Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/5XZJncXp7T3hCQRHkCBW2md8Uf4.roa
File: 5XZJncXp7T3hCQRHkCBW2md8Uf4.roa (raw, json)
Hash identifier: 6z/vYzC9DEkIupIAEvIVTnWvgDDhq1Ndyu2N9VsrLA4=
Subject key identifier: E5:76:49:9D:C5:E9:ED:3D:E1:09:04:47:90:20:56:DA:67:7C:51:FE
Certificate issuer: /CN=9b054fec255d0cdc6ba3aba96ab2603663272db3
Certificate serial: 01995680A51827B5C575F53106850A196D5C
Authority key identifier: 9B:05:4F:EC:25:5D:0C:DC:6B:A3:AB:A9:6A:B2:60:36:63:27:2D:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/5XZJncXp7T3hCQRHkCBW2md8Uf4.roa
Signing time: Wed 17 Sep 2025 07:08:15 +0000
ROA not before: Wed 17 Sep 2025 07:08:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205014
IP address blocks: 91.240.242.0/24 maxlen: 24
193.105.93.0/24 maxlen: 24
195.43.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:56:80:a5:18:27:b5:c5:75:f5:31:06:85:0a:19:6d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b054fec255d0cdc6ba3aba96ab2603663272db3
Validity
Not Before: Sep 17 07:08:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e576499dc5e9ed3de1090447902056da677c51fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d7:a8:bd:0f:40:13:fb:d7:24:71:5a:48:2e:
1f:9a:e4:9f:b2:b9:33:9b:4d:3a:24:a7:d6:68:72:
d8:31:c6:86:14:19:4b:09:ff:8f:67:f6:73:9a:39:
a3:ca:a0:a5:f0:5f:6a:1b:fe:4f:5f:c7:f2:04:43:
34:61:7e:e5:0a:63:3a:1e:88:0b:4c:b0:9d:56:34:
b8:81:b6:e4:91:4e:6f:ed:db:d2:0f:a7:14:c8:3c:
9b:99:4c:9f:16:e9:61:70:de:01:81:88:dc:ac:4d:
d6:da:ba:c3:7a:94:54:14:44:42:d2:67:71:f5:fe:
7f:59:cb:2e:16:d6:ce:6d:58:85:f0:a0:63:19:a4:
02:36:bc:c8:63:38:ad:b5:af:62:cb:43:a0:da:95:
74:8b:65:ad:42:3b:aa:a0:bc:29:ca:d0:f4:d3:8c:
0d:36:82:42:92:e0:71:c0:27:2c:16:cc:89:50:1f:
1e:0c:5e:37:75:12:5a:f8:27:61:48:ba:79:d1:18:
8d:4e:5c:17:4d:40:2c:3d:dd:76:b2:11:8b:ce:ae:
c8:99:4e:c6:29:fa:65:64:64:97:fb:b6:7b:ef:b9:
83:3e:91:c4:ee:67:ec:4a:3b:48:98:f5:c7:e2:fa:
a0:bb:e9:cb:31:b2:57:99:86:20:bd:a9:74:60:b9:
1a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:76:49:9D:C5:E9:ED:3D:E1:09:04:47:90:20:56:DA:67:7C:51:FE
X509v3 Authority Key Identifier:
keyid:9B:05:4F:EC:25:5D:0C:DC:6B:A3:AB:A9:6A:B2:60:36:63:27:2D:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/5XZJncXp7T3hCQRHkCBW2md8Uf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.242.0/24
193.105.93.0/24
195.43.77.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:39:58:19:c3:28:eb:d2:d2:6d:f1:8a:a9:62:3f:86:e9:d7:
10:e9:78:87:43:8d:ab:63:0d:95:05:0f:fc:ef:44:8f:46:f9:
b5:64:b2:57:81:17:ff:be:6b:84:c9:d4:45:9b:42:e0:4c:27:
8b:5d:ff:b3:af:9e:4e:9c:90:70:ad:6f:7e:6d:c9:ee:49:04:
af:50:7b:45:ae:ed:65:19:da:dc:af:f7:a1:ff:21:30:3c:6a:
02:59:db:e3:ed:cc:21:75:d7:1e:a1:74:33:00:53:f4:bc:5d:
32:e3:d0:ee:03:6a:a3:b5:80:3e:ab:b8:e6:5f:bd:a1:a5:09:
85:80:c9:6a:e4:7d:79:9d:1f:31:a8:bb:9a:6b:15:75:70:2a:
f7:1a:90:97:1e:43:28:d7:7d:a1:0a:28:4a:c3:4e:2c:fe:31:
db:47:02:c9:ee:85:00:7b:70:1a:f3:7a:d0:d1:7a:ef:8d:78:
6d:12:89:1d:dc:33:af:71:ce:65:cc:45:80:8d:ea:2a:8c:be:
53:16:fa:6b:c4:1e:7f:96:ce:6a:d2:2e:3e:95:f0:79:7d:b9:
7a:96:5a:1e:71:78:25:f6:40:3f:ea:29:1f:9f:d2:34:54:70:
0b:26:85:16:dc:b8:92:65:4f:2c:d5:02:55:51:36:22:f0:57:
33:9c:ce:3d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZlWgKUYJ7XFdfUxBoUKGW1cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMDU0ZmVjMjU1ZDBjZGM2YmEzYWJhOTZhYjI2MDM2NjMy
NzJkYjMwHhcNMjUwOTE3MDcwODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTc2NDk5ZGM1ZTllZDNkZTEwOTA0NDc5MDIwNTZkYTY3N2M1MWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9eovQ9AE/vXJHFaSC4fmuSfsrkz
m006JKfWaHLYMcaGFBlLCf+PZ/ZzmjmjyqCl8F9qG/5PX8fyBEM0YX7lCmM6HogL
TLCdVjS4gbbkkU5v7dvSD6cUyDybmUyfFulhcN4BgYjcrE3W2rrDepRUFERC0mdx
9f5/WcsuFtbObViF8KBjGaQCNrzIYzitta9iy0Og2pV0i2WtQjuqoLwpytD004wN
NoJCkuBxwCcsFsyJUB8eDF43dRJa+CdhSLp50RiNTlwXTUAsPd12shGLzq7ImU7G
KfplZGSX+7Z777mDPpHE7mfsSjtImPXH4vqgu+nLMbJXmYYgval0YLka0wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOV2SZ3F6e094QkER5AgVtpnfFH+MB8GA1UdIwQY
MBaAFJsFT+wlXQzca6OrqWqyYDZjJy2zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXdWUDdDVmRETnhybzZ1cGFySmdObU1uTGJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS83NjA1ZWMtNmYzNC00NTg5LTkyMzct
ZjgwYTQ4YWQwYTJjLzEvNVhaSm5jWHA3VDNoQ1FSSGtDQlcybWQ4VWY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS83NjA1ZWMtNmYzNC00NTg5LTkyMzctZjgwYTQ4YWQwYTJj
LzEvbXdWUDdDVmRETnhybzZ1cGFySmdObU1uTGJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW/DyAwQA
wWldAwQAwytNMA0GCSqGSIb3DQEBCwUAA4IBAQBLOVgZwyjr0tJt8YqpYj+G6dcQ
6XiHQ42rYw2VBQ/870SPRvm1ZLJXgRf/vmuEydRFm0LgTCeLXf+zr55OnJBwrW9+
bcnuSQSvUHtFru1lGdrcr/eh/yEwPGoCWdvj7cwhddceoXQzAFP0vF0y49DuA2qj
tYA+q7jmX72hpQmFgMlq5H15nR8xqLuaaxV1cCr3GpCXHkMo132hCihKw04s/jHb
RwLJ7oUAe3Aa83rQ0XrvjXhtEokd3DOvcc5lzEWAjeoqjL5TFvprxB5/ls5q0i4+
lfB5fbl6lloecXgl9kA/6ikfn9I0VHALJoUW3LiSZU8s1QJVUTYi8FcznM49
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:20 2025 by rpki-client