Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/5Bu_YG_RUdf11Gi9aWxt35RgAkg.roa
File: 5Bu_YG_RUdf11Gi9aWxt35RgAkg.roa (raw, json)
Hash identifier: OuFLQ19VvlkednlA1/7PaMFzyU9MEyhAzgW7jgfHrRQ=
Subject key identifier: E4:1B:BF:60:6F:D1:51:D7:F5:D4:68:BD:69:6C:6D:DF:94:60:02:48
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 01997C0EB888A8178C1B2CF0FA7F6946749C
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/5Bu_YG_RUdf11Gi9aWxt35RgAkg.roa
Signing time: Wed 24 Sep 2025 14:09:23 +0000
ROA not before: Wed 24 Sep 2025 14:09:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62654
IP address blocks: 159.195.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7c:0e:b8:88:a8:17:8c:1b:2c:f0:fa:7f:69:46:74:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Sep 24 14:09:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e41bbf606fd151d7f5d468bd696c6ddf94600248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:32:bb:ff:9f:dc:7e:a7:ff:70:47:81:75:f8:
31:a8:ad:df:37:f7:9d:03:c0:b5:bf:bb:c3:4c:a2:
11:15:40:ca:c4:37:30:f6:cc:02:8d:ee:84:6a:10:
a9:34:c5:09:f8:c2:24:ce:5a:3c:cb:bb:b7:58:e2:
25:cb:d3:de:88:e8:d2:66:00:9c:61:97:90:3f:b5:
85:18:88:19:6d:d3:66:61:11:d3:8a:d2:b3:f9:20:
96:b9:62:cd:78:c1:39:bf:82:d6:ea:be:2d:81:1d:
f1:73:03:d7:73:64:a1:a9:c5:39:72:21:c0:c5:76:
a3:e4:fc:1c:47:49:27:12:d9:13:69:d1:c5:13:44:
d8:40:8e:eb:3d:e5:aa:e5:d3:99:0f:da:d9:7f:5f:
30:ab:e8:49:ab:24:bf:7b:53:63:32:cf:e1:33:0a:
96:21:bb:4e:12:d1:da:78:b8:ec:e9:1a:c4:5b:b7:
d8:81:b8:9e:d3:e8:c1:f4:02:cd:14:b0:30:21:51:
76:46:38:e7:bd:56:e8:28:1b:7b:60:e0:bf:58:0f:
ba:f3:82:66:13:49:40:5f:17:e9:13:c0:9a:b5:ba:
67:81:14:2c:04:da:88:93:c9:49:a9:cb:4b:5e:cd:
f3:7a:5c:3f:32:fd:8c:38:e0:e9:4e:be:8a:24:f4:
c1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1B:BF:60:6F:D1:51:D7:F5:D4:68:BD:69:6C:6D:DF:94:60:02:48
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/5Bu_YG_RUdf11Gi9aWxt35RgAkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.195.0.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:96:1d:c5:9e:a5:c7:59:af:9f:60:5f:b9:e6:40:9f:fd:68:
d8:9b:8b:7a:f0:e7:22:cb:db:d9:50:2b:41:11:12:78:63:c1:
fa:05:61:e3:6d:91:9a:16:01:bb:68:63:08:2c:35:95:7c:23:
7c:e1:1b:2e:ee:75:b2:e0:0a:4c:c5:16:43:ca:c1:14:0c:c9:
e3:29:26:e2:61:45:2b:71:e0:dc:14:ec:ab:9f:48:d5:8c:16:
60:c8:e5:63:9c:26:ca:27:55:e1:cd:25:6a:f4:d1:60:e3:e2:
16:68:86:d4:e6:1f:02:33:f6:c2:88:16:03:0b:06:01:f3:10:
35:65:b4:7c:c7:54:9b:58:2d:99:2c:fe:42:a5:a5:f5:3c:31:
fe:0d:5f:8b:6b:4c:3d:8d:ce:90:ce:0e:67:6e:58:94:09:be:
32:c0:ab:c7:28:f1:f4:a0:21:ed:bd:6d:9a:6b:ba:c3:dd:7c:
3b:6c:74:2c:80:1b:3b:8d:61:7f:7f:5f:8d:6c:5d:14:1c:2c:
1f:3b:2e:96:93:64:88:96:3a:21:6b:3d:30:7e:17:b9:7f:7f:
6b:a1:2c:b9:42:63:20:b2:35:78:f9:37:5d:de:5d:fc:cf:93:
72:03:cf:8b:1a:c5:a9:ef:cd:ba:2d:d4:05:aa:a5:e4:6f:c5:
a2:ba:02:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:47:59 2025 by rpki-client