Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/5tesipqYkRXRRWnVZJDo92wLa7o.roa
File: 5tesipqYkRXRRWnVZJDo92wLa7o.roa (raw, json)
Hash identifier: sefnYYGAGevYCEP5NBJ+Xnm/tUS4YEP2waf49250BH4=
Subject key identifier: E6:D7:AC:8A:9A:98:91:15:D1:45:69:D5:64:90:E8:F7:6C:0B:6B:BA
Certificate issuer: /CN=29390ec0adca5f0743d181145c7899f991fb65e0
Certificate serial: 01995C4EAB68DA1C46A834E78B44A4F6269E
Authority key identifier: 29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/5tesipqYkRXRRWnVZJDo92wLa7o.roa
Signing time: Thu 18 Sep 2025 10:11:23 +0000
ROA not before: Thu 18 Sep 2025 10:11:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213630
IP address blocks: 194.84.15.0/24 maxlen: 24
195.151.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5c:4e:ab:68:da:1c:46:a8:34:e7:8b:44:a4:f6:26:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29390ec0adca5f0743d181145c7899f991fb65e0
Validity
Not Before: Sep 18 10:11:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6d7ac8a9a989115d14569d56490e8f76c0b6bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:72:fc:22:f0:d6:18:7f:39:5b:af:0e:87:75:
18:3e:1a:1d:ea:43:6f:a5:0f:51:50:44:27:e8:3b:
9f:72:eb:e0:34:9a:0c:be:94:5a:40:ba:a0:77:64:
fa:95:2b:73:08:6e:1e:4b:d3:7f:e6:95:31:67:0d:
a1:1e:33:d1:2c:a3:bd:d8:3f:92:7c:c5:8a:75:3c:
9b:9e:bf:7e:60:74:0f:81:92:92:8a:bb:99:b3:c0:
2d:77:2b:17:da:bb:5c:4b:a8:9a:a5:ea:4a:90:1b:
3b:3e:32:e8:1c:b2:4a:03:e2:dd:b1:58:80:7f:7e:
cd:18:aa:35:4c:0a:b3:d9:92:d1:6c:db:4f:72:64:
90:e9:91:9b:77:17:1d:09:bc:bc:a8:76:1b:b1:65:
58:bb:0d:c5:12:f6:01:ca:4e:e2:d5:fd:72:03:4d:
a0:85:9b:3f:9d:78:d6:43:9e:50:6c:ec:bc:ce:9a:
66:92:99:c6:2c:3c:03:57:79:c9:8b:c0:e3:8d:2a:
97:0b:cf:c9:79:d2:8e:3f:7c:d2:65:21:97:b4:34:
8d:cd:aa:3d:45:8b:f0:01:3e:7d:6f:c4:33:0a:3b:
78:1d:6a:95:00:1e:51:2a:5a:25:29:19:52:7f:7c:
bb:73:58:78:9a:88:bf:bb:56:dc:00:08:b2:44:37:
b2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D7:AC:8A:9A:98:91:15:D1:45:69:D5:64:90:E8:F7:6C:0B:6B:BA
X509v3 Authority Key Identifier:
keyid:29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/5tesipqYkRXRRWnVZJDo92wLa7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.84.15.0/24
195.151.14.0/24
Signature Algorithm: sha256WithRSAEncryption
28:08:ec:f5:71:9b:39:e4:a9:cb:03:3f:f1:da:5a:28:29:ca:
35:8a:05:02:4c:06:49:6f:a3:7b:34:61:17:22:e4:c2:6a:29:
ca:0f:39:d8:e2:91:73:b4:84:e9:97:6f:82:79:60:a4:52:4a:
92:86:d6:ed:c6:5c:f7:58:a3:6e:1e:c0:48:eb:70:64:cf:4c:
ad:84:f6:e1:af:c2:30:ca:e9:a3:69:d6:ae:49:d4:39:5f:84:
58:35:f6:53:70:98:2a:a0:3c:98:9a:63:62:0d:03:2c:08:1c:
d0:53:3f:78:42:37:5f:1a:fd:1c:49:3a:bf:ee:50:dc:85:39:
29:df:56:d6:af:75:f3:70:0e:82:13:bd:71:c9:2a:59:56:fc:
c5:a7:59:86:e5:55:83:63:c1:c9:4d:83:b2:9a:c3:21:e6:d8:
1e:ec:8c:ad:06:1a:81:02:65:bc:b5:39:eb:1c:92:f7:81:39:
ae:fe:46:23:fd:33:97:d0:60:53:00:b7:3e:f4:04:de:be:64:
12:f5:cb:ba:ad:f9:68:09:84:fa:8d:c8:a4:c8:c4:e6:f6:01:
1d:85:a7:4b:87:f6:19:2b:be:3b:46:96:8f:58:5a:c5:30:69:
60:0b:3b:dc:66:d2:f2:bf:a7:3b:21:7e:0f:67:38:5c:de:9a:
23:ec:24:14
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZlcTqto2hxGqDTni0Sk9iaeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MzkwZWMwYWRjYTVmMDc0M2QxODExNDVjNzg5OWY5OTFm
YjY1ZTAwHhcNMjUwOTE4MTAxMTIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmQ3YWM4YTlhOTg5MTE1ZDE0NTY5ZDU2NDkwZThmNzZjMGI2YmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3L8IvDWGH85W68Oh3UYPhod6kNv
pQ9RUEQn6DufcuvgNJoMvpRaQLqgd2T6lStzCG4eS9N/5pUxZw2hHjPRLKO92D+S
fMWKdTybnr9+YHQPgZKSiruZs8AtdysX2rtcS6iapepKkBs7PjLoHLJKA+LdsViA
f37NGKo1TAqz2ZLRbNtPcmSQ6ZGbdxcdCby8qHYbsWVYuw3FEvYByk7i1f1yA02g
hZs/nXjWQ55QbOy8zppmkpnGLDwDV3nJi8DjjSqXC8/JedKOP3zSZSGXtDSNzao9
RYvwAT59b8QzCjt4HWqVAB5RKlolKRlSf3y7c1h4moi/u1bcAAiyRDeyPwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFObXrIqamJEV0UVp1WSQ6PdsC2u6MB8GA1UdIwQY
MBaAFCk5DsCtyl8HQ9GBFFx4mfmR+2XgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9iMzEzOTItMmQxYy00OTM0LWE1OWUt
ZWQ0MzNhYWM3ODI4LzEvNXRlc2lwcVlrUlhSUlduVlpKRG85MndMYTdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9iMzEzOTItMmQxYy00OTM0LWE1OWUtZWQ0MzNhYWM3ODI4
LzEvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwlQPAwQA
w5cOMA0GCSqGSIb3DQEBCwUAA4IBAQAoCOz1cZs55KnLAz/x2looKco1igUCTAZJ
b6N7NGEXIuTCainKDznY4pFztITpl2+CeWCkUkqShtbtxlz3WKNuHsBI63Bkz0yt
hPbhr8IwyumjadauSdQ5X4RYNfZTcJgqoDyYmmNiDQMsCBzQUz94QjdfGv0cSTq/
7lDchTkp31bWr3XzcA6CE71xySpZVvzFp1mG5VWDY8HJTYOymsMh5tge7IytBhqB
AmW8tTnrHJL3gTmu/kYj/TOX0GBTALc+9ATevmQS9cu6rfloCYT6jcikyMTm9gEd
hadLh/YZK747RpaPWFrFMGlgCzvcZtLyv6c7IX4PZzhc3poj7CQU
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:42 2025 by rpki-client