Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/rDF0yCBE4X8q41x2l6Nt4nfaFYs.roa
File: rDF0yCBE4X8q41x2l6Nt4nfaFYs.roa (raw, json)
Hash identifier: xb5ZEXJ0QV1z7XXKAlC/1y6Tcd7ByFjDX9SUb7O///E=
Subject key identifier: AC:31:74:C8:20:44:E1:7F:2A:E3:5C:76:97:A3:6D:E2:77:DA:15:8B
Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial: 0198BCCA3259E521C209C51150970999E32D
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/rDF0yCBE4X8q41x2l6Nt4nfaFYs.roa
Signing time: Mon 18 Aug 2025 10:47:04 +0000
ROA not before: Mon 18 Aug 2025 10:47:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215272
IP address blocks: 5.44.44.0/24 maxlen: 24
45.129.186.0/24 maxlen: 24
193.47.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bc:ca:32:59:e5:21:c2:09:c5:11:50:97:09:99:e3:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
Validity
Not Before: Aug 18 10:47:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac3174c82044e17f2ae35c7697a36de277da158b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e4:29:e8:24:62:6c:ee:0f:90:29:26:47:f2:
08:09:75:94:6d:f8:eb:d6:bd:cd:38:dc:31:53:71:
b3:62:f4:c5:be:d4:81:01:39:39:57:72:c8:3e:47:
c0:5d:23:49:8b:c4:d2:bb:2c:d8:0d:37:08:81:7a:
d5:68:c0:9c:3d:fc:c1:9a:ae:e3:b7:56:01:d3:49:
73:31:ba:bf:5d:0e:a6:32:67:74:47:87:37:2c:65:
a4:b2:b6:c9:52:53:69:89:b2:fb:f3:8d:97:60:a6:
3c:ee:01:1c:bb:14:46:9d:5e:fc:d8:02:c3:77:c0:
70:8c:28:2a:b5:1b:52:8a:c4:c9:dc:99:71:ed:93:
65:22:af:29:78:33:b2:7e:e1:eb:36:8f:5f:29:92:
25:ca:6e:ac:37:b5:46:50:f0:bc:52:37:ba:a5:00:
e0:2f:60:11:07:35:4f:5f:d3:53:52:7f:cc:9d:aa:
56:b4:ad:30:d7:5e:0b:5b:43:2e:d7:eb:f9:be:96:
7c:14:e0:ff:ad:2c:c6:c8:a0:86:4f:3d:a6:e8:dc:
f9:8e:73:93:52:e2:9c:f2:7f:f1:60:a5:8c:76:99:
a5:c4:6b:5f:cb:a7:cc:d5:0e:7c:0d:e1:ce:5c:76:
d8:ab:b2:0b:f9:de:f0:3d:a3:0e:c5:c5:b7:bb:8e:
50:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:31:74:C8:20:44:E1:7F:2A:E3:5C:76:97:A3:6D:E2:77:DA:15:8B
X509v3 Authority Key Identifier:
keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/rDF0yCBE4X8q41x2l6Nt4nfaFYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.44.0/24
45.129.186.0/24
193.47.42.0/24
Signature Algorithm: sha256WithRSAEncryption
63:92:c0:ae:83:f5:7e:6f:a0:0b:ee:8f:13:a9:b2:c7:7d:e3:
c8:06:96:29:c7:cf:8a:a0:c1:94:04:95:7e:87:b5:c6:58:80:
df:40:ac:ef:45:96:d6:61:d1:09:52:00:2c:f2:ef:e9:60:10:
38:82:f2:29:38:7b:35:38:da:18:c8:9f:3d:51:d1:cb:94:f7:
4b:af:8d:c1:7e:d9:cf:99:a7:2a:30:ba:8e:1c:21:28:f8:2f:
74:a9:88:b4:11:a6:1e:07:b2:8b:a2:70:3e:22:1f:cc:e9:24:
4d:7d:c6:ef:c2:76:08:f4:13:13:5f:3b:67:d6:97:c5:14:18:
6c:8b:dd:b7:ac:af:d5:08:b8:ab:17:98:20:0f:8a:c2:c0:0e:
04:5b:72:ca:18:9f:7d:c7:4c:8b:26:21:12:12:bd:81:97:fb:
1e:9f:70:ca:c3:21:f6:ca:f1:59:46:b7:43:50:7d:99:d2:16:
b6:e3:30:b6:22:5a:77:1a:3e:7b:c0:37:03:36:36:f7:c6:cc:
21:f5:2a:15:fc:da:c1:20:3e:ed:01:1a:37:d4:98:18:00:6b:
09:a1:a3:96:6e:ab:07:6d:45:0f:b2:15:60:32:cb:58:25:9e:
9e:3a:3a:5a:46:6e:67:c5:18:6b:eb:f7:a4:05:9b:62:30:34:
a9:5a:6d:74
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZi8yjJZ5SHCCcURUJcJmeMtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYmU2NWFlMjNmMjA3ZmE2OTUyNTVmNTVhOTA3YWMxNjA4
YmUwOTQwHhcNMjUwODE4MTA0NzA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzMxNzRjODIwNDRlMTdmMmFlMzVjNzY5N2EzNmRlMjc3ZGExNThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+Qp6CRibO4PkCkmR/IICXWUbfjr
1r3NONwxU3GzYvTFvtSBATk5V3LIPkfAXSNJi8TSuyzYDTcIgXrVaMCcPfzBmq7j
t1YB00lzMbq/XQ6mMmd0R4c3LGWksrbJUlNpibL7842XYKY87gEcuxRGnV782ALD
d8BwjCgqtRtSisTJ3Jlx7ZNlIq8peDOyfuHrNo9fKZIlym6sN7VGUPC8Uje6pQDg
L2ARBzVPX9NTUn/MnapWtK0w114LW0Mu1+v5vpZ8FOD/rSzGyKCGTz2m6Nz5jnOT
UuKc8n/xYKWMdpmlxGtfy6fM1Q58DeHOXHbYq7IL+d7wPaMOxcW3u45QewIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKwxdMggROF/KuNcdpejbeJ32hWLMB8GA1UdIwQY
MBaAFF++Za4j8gf6aVJV9VqQesFgi+CUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUt
NDkyYWIzNzI2ODlkLzEvckRGMHlDQkU0WDhxNDF4Mmw2TnQ0bmZhRllzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUtNDkyYWIzNzI2ODlk
LzEvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABSwsAwQA
LYG6AwQAwS8qMA0GCSqGSIb3DQEBCwUAA4IBAQBjksCug/V+b6AL7o8TqbLHfePI
BpYpx8+KoMGUBJV+h7XGWIDfQKzvRZbWYdEJUgAs8u/pYBA4gvIpOHs1ONoYyJ89
UdHLlPdLr43BftnPmacqMLqOHCEo+C90qYi0EaYeB7KLonA+Ih/M6SRNfcbvwnYI
9BMTXztn1pfFFBhsi923rK/VCLirF5ggD4rCwA4EW3LKGJ99x0yLJiESEr2Bl/se
n3DKwyH2yvFZRrdDUH2Z0ha24zC2Ilp3Gj57wDcDNjb3xswh9SoV/NrBID7tARo3
1JgYAGsJoaOWbqsHbUUPshVgMstYJZ6eOjpaRm5nxRhr6/ekBZtiMDSpWm10
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:53:14 2025 by rpki-client