Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/buR4TPWaEvZmSaHjEVuJO7ExqE0.roa
File: buR4TPWaEvZmSaHjEVuJO7ExqE0.roa (raw, json)
Hash identifier: 9cbnEnTUUg1xL6BA2nvODgGBGHUDezZ6UANBKDc1d3U=
Subject key identifier: 6E:E4:78:4C:F5:9A:12:F6:66:49:A1:E3:11:5B:89:3B:B1:31:A8:4D
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01980C612220131C234D4D003F0AC41B2FCC
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/buR4TPWaEvZmSaHjEVuJO7ExqE0.roa
Signing time: Tue 15 Jul 2025 04:39:09 +0000
ROA not before: Tue 15 Jul 2025 04:39:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49581
IP address blocks: 5.231.26.0/24 maxlen: 24
5.231.105.0/24 maxlen: 24
89.106.69.0/24 maxlen: 24
89.106.71.0/24 maxlen: 24
2a02:2fc0:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0c:61:22:20:13:1c:23:4d:4d:00:3f:0a:c4:1b:2f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 15 04:39:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ee4784cf59a12f66649a1e3115b893bb131a84d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e4:b8:29:5e:32:b0:bc:60:d2:f3:23:44:c0:
06:ef:71:d6:cc:a3:54:a8:bf:43:f4:b5:91:4f:f2:
2a:4a:6c:42:8d:b4:0e:8a:28:e1:f8:83:6a:c7:8f:
da:17:ae:2c:f4:ec:2b:e3:0c:03:62:62:ee:63:c6:
75:b7:bd:59:94:53:b6:79:5f:4a:ff:e4:7d:4f:ec:
1f:fc:c6:1c:07:d1:bb:b5:5d:fd:26:ea:28:3c:b6:
dc:40:e1:b3:ab:a5:b2:c3:a1:6c:93:00:c6:ad:97:
7a:f2:1f:ba:8a:82:1d:f3:55:a5:ab:fa:a5:1f:d0:
38:9d:6a:48:d6:c9:b0:37:96:ac:89:11:4d:5e:b1:
c1:9d:b6:60:bd:fc:18:f1:d4:82:02:72:65:93:3a:
c4:6d:4b:6a:1f:09:84:4f:a2:ab:f2:8d:7a:f5:7f:
08:8d:f1:ed:5d:34:7f:fb:9a:bd:af:f8:98:37:46:
06:56:7b:d3:c1:e0:67:d3:5c:5e:3c:60:23:6f:10:
44:1f:42:21:4d:9e:6a:6a:3a:14:32:1e:60:64:71:
61:87:43:b9:08:54:05:fe:51:0f:98:54:f2:12:f8:
cf:bb:f6:e5:9c:43:0e:8d:d5:96:46:60:bd:dd:1e:
9d:9e:06:89:15:50:b0:5d:8f:39:fa:39:8d:95:46:
fd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E4:78:4C:F5:9A:12:F6:66:49:A1:E3:11:5B:89:3B:B1:31:A8:4D
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/buR4TPWaEvZmSaHjEVuJO7ExqE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.26.0/24
5.231.105.0/24
89.106.69.0/24
89.106.71.0/24
IPv6:
2a02:2fc0:11::/48
Signature Algorithm: sha256WithRSAEncryption
32:47:d0:91:d2:f3:f1:c6:af:1a:6b:91:38:bc:17:40:6e:dc:
2c:a2:b5:da:3f:a3:66:91:50:45:75:4e:37:00:15:0c:5d:42:
11:7d:bf:3e:bc:97:6b:c9:1b:ce:e8:ee:c9:3e:bf:0e:1b:10:
72:2d:69:72:40:d1:89:85:8a:20:46:94:27:c8:63:e7:eb:cd:
05:7c:2b:f5:90:2f:a0:10:a8:8f:7e:20:cf:f4:07:5b:0e:ea:
db:0a:d3:49:cc:60:5e:ab:34:22:19:a6:5f:1b:68:35:c3:7e:
eb:16:91:cc:6e:a5:d2:6b:51:7b:74:af:77:9c:4c:1e:11:59:
6b:35:a8:7b:3d:94:ee:c5:5f:8b:99:34:64:b0:c8:2b:db:ad:
7f:db:98:d3:10:08:5e:ce:65:c2:43:36:4c:cc:32:04:5a:ca:
90:46:b4:9d:d9:dd:3a:12:42:de:5b:55:ca:a0:81:ff:1c:b9:
6b:2d:86:81:fe:61:3a:8e:ad:f0:a9:8b:cd:42:8a:09:48:73:
97:2b:c8:0e:10:e7:54:90:d8:98:ff:49:c3:5b:2e:12:05:1e:
f4:5b:98:61:31:d3:d5:f7:20:92:3a:f9:0a:08:de:01:1f:bc:
76:25:2b:a1:b7:21:4a:20:49:31:3b:69:c2:15:87:80:8b:0a:
70:5c:81:35
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAZgMYSIgExwjTU0APwrEGy/MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNzE1MDQzOTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZWU0Nzg0Y2Y1OWExMmY2NjY0OWExZTMxMTViODkzYmIxMzFhODRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+S4KV4ysLxg0vMjRMAG73HWzKNU
qL9D9LWRT/IqSmxCjbQOiijh+INqx4/aF64s9Owr4wwDYmLuY8Z1t71ZlFO2eV9K
/+R9T+wf/MYcB9G7tV39JuooPLbcQOGzq6Wyw6FskwDGrZd68h+6ioId81Wlq/ql
H9A4nWpI1smwN5asiRFNXrHBnbZgvfwY8dSCAnJlkzrEbUtqHwmET6Kr8o169X8I
jfHtXTR/+5q9r/iYN0YGVnvTweBn01xePGAjbxBEH0IhTZ5qajoUMh5gZHFhh0O5
CFQF/lEPmFTyEvjPu/blnEMOjdWWRmC93R6dngaJFVCwXY85+jmNlUb9awIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFG7keEz1mhL2Zkmh4xFbiTuxMahNMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvYnVSNFRQV2FFdlptU2FIakVWdUpPN0V4cUUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQABecaAwQA
BedpAwQAWWpFAwQAWWpHMA8EAgACMAkDBwAqAi/AABEwDQYJKoZIhvcNAQELBQAD
ggEBADJH0JHS8/HGrxprkTi8F0Bu3Cyitdo/o2aRUEV1TjcAFQxdQhF9vz68l2vJ
G87o7sk+vw4bEHItaXJA0YmFiiBGlCfIY+frzQV8K/WQL6AQqI9+IM/0B1sO6tsK
00nMYF6rNCIZpl8baDXDfusWkcxupdJrUXt0r3ecTB4RWWs1qHs9lO7FX4uZNGSw
yCvbrX/bmNMQCF7OZcJDNkzMMgRaypBGtJ3Z3ToSQt5bVcqggf8cuWsthoH+YTqO
rfCpi81CiglIc5cryA4Q51SQ2Jj/ScNbLhIFHvRbmGEx09X3IJI6+QoI3gEfvHYl
K6G3IUogSTE7acIVh4CLCnBcgTU=
-----END CERTIFICATE-----
Generated at Sun Jul 20 22:12:59 2025 by rpki-client