Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/5BaTZmGOxPL-D3KmYtrOFKJoc9w.roa
File: 5BaTZmGOxPL-D3KmYtrOFKJoc9w.roa (raw, json)
Hash identifier: W0in5nRRbM6YAVbGXif1gU1BqfF6tzV7wxCuBNPm1LQ=
Subject key identifier: E4:16:93:66:61:8E:C4:F2:FE:0F:72:A6:62:DA:CE:14:A2:68:73:DC
Certificate issuer: /CN=860858bc2dcbb376d791a9be9af1520238535d9f
Certificate serial: 0199ED3A35FA976CBCD3C49B2FC0D9AA1784
Authority key identifier: 86:08:58:BC:2D:CB:B3:76:D7:91:A9:BE:9A:F1:52:02:38:53:5D:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/5BaTZmGOxPL-D3KmYtrOFKJoc9w.roa
Signing time: Thu 16 Oct 2025 13:33:58 +0000
ROA not before: Thu 16 Oct 2025 13:33:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15584
IP address blocks: 62.101.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ed:3a:35:fa:97:6c:bc:d3:c4:9b:2f:c0:d9:aa:17:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860858bc2dcbb376d791a9be9af1520238535d9f
Validity
Not Before: Oct 16 13:33:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4169366618ec4f2fe0f72a662dace14a26873dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:45:c5:67:ca:e7:c2:3c:49:46:ab:db:28:e5:
df:9c:53:79:de:8b:f0:7e:e6:54:cf:ec:95:de:22:
ce:52:cc:9d:db:27:22:02:94:5f:50:90:cc:7d:e5:
89:fb:3d:b9:45:cb:40:a9:f5:ad:de:90:58:3d:71:
a3:93:00:e2:7d:36:0e:bc:81:75:e8:dc:2c:60:1a:
a7:5c:7e:ee:a9:45:21:ed:03:39:73:50:8b:60:a1:
53:95:9b:32:c5:a2:4f:ea:ac:f5:38:72:2d:10:32:
69:c7:6c:e7:d9:19:6d:59:82:cb:d8:81:f6:9a:1d:
e8:29:6b:10:0d:dd:f8:3a:71:74:49:36:b8:d6:22:
92:56:ad:81:8d:6b:3a:40:fc:e1:d0:92:90:ff:4d:
55:4e:f2:15:ad:81:01:c1:2a:75:6d:a6:b6:57:7f:
aa:03:bc:86:1a:ad:ee:fc:85:95:a7:fc:f4:7f:fc:
1e:0c:c2:05:0b:c2:69:17:fb:20:9f:14:d9:ca:78:
33:e0:2c:20:da:eb:a2:18:89:fd:eb:e2:05:be:30:
4e:c9:64:3d:7e:80:b1:2d:2e:01:44:f7:65:03:c2:
be:9b:f0:86:da:77:ae:c1:c6:7a:fe:00:55:f1:4c:
05:de:22:49:4f:a2:ca:d0:02:cd:4c:7f:20:5b:72:
da:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:16:93:66:61:8E:C4:F2:FE:0F:72:A6:62:DA:CE:14:A2:68:73:DC
X509v3 Authority Key Identifier:
keyid:86:08:58:BC:2D:CB:B3:76:D7:91:A9:BE:9A:F1:52:02:38:53:5D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/5BaTZmGOxPL-D3KmYtrOFKJoc9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.101.4.0/24
Signature Algorithm: sha256WithRSAEncryption
71:85:bf:d9:6a:3f:00:13:6c:68:ea:c3:92:c6:91:2a:d9:0d:
06:04:a8:4f:08:1b:f9:95:90:0e:10:c6:39:c8:3a:08:f8:fc:
31:9c:66:e8:95:b9:89:00:09:4c:f8:92:85:f2:da:87:df:5c:
d0:6f:9e:5a:0d:62:a6:12:52:30:35:08:35:aa:df:a6:37:18:
cb:0c:53:49:d3:db:fa:4f:91:47:bd:9f:e9:0b:40:d8:d5:70:
75:b2:1a:7b:a8:0d:2d:6b:4b:87:cf:ea:77:4f:13:4a:6e:49:
42:23:a0:1d:7f:ca:05:27:06:17:7b:0c:98:01:fb:9d:d0:87:
8a:42:68:e0:75:b4:d4:f1:f8:1d:62:75:6f:de:96:fd:45:ae:
9e:79:78:46:16:ee:11:81:aa:be:cf:07:a0:a9:e4:76:7d:92:
2b:f5:77:d5:bc:e7:18:9d:71:5a:ed:60:a0:df:f8:c0:82:a5:
13:71:55:60:f1:43:05:d6:04:df:94:f7:4c:8d:9d:92:bb:a4:
93:10:26:a0:81:85:a6:58:33:ed:6b:6d:d7:b6:9f:b8:6f:12:
e0:d1:7c:b3:2f:ae:7a:99:81:01:09:94:d2:6f:8f:b2:2e:74:
1a:33:6e:a5:7f:4f:0f:10:d4:78:3a:c4:e8:6f:b1:a1:46:91:
9d:d8:76:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZntOjX6l2y808SbL8DZqheEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MDg1OGJjMmRjYmIzNzZkNzkxYTliZTlhZjE1MjAyMzg1
MzVkOWYwHhcNMjUxMDE2MTMzMzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDE2OTM2NjYxOGVjNGYyZmUwZjcyYTY2MmRhY2UxNGEyNjg3M2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0XFZ8rnwjxJRqvbKOXfnFN53ovw
fuZUz+yV3iLOUsyd2yciApRfUJDMfeWJ+z25RctAqfWt3pBYPXGjkwDifTYOvIF1
6NwsYBqnXH7uqUUh7QM5c1CLYKFTlZsyxaJP6qz1OHItEDJpx2zn2RltWYLL2IH2
mh3oKWsQDd34OnF0STa41iKSVq2BjWs6QPzh0JKQ/01VTvIVrYEBwSp1baa2V3+q
A7yGGq3u/IWVp/z0f/weDMIFC8JpF/sgnxTZyngz4Cwg2uuiGIn96+IFvjBOyWQ9
foCxLS4BRPdlA8K+m/CG2neuwcZ6/gBV8UwF3iJJT6LK0ALNTH8gW3LaGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOQWk2ZhjsTy/g9ypmLazhSiaHPcMB8GA1UdIwQY
MBaAFIYIWLwty7N215GpvprxUgI4U12fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGdoWXZDM0xzM2JYa2FtLW12RlNBamhUWFo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC84NjEzYTAtZDllYy00YzhhLWIzMzQt
OTkwYmIxY2NkMjBjLzEvNUJhVFptR094UEwtRDNLbVl0ck9GS0pvYzl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC84NjEzYTAtZDllYy00YzhhLWIzMzQtOTkwYmIxY2NkMjBj
LzEvaGdoWXZDM0xzM2JYa2FtLW12RlNBamhUWFo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPmUEMA0G
CSqGSIb3DQEBCwUAA4IBAQBxhb/Zaj8AE2xo6sOSxpEq2Q0GBKhPCBv5lZAOEMY5
yDoI+PwxnGbolbmJAAlM+JKF8tqH31zQb55aDWKmElIwNQg1qt+mNxjLDFNJ09v6
T5FHvZ/pC0DY1XB1shp7qA0ta0uHz+p3TxNKbklCI6Adf8oFJwYXewyYAfud0IeK
QmjgdbTU8fgdYnVv3pb9Ra6eeXhGFu4Rgaq+zwegqeR2fZIr9XfVvOcYnXFa7WCg
3/jAgqUTcVVg8UMF1gTflPdMjZ2Su6STECaggYWmWDPta23Xtp+4bxLg0XyzL656
mYEBCZTSb4+yLnQaM26lf08PENR4OsTob7GhRpGd2HZU
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:32:33 2025 by rpki-client