Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1da070-509e-4297-a035-43fb70b4c13f/1/USUsZRSzJhQ4nbQlDk_Bak85cuY.roa
File: USUsZRSzJhQ4nbQlDk_Bak85cuY.roa (raw, json)
Hash identifier: xa3ZR5XAkS/+Z+9YWXUdvjxG49GLyLBv4EvvnE1arws=
Subject key identifier: 51:25:2C:65:14:B3:26:14:38:9D:B4:25:0E:4F:C1:6A:4F:39:72:E6
Certificate issuer: /CN=17a25c43e70d1f41d9890d755361a0ca17590754
Certificate serial: 01993349901425F65CFB098A6A527F20E54C
Authority key identifier: 17:A2:5C:43:E7:0D:1F:41:D9:89:0D:75:53:61:A0:CA:17:59:07:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F6JcQ-cNH0HZiQ11U2GgyhdZB1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1da070-509e-4297-a035-43fb70b4c13f/1/USUsZRSzJhQ4nbQlDk_Bak85cuY.roa
Signing time: Wed 10 Sep 2025 11:01:23 +0000
ROA not before: Wed 10 Sep 2025 11:01:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51677
IP address blocks: 91.220.45.0/24 maxlen: 24
146.0.48.0/24 maxlen: 24
146.0.49.0/24 maxlen: 24
146.0.50.0/24 maxlen: 24
146.0.51.0/24 maxlen: 24
146.0.52.0/24 maxlen: 24
146.0.53.0/24 maxlen: 24
146.0.54.0/24 maxlen: 24
146.0.55.0/24 maxlen: 24
185.5.240.0/24 maxlen: 24
185.5.241.0/24 maxlen: 24
185.5.242.0/24 maxlen: 24
185.5.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1da070-509e-4297-a035-43fb70b4c13f/1/F6JcQ-cNH0HZiQ11U2GgyhdZB1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1da070-509e-4297-a035-43fb70b4c13f/1/F6JcQ-cNH0HZiQ11U2GgyhdZB1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/F6JcQ-cNH0HZiQ11U2GgyhdZB1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:49:90:14:25:f6:5c:fb:09:8a:6a:52:7f:20:e5:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17a25c43e70d1f41d9890d755361a0ca17590754
Validity
Not Before: Sep 10 11:01:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51252c6514b32614389db4250e4fc16a4f3972e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ad:51:86:94:30:98:eb:c2:ba:7c:a2:c0:54:
4d:06:ab:33:e3:dc:73:7d:f7:96:d6:ef:2d:7a:8b:
a1:3a:87:07:2d:48:4e:59:b1:1a:82:9d:12:3c:6b:
27:ec:60:a5:98:8d:4e:12:4a:bf:5d:1c:e9:7c:a8:
8c:a9:d2:3b:0f:a7:18:20:be:2d:07:c0:9c:10:e9:
7a:b4:a0:55:1d:97:75:87:93:3b:e7:ee:96:a1:6b:
99:75:18:60:80:82:a8:14:a4:7a:dc:2b:2b:90:1b:
ff:14:dc:0b:17:df:1a:2e:89:b1:bf:73:1a:97:36:
ce:4a:1e:b6:01:d5:36:6b:9b:12:0b:90:d0:bb:81:
11:b6:87:37:75:10:eb:e6:0f:e3:99:c3:75:07:52:
4e:f2:c2:26:ee:9d:d0:0c:21:e1:54:7e:fd:6f:7b:
95:6d:63:b7:51:41:9a:45:8f:a2:1a:d5:b9:f5:fd:
8a:5c:42:d7:db:54:24:2f:d0:6a:b4:cc:bb:73:fe:
d8:2c:35:b0:69:e9:7e:90:cc:3e:57:3b:5d:70:76:
2a:29:3e:02:56:aa:62:3a:2a:d2:05:1c:88:cb:6e:
c8:9d:7b:2f:35:42:75:56:cd:71:72:23:41:8d:b6:
81:16:45:f6:41:9a:2e:22:cd:cc:7a:e8:58:fd:94:
85:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:25:2C:65:14:B3:26:14:38:9D:B4:25:0E:4F:C1:6A:4F:39:72:E6
X509v3 Authority Key Identifier:
keyid:17:A2:5C:43:E7:0D:1F:41:D9:89:0D:75:53:61:A0:CA:17:59:07:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6JcQ-cNH0HZiQ11U2GgyhdZB1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1da070-509e-4297-a035-43fb70b4c13f/1/USUsZRSzJhQ4nbQlDk_Bak85cuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1da070-509e-4297-a035-43fb70b4c13f/1/F6JcQ-cNH0HZiQ11U2GgyhdZB1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.45.0/24
146.0.48.0/21
185.5.240.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:c1:30:80:50:6b:8e:26:6f:93:d4:2f:7c:f8:54:42:9b:40:
41:43:67:22:ad:22:d4:49:bc:a5:11:9e:4f:79:80:7f:28:18:
f6:43:48:1d:d9:d8:98:82:6b:4a:16:a4:4f:3d:ac:50:46:26:
22:29:52:87:ce:8f:0a:66:2d:1e:ef:fc:8c:8d:12:59:48:73:
c9:25:cd:bf:1c:9b:41:e6:0c:b8:24:74:27:14:e3:b5:80:bb:
33:8b:72:9d:10:5f:89:db:e5:e1:de:5a:1c:00:6c:9c:62:bc:
c8:02:ec:15:69:48:7f:4e:b2:8c:f2:58:3d:a4:3c:d1:a1:db:
cf:47:94:5c:2c:38:83:32:4e:20:26:db:e9:de:d9:1a:09:4e:
70:4f:89:66:eb:74:6c:4f:69:02:ca:6d:1b:ec:9c:8c:4a:1d:
bd:ae:b2:fd:f2:9d:10:cd:cf:35:2e:3f:fc:00:16:ad:b9:a8:
f7:c4:08:f6:53:d0:08:63:bb:aa:57:71:5e:d7:48:c3:3a:4b:
21:0b:ea:36:b7:11:ca:32:75:4c:03:39:5b:65:01:e1:c9:51:
b1:4e:0f:e1:fa:2f:67:81:f2:0f:4a:0c:4b:2e:8f:18:30:d2:
b4:e4:8e:4d:8f:b1:3e:26:30:32:81:5c:41:f6:77:ef:db:60:
2b:60:50:33
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZkzSZAUJfZc+wmKalJ/IOVMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3YTI1YzQzZTcwZDFmNDFkOTg5MGQ3NTUzNjFhMGNhMTc1
OTA3NTQwHhcNMjUwOTEwMTEwMTIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTI1MmM2NTE0YjMyNjE0Mzg5ZGI0MjUwZTRmYzE2YTRmMzk3MmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo61RhpQwmOvCunyiwFRNBqsz49xz
ffeW1u8teouhOocHLUhOWbEagp0SPGsn7GClmI1OEkq/XRzpfKiMqdI7D6cYIL4t
B8CcEOl6tKBVHZd1h5M75+6WoWuZdRhggIKoFKR63CsrkBv/FNwLF98aLomxv3Ma
lzbOSh62AdU2a5sSC5DQu4ERtoc3dRDr5g/jmcN1B1JO8sIm7p3QDCHhVH79b3uV
bWO3UUGaRY+iGtW59f2KXELX21QkL9BqtMy7c/7YLDWwael+kMw+VztdcHYqKT4C
VqpiOirSBRyIy27InXsvNUJ1Vs1xciNBjbaBFkX2QZouIs3MeuhY/ZSFdQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFElLGUUsyYUOJ20JQ5PwWpPOXLmMB8GA1UdIwQY
MBaAFBeiXEPnDR9B2YkNdVNhoMoXWQdUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjZKY1EtY05IMEhaaVExMVUyR2d5aGRaQjFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xZGEwNzAtNTA5ZS00Mjk3LWEwMzUt
NDNmYjcwYjRjMTNmLzEvVVNVc1pSU3pKaFE0bmJRbERrX0Jhazg1Y3VZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8xZGEwNzAtNTA5ZS00Mjk3LWEwMzUtNDNmYjcwYjRjMTNm
LzEvRjZKY1EtY05IMEhaaVExMVUyR2d5aGRaQjFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW9wtAwQD
kgAwAwQCuQXwMA0GCSqGSIb3DQEBCwUAA4IBAQCNwTCAUGuOJm+T1C98+FRCm0BB
Q2cirSLUSbylEZ5PeYB/KBj2Q0gd2diYgmtKFqRPPaxQRiYiKVKHzo8KZi0e7/yM
jRJZSHPJJc2/HJtB5gy4JHQnFOO1gLszi3KdEF+J2+Xh3locAGycYrzIAuwVaUh/
TrKM8lg9pDzRodvPR5RcLDiDMk4gJtvp3tkaCU5wT4lm63RsT2kCym0b7JyMSh29
rrL98p0Qzc81Lj/8ABatuaj3xAj2U9AIY7uqV3Fe10jDOkshC+o2txHKMnVMAzlb
ZQHhyVGxTg/h+i9ngfIPSgxLLo8YMNK05I5Nj7E+JjAygVxB9nfv22ArYFAz
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:14:35 2025 by rpki-client