Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/5jJR8ex_Cu2DpLymyUyPZOMyOkE.roa
File: 5jJR8ex_Cu2DpLymyUyPZOMyOkE.roa (raw, json)
Hash identifier: xzEHQ5rCOad65DlaTD/0zOgecwAYSd4+GjZ0k61Ou6I=
Subject key identifier: E6:32:51:F1:EC:7F:0A:ED:83:A4:BC:A6:C9:4C:8F:64:E3:32:3A:41
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 0197A6B058B4FC64B0A5B20E80904438AB16
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/5jJR8ex_Cu2DpLymyUyPZOMyOkE.roa
Signing time: Wed 25 Jun 2025 10:44:24 +0000
ROA not before: Wed 25 Jun 2025 10:44:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48108
IP address blocks: 2a0d:d940:80::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a6:b0:58:b4:fc:64:b0:a5:b2:0e:80:90:44:38:ab:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Jun 25 10:44:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e63251f1ec7f0aed83a4bca6c94c8f64e3323a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:1e:7c:2b:ef:63:b1:4a:27:cd:bb:e0:9d:d9:
84:8d:9f:a3:2f:69:4f:b2:71:cc:13:2a:33:16:93:
5f:5f:91:f9:a4:cf:f9:1a:af:25:9a:ef:48:49:45:
4b:91:54:bf:4f:cc:59:ff:85:02:1d:99:76:90:03:
6a:15:04:8e:86:d8:1e:49:7c:d4:c8:05:70:30:7d:
f2:37:90:89:80:a3:28:ce:98:5e:b9:f6:c6:5d:ad:
3f:a3:00:63:c4:15:8a:b4:90:f4:b0:3c:7e:6a:82:
59:2c:11:60:ca:88:cf:28:b3:de:8d:70:51:29:5a:
b2:42:d4:d3:6c:c8:bf:ed:44:96:dc:f3:e0:79:a1:
76:41:14:2e:49:98:97:3b:da:16:ff:3f:72:1d:6d:
20:45:f3:db:ab:a3:69:78:06:e5:86:8b:65:ae:11:
ae:95:3b:8f:b8:f7:7c:84:b4:d7:5a:54:00:b7:59:
0b:f2:0c:20:3a:74:38:e8:09:68:df:32:10:72:fc:
12:67:fa:6d:47:5d:0c:21:40:a0:5e:6c:6d:a1:ae:
ca:03:6b:34:30:af:17:82:ab:3b:29:dc:96:8e:3d:
ab:7b:88:a4:e6:a8:da:da:a0:70:38:d0:e8:fe:33:
71:35:8d:c0:9c:e6:c7:f0:89:c1:cd:3c:f8:ca:1f:
9b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:32:51:F1:EC:7F:0A:ED:83:A4:BC:A6:C9:4C:8F:64:E3:32:3A:41
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/5jJR8ex_Cu2DpLymyUyPZOMyOkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:80::/44
Signature Algorithm: sha256WithRSAEncryption
b2:d1:a3:e6:e3:1d:fb:82:30:98:aa:43:f4:71:2c:e6:1a:06:
85:af:0a:15:9c:9a:dc:9f:ed:2c:37:09:74:cc:bb:cc:08:30:
11:99:6a:c1:8e:f2:7d:08:6c:fb:40:4a:6e:71:25:48:c0:4d:
0a:41:02:0e:34:dc:cd:ea:24:f9:75:d3:ee:34:40:c5:e3:58:
04:49:ad:a0:e2:5a:ff:52:05:aa:3f:06:a4:1d:fa:6f:cc:b1:
26:f3:a8:aa:0a:2c:c2:6c:ba:3c:53:46:7e:a9:14:a5:6f:eb:
3b:e2:83:c0:5a:32:f9:69:d6:88:b2:ca:ba:b5:c6:c5:ba:96:
c7:87:f2:80:3a:7f:e6:38:ac:7c:2f:15:5d:d9:94:3a:0a:5b:
7e:5e:ca:30:57:d3:e6:98:3c:3d:61:07:ef:44:61:5a:56:8c:
c9:d1:c4:8f:74:39:d8:22:c9:7d:40:6d:c0:20:ba:79:55:b8:
2c:6c:95:e9:31:47:de:c1:7d:c7:9c:d2:f6:4e:0b:5a:2e:c5:
f5:ca:e9:74:c1:df:ab:77:4b:22:af:6b:9b:63:51:7e:37:44:
48:05:ae:a4:0f:4f:4e:1f:3d:0e:c9:1b:ce:af:fa:f4:02:17:
a6:52:75:c7:29:97:db:17:51:06:3d:fc:dd:b1:b4:b4:11:43:
cf:00:df:d1
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZemsFi0/GSwpbIOgJBEOKsWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj
YmJjNzQwHhcNMjUwNjI1MTA0NDI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjMyNTFmMWVjN2YwYWVkODNhNGJjYTZjOTRjOGY2NGUzMzIzYTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+h58K+9jsUonzbvgndmEjZ+jL2lP
snHMEyozFpNfX5H5pM/5Gq8lmu9ISUVLkVS/T8xZ/4UCHZl2kANqFQSOhtgeSXzU
yAVwMH3yN5CJgKMozpheufbGXa0/owBjxBWKtJD0sDx+aoJZLBFgyojPKLPejXBR
KVqyQtTTbMi/7USW3PPgeaF2QRQuSZiXO9oW/z9yHW0gRfPbq6NpeAblhotlrhGu
lTuPuPd8hLTXWlQAt1kL8gwgOnQ46Alo3zIQcvwSZ/ptR10MIUCgXmxtoa7KA2s0
MK8Xgqs7KdyWjj2re4ik5qja2qBwONDo/jNxNY3AnObH8InBzTz4yh+bAQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOYyUfHsfwrtg6S8pslMj2TjMjpBMB8GA1UdIwQY
MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt
MTRkMjM4NTI3ODM1LzEvNWpKUjhleF9DdTJEcEx5bXlVeVBaT015T2tFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1
LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg3ZQACA
MA0GCSqGSIb3DQEBCwUAA4IBAQCy0aPm4x37gjCYqkP0cSzmGgaFrwoVnJrcn+0s
Nwl0zLvMCDARmWrBjvJ9CGz7QEpucSVIwE0KQQIONNzN6iT5ddPuNEDF41gESa2g
4lr/UgWqPwakHfpvzLEm86iqCizCbLo8U0Z+qRSlb+s74oPAWjL5adaIssq6tcbF
upbHh/KAOn/mOKx8LxVd2ZQ6Clt+XsowV9PmmDw9YQfvRGFaVozJ0cSPdDnYIsl9
QG3AILp5VbgsbJXpMUfewX3HnNL2TgtaLsX1yul0wd+rd0sir2ubY1F+N0RIBa6k
D09OHz0OyRvOr/r0AhemUnXHKZfbF1EGPfzdsbS0EUPPAN/R
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:11:02 2025 by rpki-client