Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/5UBdfwa59JnO3TC0RbPoMbXcwMI.roa
File: 5UBdfwa59JnO3TC0RbPoMbXcwMI.roa (raw, json)
Hash identifier: BXAoKRzIsnGpyUD97PKhyGWEISH1mZLvzMgOl4ru7To=
Subject key identifier: E5:40:5D:7F:06:B9:F4:99:CE:DD:30:B4:45:B3:E8:31:B5:DC:C0:C2
Certificate issuer: /CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6
Certificate serial: 019807E9A2626A962C0741836585956ED742
Authority key identifier: 94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/5UBdfwa59JnO3TC0RbPoMbXcwMI.roa
Signing time: Mon 14 Jul 2025 07:50:08 +0000
ROA not before: Mon 14 Jul 2025 07:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212745
IP address blocks: 45.81.228.0/22 maxlen: 22
2a0e:6080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:07:e9:a2:62:6a:96:2c:07:41:83:65:85:95:6e:d7:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6
Validity
Not Before: Jul 14 07:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5405d7f06b9f499cedd30b445b3e831b5dcc0c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8b:8a:a9:40:f6:17:97:7f:fc:59:85:7d:9e:
cf:01:8d:0b:7d:7a:d4:b6:f6:4c:e2:08:d5:8d:ed:
32:cf:70:54:bf:0f:9c:c5:f5:f9:e2:b2:b0:85:59:
2a:90:f6:12:5a:e5:ba:38:39:47:63:dd:22:c5:4d:
75:15:4b:29:ea:73:77:94:24:9d:cd:69:42:09:e5:
0d:c7:d9:bb:2f:cc:50:84:0a:af:1b:ed:59:5e:09:
d6:48:d8:ef:a7:40:89:cd:fb:cc:f3:80:19:78:e4:
79:d2:c8:d0:b2:8d:b6:d2:e0:b6:77:70:cf:53:13:
ed:5a:0c:0f:fc:a6:3e:ca:be:77:c4:dc:70:0d:e7:
12:9a:60:c6:94:80:40:06:40:0f:59:b0:66:4c:be:
33:e7:61:45:66:d6:2c:3a:7b:25:00:7d:6c:f0:c4:
74:8f:1c:ed:75:e4:5e:d0:0f:23:22:c5:d1:bb:c5:
9c:2e:96:dc:be:4b:6f:f7:06:89:cc:29:f6:64:08:
65:da:0c:22:78:f3:06:b5:c0:00:a4:fe:14:2d:17:
dd:cc:aa:3e:23:a2:1e:78:ff:86:03:0c:83:4b:8a:
34:bc:54:c3:25:14:9d:7c:6b:c1:c2:67:66:af:a2:
6d:f0:77:88:36:0d:45:22:d8:eb:5a:24:a5:2f:78:
67:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:40:5D:7F:06:B9:F4:99:CE:DD:30:B4:45:B3:E8:31:B5:DC:C0:C2
X509v3 Authority Key Identifier:
keyid:94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/5UBdfwa59JnO3TC0RbPoMbXcwMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.228.0/22
IPv6:
2a0e:6080::/48
Signature Algorithm: sha256WithRSAEncryption
65:e9:d5:db:3c:01:56:c8:78:9b:5e:d0:72:76:05:e7:f3:ff:
ef:e8:8e:e4:61:a4:f9:ba:70:fa:b9:b0:97:7c:1d:e1:db:b8:
44:04:b2:14:21:6e:92:3f:7d:5b:f0:b9:b0:3c:a1:83:a8:f4:
b0:5e:75:80:84:ff:80:db:82:c9:f4:e2:c2:80:3f:2c:b1:ee:
2d:35:c3:b0:67:7f:16:44:1d:d7:52:33:80:92:9c:90:86:fc:
87:63:1a:59:42:9a:65:77:b9:89:af:37:a8:1a:c4:17:c2:29:
8e:34:67:1c:3c:cc:f2:03:05:be:99:d6:be:83:c8:d4:68:db:
90:6e:af:1c:ef:13:2a:08:01:e5:bb:22:94:8a:fd:77:6d:18:
4f:2a:30:37:3d:ad:a1:d4:8f:79:f7:39:07:96:ff:ae:73:2a:
cb:80:b3:9a:7c:e8:5f:ce:9f:41:7d:5b:07:be:5c:21:95:83:
8e:ae:de:bc:9f:b2:48:ed:29:b4:51:ee:f9:81:6e:e7:01:fd:
0f:1b:1e:6d:d6:e4:54:4a:65:ba:97:bb:be:c1:a7:65:aa:a7:
e3:94:67:ac:a5:a1:9f:43:ba:1d:d6:f8:65:c4:01:46:54:92:
ca:24:e7:a9:ad:47:0c:c6:cf:31:fe:69:77:70:56:b9:50:01:
e5:35:50:b5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZgH6aJiapYsB0GDZYWVbtdCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0OGQ0NWNmZTM0ODJiOGY2MWRhZTAwMGIwMDdhNDY3ZWNk
ZDRlZTYwHhcNMjUwNzE0MDc1MDA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTQwNWQ3ZjA2YjlmNDk5Y2VkZDMwYjQ0NWIzZTgzMWI1ZGNjMGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsouKqUD2F5d//FmFfZ7PAY0LfXrU
tvZM4gjVje0yz3BUvw+cxfX54rKwhVkqkPYSWuW6ODlHY90ixU11FUsp6nN3lCSd
zWlCCeUNx9m7L8xQhAqvG+1ZXgnWSNjvp0CJzfvM84AZeOR50sjQso220uC2d3DP
UxPtWgwP/KY+yr53xNxwDecSmmDGlIBABkAPWbBmTL4z52FFZtYsOnslAH1s8MR0
jxztdeRe0A8jIsXRu8WcLpbcvktv9waJzCn2ZAhl2gwiePMGtcAApP4ULRfdzKo+
I6IeeP+GAwyDS4o0vFTDJRSdfGvBwmdmr6Jt8HeINg1FItjrWiSlL3hnNwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOVAXX8GufSZzt0wtEWz6DG13MDCMB8GA1UdIwQY
MBaAFJSNRc/jSCuPYdrgALAHpGfs3U7mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEkxRnotTklLNDloMnVBQXNBZWtaLXpkVHVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mODliMmUtNTNhMy00MTU3LWE5NjAt
NDJkYWZiNGI1MWQyLzEvNVVCZGZ3YTU5Sm5PM1RDMFJiUG9NYlhjd01JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9mODliMmUtNTNhMy00MTU3LWE5NjAtNDJkYWZiNGI1MWQy
LzEvbEkxRnotTklLNDloMnVBQXNBZWtaLXpkVHVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCLVHkMA8E
AgACMAkDBwAqDmCAAAAwDQYJKoZIhvcNAQELBQADggEBAGXp1ds8AVbIeJte0HJ2
Befz/+/ojuRhpPm6cPq5sJd8HeHbuEQEshQhbpI/fVvwubA8oYOo9LBedYCE/4Db
gsn04sKAPyyx7i01w7BnfxZEHddSM4CSnJCG/IdjGllCmmV3uYmvN6gaxBfCKY40
Zxw8zPIDBb6Z1r6DyNRo25BurxzvEyoIAeW7IpSK/XdtGE8qMDc9raHUj3n3OQeW
/65zKsuAs5p86F/On0F9Wwe+XCGVg46u3ryfskjtKbRR7vmBbucB/Q8bHm3W5FRK
ZbqXu77Bp2Wqp+OUZ6yloZ9Duh3W+GXEAUZUksok56mtRwzGzzH+aXdwVrlQAeU1
ULU=
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:10:53 2025 by rpki-client