Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/Eyl6D1p4n0VHPUyhqtf9q1r7P-U.roa
File: Eyl6D1p4n0VHPUyhqtf9q1r7P-U.roa (raw, json)
Hash identifier: AJljk4RDZMGUwTiNJjyxL7FYd8yG0UHEsMYJD6D2QC4=
Subject key identifier: 13:29:7A:0F:5A:78:9F:45:47:3D:4C:A1:AA:D7:FD:AB:5A:FB:3F:E5
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 019A5E0EC8C4AFDDAE2F45063E952FBD8FA0
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/Eyl6D1p4n0VHPUyhqtf9q1r7P-U.roa
Signing time: Fri 07 Nov 2025 11:23:38 +0000
ROA not before: Fri 07 Nov 2025 11:23:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49394
IP address blocks: 45.136.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5e:0e:c8:c4:af:dd:ae:2f:45:06:3e:95:2f:bd:8f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: Nov 7 11:23:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13297a0f5a789f45473d4ca1aad7fdab5afb3fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2d:94:b0:a0:43:0c:b2:9f:c4:75:0b:4d:37:
b4:83:ca:14:c2:41:75:93:2c:47:33:df:4d:50:6a:
b0:e5:bd:34:c5:29:c3:55:b5:d2:91:fd:36:f6:57:
ad:9f:73:97:33:d9:5f:04:a4:ee:bc:6e:af:0c:44:
5a:78:57:a4:a5:09:f2:0d:e8:de:90:22:da:e5:ff:
a2:2f:4f:10:9d:2a:ff:45:77:77:29:1f:08:4f:e0:
9a:81:d1:4d:a8:12:83:2c:1e:b8:8a:05:f9:20:64:
4b:45:bf:f0:b1:9d:72:67:65:31:f5:15:77:eb:35:
55:9f:40:24:33:a8:7e:eb:d2:e0:ab:9a:7b:82:2e:
c7:da:e0:e1:f0:4a:b9:3f:d4:79:8e:4a:da:82:a3:
5c:15:7a:53:0c:c0:c3:bf:d6:ea:a5:2a:82:d3:00:
00:12:83:d0:5c:98:e8:df:dd:e0:1a:74:40:94:4e:
b4:6d:50:d4:41:3a:8a:ad:bf:8b:e4:4d:a3:47:04:
53:dd:21:33:f1:6c:15:87:70:d9:2e:b5:ce:2c:de:
04:90:8d:4d:9d:ae:69:1a:42:fc:22:9e:bf:f0:7b:
c3:c6:17:8c:d2:fc:55:a5:b1:9c:c2:77:86:35:fa:
33:8e:6b:e0:06:c2:03:17:f5:96:ad:2d:2c:b4:d9:
1b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:29:7A:0F:5A:78:9F:45:47:3D:4C:A1:AA:D7:FD:AB:5A:FB:3F:E5
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/Eyl6D1p4n0VHPUyhqtf9q1r7P-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.145.0/24
Signature Algorithm: sha256WithRSAEncryption
19:c7:9e:cc:91:e6:51:c5:14:f5:77:4d:dd:43:a6:1a:13:e1:
d3:98:f9:cc:18:cd:2e:22:06:1c:c7:b2:fc:d5:4f:00:28:cb:
21:47:e1:29:f0:26:17:1f:07:1b:b1:14:70:3f:ae:15:11:99:
74:63:75:59:c9:0a:9a:26:e7:7f:60:fd:51:58:62:cf:9e:f9:
ac:68:39:3d:25:08:45:d9:a4:16:e1:54:43:2c:22:3c:3e:29:
19:e5:32:03:ba:87:eb:31:ef:3c:92:51:72:93:f3:fe:5b:5f:
f2:2d:45:93:3e:7c:7f:8b:5a:59:99:31:75:1f:63:d3:2e:74:
11:03:0c:10:f9:a7:d5:32:9b:9d:75:e1:f6:03:31:3c:6e:db:
5e:54:9a:2e:04:96:c7:14:9a:70:69:48:f6:27:e6:b1:11:6d:
fe:fe:95:d3:2a:e6:ee:c0:a4:e8:93:48:90:de:d6:e2:73:a9:
d0:68:b2:00:82:69:b5:ba:00:5c:b4:a6:a3:e5:aa:ad:ea:fb:
5c:b9:d5:6e:6c:67:29:9a:ca:00:ec:b5:a2:36:28:aa:a9:49:
2a:7e:6d:36:f0:de:97:63:68:f9:5c:c0:22:a9:c7:8c:d0:17:
8e:1a:5a:12:a7:b8:27:ce:13:cc:11:73:63:8b:8d:05:6e:ce:
4b:d4:9d:38
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZpeDsjEr92uL0UGPpUvvY+gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NWExZGExY2IxYzkyMGFlMmY5Yjc0ODI3MGZkZWQ4NzM3
YTkxODQwHhcNMjUxMTA3MTEyMzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzI5N2EwZjVhNzg5ZjQ1NDczZDRjYTFhYWQ3ZmRhYjVhZmIzZmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS2UsKBDDLKfxHULTTe0g8oUwkF1
kyxHM99NUGqw5b00xSnDVbXSkf029letn3OXM9lfBKTuvG6vDERaeFekpQnyDeje
kCLa5f+iL08QnSr/RXd3KR8IT+CagdFNqBKDLB64igX5IGRLRb/wsZ1yZ2Ux9RV3
6zVVn0AkM6h+69Lgq5p7gi7H2uDh8Eq5P9R5jkragqNcFXpTDMDDv9bqpSqC0wAA
EoPQXJjo393gGnRAlE60bVDUQTqKrb+L5E2jRwRT3SEz8WwVh3DZLrXOLN4EkI1N
na5pGkL8Ip6/8HvDxheM0vxVpbGcwneGNfozjmvgBsIDF/WWrS0stNkb9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBMpeg9aeJ9FRz1MoarX/ata+z/lMB8GA1UdIwQY
MBaAFMZaHaHLHJIK4vm3SCcP3thzepGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAt
MzZiYWM4ZDkxZTJlLzEvRXlsNkQxcDRuMFZIUFV5aHF0ZjlxMXI3UC1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAtMzZiYWM4ZDkxZTJl
LzEveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYiRMA0G
CSqGSIb3DQEBCwUAA4IBAQAZx57MkeZRxRT1d03dQ6YaE+HTmPnMGM0uIgYcx7L8
1U8AKMshR+Ep8CYXHwcbsRRwP64VEZl0Y3VZyQqaJud/YP1RWGLPnvmsaDk9JQhF
2aQW4VRDLCI8PikZ5TIDuofrMe88klFyk/P+W1/yLUWTPnx/i1pZmTF1H2PTLnQR
AwwQ+afVMpuddeH2AzE8btteVJouBJbHFJpwaUj2J+axEW3+/pXTKubuwKTok0iQ
3tbic6nQaLIAgmm1ugBctKaj5aqt6vtcudVubGcpmsoA7LWiNiiqqUkqfm028N6X
Y2j5XMAiqceM0BeOGloSp7gnzhPMEXNji40Fbs5L1J04
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:56:42 2025 by rpki-client