c:3d:dd:65:6f:4a:a9:e0:27:
7a:c1:2c:d9:1f:67:7c:8e:9a:24:89:32:fc:bd:2f:
72:30:d2:cf:c9:55:f8:8a:71:a3:f0:e9:a2:e3:52:
63:15:b9:28:c2:c8:7f:2d:a1:ca:6e:4f:7b:ca:88:
98:8c:d5:ce:77:6c:c0:dd:37:17:6f:8d:d1:dc:61:
c9:f6:3e:62:25:88:ad:13:1c:79:30:bb:16:3c:d1:
5a:5d:5d:d4:62:01:f4:eb:65:49:d7:2b:f2:a2:fc:
63:13:18:24:ea:ef:2e:ec:25:28:2d:85:74:36:8b:
4b:ac:bd:41:1f:85:e5:08:fc:80:4d:d9:9b:e0:48:
a2:bc:ec:a6:fc:7b:1d:a2:5b:f3:cb:fa:80:c2:9e:
2b:c3:37:35:e5:67:4c:89:87:d9:49:4c:9b:f3:31:
85:8c:bd:ef:b2:01:f1:be:d5:04:f7:ba:4d:17:33:
c0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:91:A2:A9:DD:44:69:9E:0B:8C:57:FF:98:14:71:45:63:04:27:D2
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/opGiqd1EaZ4LjFf_mBRxRWMEJ9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.128.0/22
37.32.42.0/24
Signature Algorithm: sha256WithRSAEncryption
20:b3:b0:e1:64:8c:10:93:fe:83:0d:a6:b0:0c:59:82:6e:1f:
da:47:b2:89:79:04:99:5d:ec:1c:4b:9f:f7:ee:a8:fd:b4:ba:
ff:3f:25:13:b8:94:d8:b0:8c:1c:b9:25:5b:ae:55:42:1a:d9:
eb:87:37:24:e5:b9:04:40:35:8c:b5:a8:9b:16:c5:d8:ca:49:
9d:c2:fd:7a:84:5a:6f:23:9d:73:1e:41:63:ac:e2:94:b2:d4:
17:ec:f7:20:3c:00:2d:a7:ba:86:8a:03:05:5c:78:dd:94:03:
aa:f6:36:10:93:52:2e:a7:c8:54:5c:d1:31:28:1d:4b:36:f9:
4e:ba:c8:78:e4:a3:89:d0:61:4e:05:dd:99:9b:4c:9c:db:c6:
b2:d2:33:87:62:b4:2a:03:fa:93:20:ec:c0:b8:bd:15:db:08:
cf:f0:12:75:6b:df:84:38:49:7e:8f:50:69:61:f6:aa:6a:e4:
c1:c8:70:25:18:ab:f9:27:5d:78:29:8f:4b:c6:c4:cc:c7:b5:
a9:ed:d2:48:7d:d4:8f:41:70:28:0e:bd:0d:2e:b4:b1:69:4d:
28:1d:85:2a:a3:2c:8b:04:f4:c8:29:6a:bb:cf:27:a2:c2:1c:
25:e1:3d:af:57:04:c2:fe:20:50:3c:2c:03:e4:95:3b:fb:da:
cb:6c:0d:e0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZlG4Z+iQTK8U4rrp5LGuq4CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0
ZDY0NjQwHhcNMjUwOTE0MDYyMDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjkxYTJhOWRkNDQ2OTllMGI4YzU3ZmY5ODE0NzE0NTYzMDQyN2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNEQkZl+smr+13iD6yAL/DcJiAgx
pKqeJa+QhmB1g71G7F4SB1G0tI+tWZIIMbMn+GchsPwvBZBhq6ZX3gA9m6CaZjuu
f1oHdRot1hDVtRQcPd1lb0qp4Cd6wSzZH2d8jpokiTL8vS9yMNLPyVX4inGj8Omi
41JjFbkowsh/LaHKbk97yoiYjNXOd2zA3TcXb43R3GHJ9j5iJYitExx5MLsWPNFa
XV3UYgH062VJ1yvyovxjExgk6u8u7CUoLYV0NotLrL1BH4XlCPyATdmb4EiivOym
/Hsdolvzy/qAwp4rwzc15WdMiYfZSUyb8zGFjL3vsgHxvtUE97pNFzPAqwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKKRoqndRGmeC4xX/5gUcUVjBCfSMB8GA1UdIwQY
MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt
OTg5MTY2ODgxOTY5LzEvb3BHaXFkMUVhWjRMakZmX21CUnhSV01FSjlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5
LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCBTiAAwQA
JSAqMA0GCSqGSIb3DQEBCwUAA4IBAQAgs7DhZIwQk/6DDaawDFmCbh/aR7KJeQSZ
XewcS5/37qj9tLr/PyUTuJTYsIwcuSVbrlVCGtnrhzck5bkEQDWMtaibFsXYykmd
wv16hFpvI51zHkFjrOKUstQX7PcgPAAtp7qGigMFXHjdlAOq9jYQk1Iup8hUXNEx
KB1LNvlOush45KOJ0GFOBd2Zm0yc28ay0jOHYrQqA/qTIOzAuL0V2wjP8BJ1a9+E
OEl+j1BpYfaqauTByHAlGKv5J114KY9LxsTMx7Wp7dJIfdSPQXAoDr0NLrSxaU0o
HYUqoyyLBPTIKWq7zyeiwhwl4T2vVwTC/iBQPCwD5JU7+9rLbA3g
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:13:16 2025 by rpki-client