Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/DNKfYMLP9Xm_WjVzpKO7q84QzXw.roa
File: DNKfYMLP9Xm_WjVzpKO7q84QzXw.roa (raw, json)
Hash identifier: 5tBAqqFCun3qMuyt3hnlLRBwJNJimso2u+1bTRY1BKk=
Subject key identifier: 0C:D2:9F:60:C2:CF:F5:79:BF:5A:35:73:A4:A3:BB:AB:CE:10:CD:7C
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019811EB4939341EA5B2168359313D3D663C
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/DNKfYMLP9Xm_WjVzpKO7q84QzXw.roa
Signing time: Wed 16 Jul 2025 06:28:09 +0000
ROA not before: Wed 16 Jul 2025 06:28:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212683
IP address blocks: 5.182.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:11:eb:49:39:34:1e:a5:b2:16:83:59:31:3d:3d:66:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 16 06:28:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cd29f60c2cff579bf5a3573a4a3bbabce10cd7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:49:3f:82:f6:e4:97:c6:89:39:69:98:18:f9:
fa:ba:a5:99:2a:32:bb:33:3f:57:48:74:c0:fd:11:
08:78:ec:d7:66:36:be:2d:6d:e6:98:3c:19:61:34:
1c:8b:ca:59:34:05:ad:df:e4:e3:b5:31:ec:10:7d:
0c:a9:8e:78:e5:be:05:70:41:71:bc:54:ab:12:0b:
08:11:a4:d7:a0:57:d1:03:21:7c:07:ce:a6:4a:82:
17:44:06:cd:41:0c:57:35:4f:bc:16:75:e2:2b:5e:
ba:6d:35:ac:f1:a0:8e:5b:7a:a5:82:c1:9f:82:e2:
77:12:23:50:2b:2a:9d:62:44:07:7b:d7:b3:5a:c0:
b8:0f:f4:83:69:47:a1:f1:d0:9c:5e:c3:b9:6b:ce:
01:b5:58:03:23:93:10:18:86:2b:d8:60:82:2b:c2:
f2:07:27:f4:d6:ba:52:6c:ef:80:24:ca:4e:d6:9e:
5d:28:22:e0:41:b9:9a:53:57:65:36:ec:2a:e6:06:
e8:0b:cb:b8:b8:38:47:0a:06:f1:6b:96:6a:4c:22:
0c:56:64:24:45:ef:0a:16:65:d6:18:ac:8d:38:93:
31:dc:f2:6e:63:81:c8:45:89:70:28:bc:d9:9d:2f:
6b:57:15:8c:ed:26:25:36:76:3d:54:b9:7c:d0:65:
8c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D2:9F:60:C2:CF:F5:79:BF:5A:35:73:A4:A3:BB:AB:CE:10:CD:7C
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/DNKfYMLP9Xm_WjVzpKO7q84QzXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.115.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:31:d6:b0:ca:41:0c:fd:4d:7a:b9:9d:f8:37:41:be:fa:43:
97:74:7e:2b:a7:c5:f0:24:56:c8:70:41:52:23:72:59:55:0e:
97:b6:08:ba:98:c7:6c:b3:43:b7:a7:68:32:17:bc:69:63:20:
29:bc:ee:a2:57:c0:94:63:30:02:fd:bd:3a:95:9e:34:b9:c0:
7b:6c:26:28:22:20:03:77:e1:b9:b3:98:2b:3b:20:29:66:84:
b0:15:3b:e4:ce:6c:1f:63:9a:4a:97:a2:35:28:29:eb:b1:04:
56:97:9b:73:36:03:fb:8c:60:f3:bd:8b:1a:70:a8:53:f3:c6:
79:9d:fc:98:22:97:db:b6:e6:cf:a3:5a:92:bd:aa:a4:26:fc:
c6:d5:41:6e:24:0e:f7:14:e5:ed:85:9c:9d:81:71:3b:0e:21:
59:f0:32:69:a0:c5:ce:4a:05:85:04:e8:c1:2c:d8:d8:a9:6b:
18:5c:f2:d3:23:f0:d6:da:34:fc:b2:4c:77:bf:52:58:64:eb:
6d:c7:d6:b4:a7:03:77:0f:4d:23:8d:bf:7c:67:d2:2b:c5:09:
df:92:ef:c2:8f:4a:7c:de:1e:4d:dd:a9:f1:d7:2c:1c:e0:42:
3c:12:68:81:b5:9f:2a:ec:0c:4d:f1:07:34:5b:21:d5:65:85:
d7:3e:47:02
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZgR60k5NB6lshaDWTE9PWY8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjUwNzE2MDYyODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwY2QyOWY2MGMyY2ZmNTc5YmY1YTM1NzNhNGEzYmJhYmNlMTBjZDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Uk/gvbkl8aJOWmYGPn6uqWZKjK7
Mz9XSHTA/REIeOzXZja+LW3mmDwZYTQci8pZNAWt3+TjtTHsEH0MqY545b4FcEFx
vFSrEgsIEaTXoFfRAyF8B86mSoIXRAbNQQxXNU+8FnXiK166bTWs8aCOW3qlgsGf
guJ3EiNQKyqdYkQHe9ezWsC4D/SDaUeh8dCcXsO5a84BtVgDI5MQGIYr2GCCK8Ly
Byf01rpSbO+AJMpO1p5dKCLgQbmaU1dlNuwq5gboC8u4uDhHCgbxa5ZqTCIMVmQk
Re8KFmXWGKyNOJMx3PJuY4HIRYlwKLzZnS9rVxWM7SYlNnY9VLl80GWM0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAzSn2DCz/V5v1o1c6Sju6vOEM18MB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvRE5LZllNTFA5WG1fV2pWenBLTzdxODRRelh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbZzMA0G
CSqGSIb3DQEBCwUAA4IBAQC9MdawykEM/U16uZ34N0G++kOXdH4rp8XwJFbIcEFS
I3JZVQ6Xtgi6mMdss0O3p2gyF7xpYyApvO6iV8CUYzAC/b06lZ40ucB7bCYoIiAD
d+G5s5grOyApZoSwFTvkzmwfY5pKl6I1KCnrsQRWl5tzNgP7jGDzvYsacKhT88Z5
nfyYIpfbtubPo1qSvaqkJvzG1UFuJA73FOXthZydgXE7DiFZ8DJpoMXOSgWFBOjB
LNjYqWsYXPLTI/DW2jT8skx3v1JYZOttx9a0pwN3D00jjb98Z9IrxQnfku/Cj0p8
3h5N3anx1ywc4EI8EmiBtZ8q7AxN8Qc0WyHVZYXXPkcC
-----END CERTIFICATE-----
Generated at Sun Jul 20 20:34:11 2025 by rpki-client