Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tLtnrVZRucrYccp0WusPehtLDoc.roa
File: tLtnrVZRucrYccp0WusPehtLDoc.roa (raw, json)
Hash identifier: z4J54RwnrvzdQE1FM4HWOr8/O5e4nRvVyNB1ZRssgX4=
Subject key identifier: B4:BB:67:AD:56:51:B9:CA:D8:71:CA:74:5A:EB:0F:7A:1B:4B:0E:87
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0198FE71F1213CF1ADEEBDAF2BC17C779EA4
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tLtnrVZRucrYccp0WusPehtLDoc.roa
Signing time: Sun 31 Aug 2025 04:45:36 +0000
ROA not before: Sun 31 Aug 2025 04:45:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47263
IP address blocks: 5.231.20.0/23 maxlen: 23
5.231.20.0/24 maxlen: 24
5.231.21.0/24 maxlen: 24
5.231.47.0/24 maxlen: 24
77.90.37.0/24 maxlen: 24
94.103.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:fe:71:f1:21:3c:f1:ad:ee:bd:af:2b:c1:7c:77:9e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 31 04:45:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4bb67ad5651b9cad871ca745aeb0f7a1b4b0e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:55:c5:1c:c2:6a:c4:0c:88:1d:00:1b:0b:5e:
d4:d5:35:f4:ca:56:80:5d:ce:40:92:c0:3a:d9:c8:
05:69:83:8b:ca:71:2b:69:80:4c:85:ef:6b:9e:16:
6f:e5:50:31:25:6f:75:dc:f7:18:0d:e7:0e:59:b4:
14:b5:88:c2:32:72:28:3e:eb:64:3e:b1:50:ba:4f:
cc:46:dc:a4:7c:0b:d4:9e:fe:8a:56:91:a9:ad:e9:
43:01:70:70:56:4f:d0:84:c2:5a:66:d5:3e:de:48:
bf:95:09:e3:52:f2:8a:97:1a:0b:eb:3b:35:87:e0:
7c:46:f9:43:65:ae:cd:48:9b:c0:ef:50:ac:d0:a8:
38:80:f4:c1:4a:37:6d:fd:67:cf:8f:5f:79:f1:40:
0a:ee:d9:f1:76:f5:8c:da:0d:b4:36:74:e0:cb:61:
4f:6d:39:b6:bb:5e:87:59:00:98:6e:4c:67:3b:4d:
f2:a7:b9:63:5a:54:07:29:95:dd:6f:ef:35:e5:e1:
1a:e4:0b:d4:c3:2e:26:d8:ac:37:a8:e5:2a:b4:11:
dc:e3:4a:09:6e:ce:ae:5b:f7:35:d2:ca:a9:79:ce:
d0:4a:8e:82:0b:30:81:bf:6c:60:fc:0f:c7:f8:07:
6a:35:7a:59:87:f6:19:66:34:38:04:2d:02:a9:90:
4c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BB:67:AD:56:51:B9:CA:D8:71:CA:74:5A:EB:0F:7A:1B:4B:0E:87
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tLtnrVZRucrYccp0WusPehtLDoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.20.0/23
5.231.47.0/24
77.90.37.0/24
94.103.164.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:bf:f7:84:4f:94:9c:ac:15:01:42:53:23:0d:b3:9c:5f:9a:
81:81:42:6d:56:ae:60:f3:21:be:5c:46:a8:e0:ae:14:50:7a:
6a:8f:26:f4:6d:59:ec:d1:1e:3e:fd:18:7c:02:78:9c:e3:40:
7b:08:3e:81:dc:62:2e:58:39:af:df:88:43:c2:f8:14:1f:0a:
48:64:b7:91:b6:91:2a:3b:dd:d0:39:d6:ff:d0:3a:b8:c3:61:
e6:b8:3b:5a:94:dd:9b:7f:25:e5:db:c3:24:28:74:91:a0:16:
01:6b:fc:0f:81:e9:0e:41:3e:7d:da:2f:42:44:26:3f:66:c2:
b5:9b:b4:51:6e:95:36:cb:dc:7e:8c:d2:77:2c:eb:31:0b:43:
2e:8b:d2:a3:f0:33:b1:42:af:7e:ea:a4:65:3d:23:1a:e2:cd:
89:34:e1:c1:2e:c1:69:ae:ca:9b:7d:84:11:d6:8a:92:0a:2d:
04:33:66:7b:a5:85:e0:4f:62:34:28:dd:ec:b6:68:9d:17:50:
e5:84:b1:66:d6:cc:0a:35:61:11:bf:27:55:94:b1:76:6c:24:
42:e1:e0:2e:89:64:af:40:24:22:ad:22:d9:09:20:26:eb:ee:
5e:e9:a7:3d:68:9d:99:96:3d:0b:1a:8f:d4:06:03:d2:fb:80:
3d:ca:c5:58
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZj+cfEhPPGt7r2vK8F8d56kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwODMxMDQ0NTM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNGJiNjdhZDU2NTFiOWNhZDg3MWNhNzQ1YWViMGY3YTFiNGIwZTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1XFHMJqxAyIHQAbC17U1TX0ylaA
Xc5AksA62cgFaYOLynEraYBMhe9rnhZv5VAxJW913PcYDecOWbQUtYjCMnIoPutk
PrFQuk/MRtykfAvUnv6KVpGprelDAXBwVk/QhMJaZtU+3ki/lQnjUvKKlxoL6zs1
h+B8RvlDZa7NSJvA71Cs0Kg4gPTBSjdt/WfPj1958UAK7tnxdvWM2g20NnTgy2FP
bTm2u16HWQCYbkxnO03yp7ljWlQHKZXdb+815eEa5AvUwy4m2Kw3qOUqtBHc40oJ
bs6uW/c10sqpec7QSo6CCzCBv2xg/A/H+AdqNXpZh/YZZjQ4BC0CqZBMbwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFLS7Z61WUbnK2HHKdFrrD3obSw6HMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvdEx0bnJWWlJ1Y3JZY2NwMFd1c1BlaHRMRG9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBBecUAwQA
BecvAwQATVolAwQAXmekMA0GCSqGSIb3DQEBCwUAA4IBAQCOv/eET5ScrBUBQlMj
DbOcX5qBgUJtVq5g8yG+XEao4K4UUHpqjyb0bVns0R4+/Rh8Anic40B7CD6B3GIu
WDmv34hDwvgUHwpIZLeRtpEqO93QOdb/0Dq4w2HmuDtalN2bfyXl28MkKHSRoBYB
a/wPgekOQT592i9CRCY/ZsK1m7RRbpU2y9x+jNJ3LOsxC0Mui9Kj8DOxQq9+6qRl
PSMa4s2JNOHBLsFprsqbfYQR1oqSCi0EM2Z7pYXgT2I0KN3stmidF1DlhLFm1swK
NWERvydVlLF2bCRC4eAuiWSvQCQirSLZCSAm6+5e6ac9aJ2Zlj0LGo/UBgPS+4A9
ysVY
-----END CERTIFICATE-----
Generated at Sat Sep 6 08:05:56 2025 by rpki-client