Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/s5TEpCg45yxgX3PDwNw2nyaCVTc.roa
File: s5TEpCg45yxgX3PDwNw2nyaCVTc.roa (raw, json)
Hash identifier: pDdDr/v29Ue4vxXj8MxhyP4D04jg9B0/UrZD3UMEp9w=
Subject key identifier: B3:94:C4:A4:28:38:E7:2C:60:5F:73:C3:C0:DC:36:9F:26:82:55:37
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0198A2164458F0C4F14CBE27F40038F379A9
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/s5TEpCg45yxgX3PDwNw2nyaCVTc.roa
Signing time: Wed 13 Aug 2025 06:20:24 +0000
ROA not before: Wed 13 Aug 2025 06:20:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201194
IP address blocks: 85.133.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a2:16:44:58:f0:c4:f1:4c:be:27:f4:00:38:f3:79:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Aug 13 06:20:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b394c4a42838e72c605f73c3c0dc369f26825537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ae:87:a8:44:62:d8:9b:0a:4c:f1:78:ee:33:
eb:be:26:f6:b6:1f:e9:e7:f0:c1:2e:1b:37:1a:50:
75:08:5b:0e:79:2b:31:e1:be:5a:b0:07:ce:62:a0:
bf:67:85:53:0a:17:5b:75:88:bf:e5:8d:96:df:75:
44:9b:a6:36:e2:0b:ee:bb:7b:6b:09:2e:11:f2:f2:
41:83:ff:e6:63:65:cb:90:cd:a0:94:1b:09:2b:10:
4a:95:82:03:56:14:3e:57:e9:1f:37:05:1e:95:15:
0c:09:8c:25:26:a2:a8:3c:f9:3c:b9:2f:4e:46:be:
c7:8d:26:82:4e:1d:ed:53:c7:e5:47:5c:b3:95:d2:
71:08:d3:2c:c2:61:5c:34:1f:04:1c:47:05:39:46:
d3:cd:9b:c0:3b:b4:28:91:f1:16:08:cf:0d:c5:71:
9d:65:a8:01:67:5d:7f:a1:91:0a:a5:c0:58:08:38:
3c:98:7e:4e:1d:77:cd:2d:be:1f:2e:bd:75:46:6e:
dc:5a:cb:3f:c7:f6:72:c5:4d:76:d2:8d:45:c1:70:
50:3e:c9:ce:95:7a:99:9b:4a:7b:83:37:88:37:04:
37:2f:20:05:e4:29:3f:df:fa:1d:e5:d8:93:ff:5d:
22:1f:bc:fc:7a:83:ae:e4:ea:64:13:ee:bf:93:b6:
24:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:94:C4:A4:28:38:E7:2C:60:5F:73:C3:C0:DC:36:9F:26:82:55:37
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/s5TEpCg45yxgX3PDwNw2nyaCVTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.245.0/24
Signature Algorithm: sha256WithRSAEncryption
88:24:e1:c6:bd:ce:e4:39:b4:86:1f:ab:09:bf:02:57:e9:c9:
e9:2c:4a:b0:4b:89:b7:e7:dc:01:41:78:49:37:f7:2b:21:be:
47:90:ff:ba:d0:8b:76:e9:72:ab:6f:37:04:08:19:4a:51:d7:
be:a9:6d:03:2f:cd:90:6e:20:fa:82:37:f5:2f:ae:1a:cb:5c:
05:9b:e2:89:e9:a0:cb:a1:22:d7:20:ea:b1:99:de:57:af:9d:
49:1c:6f:d1:be:6f:ce:d3:21:ce:65:b2:36:78:84:3b:0f:e1:
48:3f:ca:37:95:eb:d3:c2:87:a8:b1:7c:f5:84:4b:1c:38:05:
13:e5:8f:36:9e:af:5e:d3:00:35:56:10:02:26:93:a8:a0:aa:
95:e8:f1:8f:82:12:13:0f:5a:bb:05:ca:5c:5e:27:d6:5a:91:
39:59:cf:29:4a:a5:c5:c3:16:b5:9b:89:50:68:cb:91:a4:1f:
11:f8:7d:9f:45:bb:3f:3d:dc:d6:ea:58:c8:80:66:fe:be:d6:
b9:ba:e2:e6:4f:72:f1:32:92:29:37:70:ca:ff:64:28:10:50:
15:2e:a2:f7:10:8a:31:3e:e0:f7:dc:ab:67:67:df:af:f5:ed:
ec:f7:16:af:f1:d0:fa:d4:56:69:74:fc:e2:80:d8:f1:83:6b:
b6:02:85:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:41:28 2025 by rpki-client