Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wBlDO0XVVxY2kULafqkAwtj1tUE.roa
File: wBlDO0XVVxY2kULafqkAwtj1tUE.roa (raw, json)
Hash identifier: 3kW6YoTec6Ypo5r21JkOz8Me0aIVxsAWP7+JqE2Ghbs=
Subject key identifier: C0:19:43:3B:45:D5:57:16:36:91:42:DA:7E:A9:00:C2:D8:F5:B5:41
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01994E6093AB7893ADE916E32BF993040A07
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wBlDO0XVVxY2kULafqkAwtj1tUE.roa
Signing time: Mon 15 Sep 2025 17:16:16 +0000
ROA not before: Mon 15 Sep 2025 17:16:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53388
IP address blocks: 5.231.59.0/24 maxlen: 24
89.106.82.0/24 maxlen: 24
94.103.166.0/24 maxlen: 24
185.47.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 17:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4e:60:93:ab:78:93:ad:e9:16:e3:2b:f9:93:04:0a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 15 17:16:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c019433b45d55716369142da7ea900c2d8f5b541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:36:9a:f5:07:af:99:17:d0:78:40:ad:be:17:
de:1d:c0:10:3e:83:83:da:0a:57:4b:76:e5:4f:31:
2a:7b:b9:67:bf:1a:63:08:4a:5a:34:1e:86:7c:42:
eb:d5:db:54:49:34:ea:9c:dc:83:3d:6d:12:86:7c:
6c:35:4a:4d:5b:32:00:84:64:df:e5:be:0a:0c:e0:
3a:31:94:0c:65:24:94:be:1c:14:57:1d:a8:f3:ab:
a7:da:4e:ee:f2:0d:a6:76:47:c3:82:72:b7:08:dd:
6e:66:f7:db:1f:2f:70:16:c1:6e:70:49:2c:8a:bb:
0d:4d:3c:3c:cb:c9:96:b9:64:4b:9b:8c:88:9b:e1:
6f:b7:84:90:ee:ac:f9:4b:3d:ea:80:48:80:8f:3f:
22:5e:c5:7f:94:ff:a8:a7:cc:14:f8:a8:d2:c3:96:
24:ea:7a:ed:64:b1:0c:6a:fe:52:15:80:c2:89:42:
e9:b6:ec:a8:7d:75:f7:90:37:a5:c9:09:7d:00:6b:
34:5f:7f:a5:ef:34:74:46:6f:f2:c4:5c:7d:73:94:
b5:10:5f:61:65:88:8d:c1:22:54:93:54:b0:da:d5:
a1:eb:c4:03:2b:6c:e4:cf:88:04:64:f5:31:4d:8d:
62:4a:6c:4c:48:75:31:1a:a1:8c:c2:38:55:d6:a1:
8f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:19:43:3B:45:D5:57:16:36:91:42:DA:7E:A9:00:C2:D8:F5:B5:41
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wBlDO0XVVxY2kULafqkAwtj1tUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.59.0/24
89.106.82.0/24
94.103.166.0/24
185.47.143.0/24
Signature Algorithm: sha256WithRSAEncryption
60:1e:0a:d0:bb:a7:a9:3c:dc:11:74:52:a6:3b:e4:b1:70:0b:
7a:5e:e4:75:5f:c2:78:f0:40:4b:d4:f5:76:a7:13:69:a8:ef:
82:4d:3a:0b:6c:09:54:8a:36:b7:02:a7:5d:e0:48:d5:c1:9e:
0c:6c:04:85:ec:bd:14:9e:d9:08:e0:fe:db:d4:60:a3:8e:ce:
83:35:f5:43:d1:d8:29:b5:64:cb:8d:41:46:3a:26:60:30:ed:
bd:3e:90:39:f2:64:2b:29:5d:20:4a:8a:c3:af:8c:72:c8:2c:
72:96:8d:40:88:5f:0b:a4:40:d8:8f:a7:d3:84:d3:c1:32:ec:
0c:0b:d7:74:96:5a:71:44:7b:e9:91:ce:92:cd:80:58:60:9b:
6d:80:ba:43:93:91:30:ef:a4:e6:ea:7e:7f:34:ea:35:16:0b:
a9:1e:3c:3a:35:b3:15:4d:f4:72:7a:6c:3a:33:60:1f:db:44:
46:c4:91:1c:76:0b:23:bb:ab:04:b8:7f:dd:9d:2e:f4:52:92:
38:4c:44:22:4c:71:e2:93:59:6e:d4:d7:38:63:46:34:d3:e2:
25:23:ac:40:8d:fd:d5:ed:84:96:fc:c1:cb:3c:94:57:35:fd:
8f:9f:23:c6:38:94:0d:9d:a1:f6:f0:5a:eb:78:d8:eb:5e:d6:
fa:4e:e7:94
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZlOYJOreJOt6RbjK/mTBAoHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwOTE1MTcxNjE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDE5NDMzYjQ1ZDU1NzE2MzY5MTQyZGE3ZWE5MDBjMmQ4ZjViNTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujaa9QevmRfQeECtvhfeHcAQPoOD
2gpXS3blTzEqe7lnvxpjCEpaNB6GfELr1dtUSTTqnNyDPW0ShnxsNUpNWzIAhGTf
5b4KDOA6MZQMZSSUvhwUVx2o86un2k7u8g2mdkfDgnK3CN1uZvfbHy9wFsFucEks
irsNTTw8y8mWuWRLm4yIm+Fvt4SQ7qz5Sz3qgEiAjz8iXsV/lP+op8wU+KjSw5Yk
6nrtZLEMav5SFYDCiULptuyofXX3kDelyQl9AGs0X3+l7zR0Rm/yxFx9c5S1EF9h
ZYiNwSJUk1Sw2tWh68QDK2zkz4gEZPUxTY1iSmxMSHUxGqGMwjhV1qGPswIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFMAZQztF1VcWNpFC2n6pAMLY9bVBMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvd0JsRE8wWFZWeFkya1VMYWZxa0F3dGoxdFVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABec7AwQA
WWpSAwQAXmemAwQAuS+PMA0GCSqGSIb3DQEBCwUAA4IBAQBgHgrQu6epPNwRdFKm
O+SxcAt6XuR1X8J48EBL1PV2pxNpqO+CTToLbAlUija3Aqdd4EjVwZ4MbASF7L0U
ntkI4P7b1GCjjs6DNfVD0dgptWTLjUFGOiZgMO29PpA58mQrKV0gSorDr4xyyCxy
lo1AiF8LpEDYj6fThNPBMuwMC9d0llpxRHvpkc6SzYBYYJttgLpDk5Ew76Tm6n5/
NOo1FgupHjw6NbMVTfRyemw6M2Af20RGxJEcdgsju6sEuH/dnS70UpI4TEQiTHHi
k1lu1Nc4Y0Y00+IlI6xAjf3V7YSW/MHLPJRXNf2PnyPGOJQNnaH28FrreNjrXtb6
TueU
-----END CERTIFICATE-----
Generated at Mon Sep 15 23:47:25 2025 by rpki-client