
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/U8r0tQi-zyaqXWj1BP7VR1CSQio.roa
File: U8r0tQi-zyaqXWj1BP7VR1CSQio.roa (raw, json)
Hash identifier: 2sAYuzHl5HIba+FILh2Jc5dn+E3yhGsj+/+0I47tVzI=
Subject key identifier: 53:CA:F4:B5:08:BE:CF:26:AA:5D:68:F5:04:FE:D5:47:50:92:42:2A
Certificate issuer: /CN=edfffb3c661e2f78a5785be95916044b06af51d2
Certificate serial: 01992CE0F4D74A9ECBD082FCCF50927AC0F8
Authority key identifier: ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/U8r0tQi-zyaqXWj1BP7VR1CSQio.roa
Signing time: Tue 09 Sep 2025 05:09:24 +0000
ROA not before: Tue 09 Sep 2025 05:09:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57087
IP address blocks: 5.182.130.0/23 maxlen: 23
5.182.130.0/24 maxlen: 24
5.182.131.0/24 maxlen: 24
193.163.42.0/23 maxlen: 24
193.163.42.0/24 maxlen: 24
193.163.43.0/24 maxlen: 24
193.163.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:e0:f4:d7:4a:9e:cb:d0:82:fc:cf:50:92:7a:c0:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edfffb3c661e2f78a5785be95916044b06af51d2
Validity
Not Before: Sep 9 05:09:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53caf4b508becf26aa5d68f504fed5475092422a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:08:5a:ef:e7:8b:fc:57:b4:9f:5d:08:a5:ee:
13:32:21:2e:16:46:c6:78:bc:e0:d2:cd:68:d0:84:
d2:c8:92:5c:8e:42:37:82:e9:ae:28:19:8f:64:7e:
89:b9:ac:3c:0d:87:6d:29:a6:13:6d:76:0d:9e:cb:
a5:58:e1:82:6a:d0:09:14:d1:40:9a:12:6f:d9:11:
32:86:ae:fa:90:5b:65:25:c9:fa:62:6f:e9:50:1d:
06:4b:ad:c9:07:21:15:af:a2:2f:2f:dd:96:81:3f:
fe:44:61:cf:a1:18:0a:a9:20:19:22:7b:fb:a5:93:
97:22:57:63:06:e5:93:1a:1d:39:01:77:eb:37:e8:
2c:45:0a:bf:1c:81:bc:ed:c8:3d:33:11:87:13:4c:
8a:0c:82:a1:f4:a7:cc:70:33:cc:1e:02:0a:fc:53:
fc:73:df:ca:fc:23:ad:f8:da:aa:b7:51:c8:b8:63:
88:f1:83:d6:83:6a:d8:b7:3f:ba:d3:3b:d2:5f:c4:
90:98:bf:d3:16:85:02:d8:c1:ab:3c:21:a4:ba:48:
ac:bb:79:18:c2:37:8f:6c:82:8e:17:ac:c2:a9:a3:
cd:9b:6c:dc:e3:f0:9e:c3:c4:18:5e:30:0d:f9:71:
c4:e9:55:cf:26:ca:74:3b:df:bb:ae:5e:09:f5:48:
ea:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CA:F4:B5:08:BE:CF:26:AA:5D:68:F5:04:FE:D5:47:50:92:42:2A
X509v3 Authority Key Identifier:
keyid:ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/U8r0tQi-zyaqXWj1BP7VR1CSQio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.130.0/23
193.163.42.0-193.163.44.255
Signature Algorithm: sha256WithRSAEncryption
23:00:83:48:15:e5:d5:b4:37:44:c7:72:2f:f5:3f:fe:6a:7c:
59:95:2c:26:6f:ba:18:ba:dc:f2:99:d8:1e:9e:ab:2c:7b:50:
cc:a2:f1:d9:bd:67:b0:c3:01:a9:8d:16:e5:23:20:61:3d:27:
75:fd:59:c2:4b:e3:6c:e5:72:2f:63:dd:fe:29:2e:52:4f:04:
52:a3:1f:a0:76:47:e2:dc:f2:fc:cc:0b:d7:7c:2e:bf:64:e0:
0d:7c:fc:e9:f8:82:ed:07:f3:91:bd:94:d8:4e:ff:0a:d1:9c:
29:8c:61:19:7d:ce:aa:c9:68:eb:60:13:0d:58:c9:d0:59:06:
db:6c:8b:5d:96:cc:8c:23:e0:0a:ec:4d:59:ff:11:cd:d0:9f:
4f:81:29:56:97:d0:ea:b3:71:67:e4:a7:14:ce:c3:1d:d9:5a:
9b:bc:ff:4d:55:1d:8f:4c:af:ab:3c:5a:8e:f9:e2:24:f1:7e:
12:b5:4b:cf:3e:6c:83:02:a7:68:23:66:0c:03:0b:71:e6:03:
20:22:8c:e1:0e:e4:15:de:2a:74:8e:38:ba:4e:63:86:d0:65:
d4:86:3d:bf:bb:5a:16:5e:d2:0e:18:ba:19:3b:6c:70:f8:94:
51:db:ac:8f:47:c8:69:ae:6f:2f:20:91:b2:03:2c:67:10:ba:
a7:41:6c:50
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZks4PTXSp7L0IL8z1CSesD4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZmZmYjNjNjYxZTJmNzhhNTc4NWJlOTU5MTYwNDRiMDZh
ZjUxZDIwHhcNMjUwOTA5MDUwOTI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1M2NhZjRiNTA4YmVjZjI2YWE1ZDY4ZjUwNGZlZDU0NzUwOTI0MjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQha7+eL/Fe0n10Ipe4TMiEuFkbG
eLzg0s1o0ITSyJJcjkI3gumuKBmPZH6Juaw8DYdtKaYTbXYNnsulWOGCatAJFNFA
mhJv2REyhq76kFtlJcn6Ym/pUB0GS63JByEVr6IvL92WgT/+RGHPoRgKqSAZInv7
pZOXIldjBuWTGh05AXfrN+gsRQq/HIG87cg9MxGHE0yKDIKh9KfMcDPMHgIK/FP8
c9/K/COt+Nqqt1HIuGOI8YPWg2rYtz+60zvSX8SQmL/TFoUC2MGrPCGkukisu3kY
wjePbIKOF6zCqaPNm2zc4/Cew8QYXjAN+XHE6VXPJsp0O9+7rl4J9Ujq8wIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFFPK9LUIvs8mql1o9QT+1UdQkkIqMB8GA1UdIwQY
MBaAFO3/+zxmHi94pXhb6VkWBEsGr1HSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2ZfN1BHWWVMM2lsZUZ2cFdSWUVTd2F2VWRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hMzhlNGYtNGQxMC00YjlmLThmMmYt
YTk4OTM1NDVjM2M1LzEvVThyMHRRaS16eWFxWFdqMUJQN1ZSMUNTUWlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hMzhlNGYtNGQxMC00YjlmLThmMmYtYTk4OTM1NDVjM2M1
LzEvN2ZfN1BHWWVMM2lsZUZ2cFdSWUVTd2F2VWRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBBbaCMAwD
BAHBoyoDBADBoywwDQYJKoZIhvcNAQELBQADggEBACMAg0gV5dW0N0THci/1P/5q
fFmVLCZvuhi63PKZ2B6eqyx7UMyi8dm9Z7DDAamNFuUjIGE9J3X9WcJL42zlci9j
3f4pLlJPBFKjH6B2R+Lc8vzMC9d8Lr9k4A18/On4gu0H85G9lNhO/wrRnCmMYRl9
zqrJaOtgEw1YydBZBttsi12WzIwj4ArsTVn/Ec3Qn0+BKVaX0OqzcWfkpxTOwx3Z
Wpu8/01VHY9Mr6s8Wo754iTxfhK1S88+bIMCp2gjZgwDC3HmAyAijOEO5BXeKnSO
OLpOY4bQZdSGPb+7WhZe0g4Yuhk7bHD4lFHbrI9HyGmuby8gkbIDLGcQuqdBbFA=
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:53:05 2025 by rpki-client