Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/RFiGpEskavGFH3d7vncfEiT6nJA.roa
File: RFiGpEskavGFH3d7vncfEiT6nJA.roa (raw, json)
Hash identifier: Z/HSJq7Rv9GiS35kvrerm9HiUJ4CG2PGnlWlQj6NFK8=
Subject key identifier: 44:58:86:A4:4B:24:6A:F1:85:1F:77:7B:BE:77:1F:12:24:FA:9C:90
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0197FA87BC36CB920CCF96220BDFE4B54A6A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/RFiGpEskavGFH3d7vncfEiT6nJA.roa
Signing time: Fri 11 Jul 2025 17:28:08 +0000
ROA not before: Fri 11 Jul 2025 17:28:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59592
IP address blocks: 5.230.206.0/24 maxlen: 32
5.230.220.0/24 maxlen: 32
5.231.87.0/24 maxlen: 32
5.231.200.0/24 maxlen: 32
185.13.158.0/24 maxlen: 32
2a02:2fc0:f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 11:10:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:fa:87:bc:36:cb:92:0c:cf:96:22:0b:df:e4:b5:4a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 11 17:28:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=445886a44b246af1851f777bbe771f1224fa9c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9f:9d:5f:93:89:d1:29:69:56:61:3d:7f:36:
85:2c:9e:0b:4c:40:9a:40:d4:fd:8c:74:06:9a:b2:
a6:19:c8:e6:ef:90:05:81:dc:7c:d3:87:23:f1:15:
b2:9d:25:a9:01:3c:dc:47:9c:81:87:8c:bb:30:a5:
8f:4f:a2:bb:aa:1c:06:36:58:e9:d8:ee:68:e7:8a:
a7:d9:50:09:2c:9c:9b:68:72:bd:db:c8:a2:71:10:
74:ce:03:91:e9:37:1c:6d:af:61:55:f5:aa:e6:d8:
bc:50:d2:c8:f2:e3:fe:63:8b:a6:a8:41:5c:1a:4d:
be:4b:eb:c0:fc:82:09:66:b8:da:1d:13:96:cb:2a:
d9:25:33:0e:f0:38:6b:59:cf:40:aa:8d:e6:aa:ee:
c4:ec:ee:57:a0:de:94:ec:37:a0:3c:50:87:a2:38:
77:12:9d:e4:9d:74:c0:65:9d:13:6c:de:7e:8a:51:
cf:f4:5b:dc:14:f7:38:55:8b:2f:51:42:bd:2c:51:
b9:92:6f:d7:63:39:e2:5b:2d:a6:c2:24:62:8d:9d:
2e:19:ec:c7:5c:22:b8:ab:af:77:e2:1d:72:2f:61:
32:01:99:c9:c2:1b:bd:4c:0a:d5:f3:0b:87:08:60:
21:86:f9:36:73:d6:90:e5:d3:73:9e:b5:6c:37:c7:
94:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:58:86:A4:4B:24:6A:F1:85:1F:77:7B:BE:77:1F:12:24:FA:9C:90
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/RFiGpEskavGFH3d7vncfEiT6nJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.230.206.0/24
5.230.220.0/24
5.231.87.0/24
5.231.200.0/24
185.13.158.0/24
IPv6:
2a02:2fc0:f::/48
Signature Algorithm: sha256WithRSAEncryption
15:27:ff:07:87:dc:b0:3d:1c:b2:2a:09:c7:73:db:36:4d:cd:
5c:d3:1b:f0:79:80:39:e4:47:b4:51:83:03:35:49:16:a2:41:
9d:3b:a5:a8:81:37:2a:47:c6:c8:de:e2:a5:c1:a1:83:a9:e8:
8f:89:05:c4:c5:44:2b:39:4f:a7:23:34:17:fd:9b:56:9a:42:
6e:a7:93:30:26:db:27:e2:c7:9b:28:9c:13:d1:68:93:08:55:
6a:0b:61:66:5c:b4:25:1a:49:a5:bf:4c:e4:89:db:c7:69:f5:
b6:1d:b8:7a:09:65:3e:f4:00:02:c5:b8:66:ae:07:3f:95:4b:
e4:ec:22:ef:e4:b9:9a:6a:76:04:8f:4e:ff:59:96:0b:45:b1:
37:d0:5d:ca:f0:ac:8e:44:53:23:99:0c:9f:7f:1a:97:df:9e:
55:10:dd:a4:71:32:79:98:81:d6:3c:63:c0:34:69:9d:0f:bd:
cd:a8:67:e6:74:b9:eb:4a:31:e8:77:2b:f1:46:b7:88:20:d8:
85:d8:be:3c:57:be:60:72:37:9a:15:b3:9e:e2:c2:a8:85:75:
e7:e0:a6:d8:9c:d6:d2:df:a8:b8:ba:a5:13:90:94:1f:b4:0a:
24:16:0e:8c:3c:25:a4:93:47:fc:1b:13:40:b3:a0:59:0a:18:
b8:1b:bd:c4
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgISAZf6h7w2y5IMz5YiC9/ktUpqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNzExMTcyODA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDU4ODZhNDRiMjQ2YWYxODUxZjc3N2JiZTc3MWYxMjI0ZmE5YzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ+dX5OJ0SlpVmE9fzaFLJ4LTECa
QNT9jHQGmrKmGcjm75AFgdx804cj8RWynSWpATzcR5yBh4y7MKWPT6K7qhwGNljp
2O5o54qn2VAJLJybaHK928iicRB0zgOR6Tccba9hVfWq5ti8UNLI8uP+Y4umqEFc
Gk2+S+vA/IIJZrjaHROWyyrZJTMO8DhrWc9Aqo3mqu7E7O5XoN6U7DegPFCHojh3
Ep3knXTAZZ0TbN5+ilHP9FvcFPc4VYsvUUK9LFG5km/XYzniWy2mwiRijZ0uGezH
XCK4q6934h1yL2EyAZnJwhu9TArV8wuHCGAhhvk2c9aQ5dNznrVsN8eUEQIDAQAB
o4ICMjCCAi4wHQYDVR0OBBYEFERYhqRLJGrxhR93e753HxIk+pyQMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvUkZpR3BFc2thdkdGSDNkN3ZuY2ZFaVQ2bkpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAkBAIAATAeAwQABebOAwQA
BebcAwQABedXAwQABefIAwQAuQ2eMA8EAgACMAkDBwAqAi/AAA8wDQYJKoZIhvcN
AQELBQADggEBABUn/weH3LA9HLIqCcdz2zZNzVzTG/B5gDnkR7RRgwM1SRaiQZ07
paiBNypHxsje4qXBoYOp6I+JBcTFRCs5T6cjNBf9m1aaQm6nkzAm2yfix5sonBPR
aJMIVWoLYWZctCUaSaW/TOSJ28dp9bYduHoJZT70AALFuGauBz+VS+TsIu/kuZpq
dgSPTv9ZlgtFsTfQXcrwrI5EUyOZDJ9/GpffnlUQ3aRxMnmYgdY8Y8A0aZ0Pvc2o
Z+Z0uetKMeh3K/FGt4gg2IXYvjxXvmByN5oVs57iwqiFdefgptic1tLfqLi6pROQ
lB+0CiQWDow8JaSTR/wbE0CzoFkKGLgbvcQ=
-----END CERTIFICATE-----
Generated at Mon Jul 21 18:14:30 2025 by rpki-client