Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/5lQnFnU-84I8pBL0bmtu_5E7JBE.roa
File: 5lQnFnU-84I8pBL0bmtu_5E7JBE.roa (raw, json)
Hash identifier: choN2tt2VLbw64yYa4mcGxM9D/1eWfgY0Zlzr2QBz8I=
Subject key identifier: E6:54:27:16:75:3E:F3:82:3C:A4:12:F4:6E:6B:6E:FF:91:3B:24:11
Certificate issuer: /CN=fdf54b1879a145397fac0d358efabd2f5fd0aca1
Certificate serial: 0199DD813C1A5260B767E4E649734564BB1F
Authority key identifier: FD:F5:4B:18:79:A1:45:39:7F:AC:0D:35:8E:FA:BD:2F:5F:D0:AC:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/5lQnFnU-84I8pBL0bmtu_5E7JBE.roa
Signing time: Mon 13 Oct 2025 12:17:38 +0000
ROA not before: Mon 13 Oct 2025 12:17:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2856
IP address blocks: 77.94.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:dd:81:3c:1a:52:60:b7:67:e4:e6:49:73:45:64:bb:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdf54b1879a145397fac0d358efabd2f5fd0aca1
Validity
Not Before: Oct 13 12:17:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6542716753ef3823ca412f46e6b6eff913b2411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:eb:9a:fe:26:83:f7:1a:96:dc:80:fd:5e:af:
97:6e:7e:73:e4:3f:70:27:14:52:b5:77:35:f1:4b:
39:a1:2e:a2:d8:1f:58:99:e5:43:34:cc:8e:87:89:
16:59:00:0b:f7:f5:80:ca:ef:39:33:fb:c2:e3:6c:
ef:b8:fe:75:94:10:f1:7f:9b:7e:95:aa:84:be:87:
0d:0d:20:99:e0:8b:9f:1b:84:a8:c1:c7:3b:94:66:
2e:66:63:89:2d:a2:10:d6:66:e6:a8:cf:c2:2e:64:
bd:2e:b8:5a:76:ab:9e:cf:f7:31:60:db:83:17:02:
d5:93:c5:f9:bc:da:46:77:16:4b:d3:44:78:a1:64:
3d:0d:29:e8:6c:80:53:38:8a:c7:92:85:29:0b:35:
b3:8f:81:86:73:e6:f2:0b:08:f5:85:3d:bd:13:aa:
ec:98:48:2e:35:c1:e5:73:32:8c:8f:72:ff:f2:03:
f9:57:e0:b6:b6:74:e6:bb:71:4e:89:64:a4:f8:11:
11:ad:d9:6b:b9:30:6c:68:cd:98:e5:9a:f2:bb:85:
4d:46:e7:4a:c3:b7:70:1c:be:36:48:0b:0d:be:9d:
76:70:15:c8:d4:af:f7:53:ac:76:b5:dd:3d:f7:96:
88:11:f1:d4:d9:ac:d2:09:02:6c:bb:4c:17:84:b4:
a7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:54:27:16:75:3E:F3:82:3C:A4:12:F4:6E:6B:6E:FF:91:3B:24:11
X509v3 Authority Key Identifier:
keyid:FD:F5:4B:18:79:A1:45:39:7F:AC:0D:35:8E:FA:BD:2F:5F:D0:AC:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/5lQnFnU-84I8pBL0bmtu_5E7JBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.94.224.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:1d:14:9d:36:2d:1c:77:52:3f:20:d7:21:81:5c:d9:05:7e:
f4:da:46:4a:8b:e4:b2:e8:7a:0e:39:1d:87:ef:ea:b5:7e:ae:
f3:0d:97:cd:be:08:09:cf:28:d1:9b:5e:ae:5a:0c:0c:4f:97:
1a:96:82:9e:1d:97:09:52:9f:ba:09:5b:66:26:e5:8b:98:42:
4d:23:fd:b5:78:fe:3e:e3:e1:47:40:88:a3:f6:25:23:01:18:
78:eb:17:b6:ae:4a:64:36:5e:57:0c:57:a1:76:d9:12:63:9d:
2f:b4:8d:4b:19:6a:94:b9:d3:3d:fc:69:88:cf:a0:71:76:f9:
e0:6c:55:e5:15:81:d9:bf:f2:ac:4d:5d:71:9b:bf:31:ab:88:
c5:6a:10:4b:3c:1e:ce:94:1d:61:e6:d2:61:41:9b:ce:83:21:
4a:1e:8c:c9:58:43:39:82:c3:91:5b:f0:b1:65:5c:a3:a5:81:
57:37:bd:e3:2f:8f:ff:96:06:bd:bb:6a:f7:c4:88:ec:d9:b1:
d6:d3:6e:d6:a8:21:01:df:b0:9b:60:53:94:9f:66:93:99:9c:
74:30:5b:12:70:0e:19:60:f8:6f:e8:82:ef:7f:95:05:74:16:
38:13:4e:fc:32:3a:0c:26:f3:31:0b:06:fb:3d:43:6d:1a:c8:
c5:10:b9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:09:15 2025 by rpki-client