Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/0clHE-4Ba29csc3_0DtpIs-lP7Q.roa
File: 0clHE-4Ba29csc3_0DtpIs-lP7Q.roa (raw, json)
Hash identifier: ebjxncHibwCXDJLYCM7dEjabq3YVwE6tFCcdSS8wqPA=
Subject key identifier: D1:C9:47:13:EE:01:6B:6F:5C:B1:CD:FF:D0:3B:69:22:CF:A5:3F:B4
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019A00F7EC9ADC16A61CCEC224C8BDC32B10
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/0clHE-4Ba29csc3_0DtpIs-lP7Q.roa
Signing time: Mon 20 Oct 2025 09:33:59 +0000
ROA not before: Mon 20 Oct 2025 09:33:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39558
IP address blocks: 5.8.20.0/22 maxlen: 24
5.189.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:f7:ec:9a:dc:16:a6:1c:ce:c2:24:c8:bd:c3:2b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Oct 20 09:33:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1c94713ee016b6f5cb1cdffd03b6922cfa53fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c3:6c:c4:de:c4:5d:5a:41:42:3a:66:1b:ab:
50:9f:52:f0:f7:fb:1a:da:c3:07:49:8a:93:33:47:
ef:12:d6:c8:6b:73:1e:1e:bd:43:ad:5e:e5:ed:9b:
c1:df:a5:54:0a:2e:45:2b:e8:ec:a2:9d:1f:1a:7b:
b8:07:3c:56:44:e0:92:81:dd:d1:23:16:d2:64:d9:
37:91:90:1b:b7:f9:5c:16:cb:aa:fc:d8:09:a7:64:
07:83:a1:28:2a:d8:bb:e6:81:c6:5c:67:54:0e:ab:
96:5c:5d:ca:4e:09:ae:69:24:d6:58:82:87:27:72:
1d:22:b5:81:d7:43:b3:b4:19:41:65:19:de:83:ff:
6a:2a:92:39:dc:1c:3a:6e:56:f1:0e:6c:cc:77:9f:
d0:d8:1c:70:1f:e4:fd:bd:ae:6d:88:fb:28:c3:94:
a7:a2:1e:4a:8e:26:01:65:54:fc:93:21:c6:ae:af:
c1:9f:0b:5e:bb:30:f6:87:25:9e:aa:03:a6:df:71:
2f:09:43:01:72:11:34:28:f3:49:9a:f9:2f:0a:12:
ff:0a:41:38:b5:ac:fa:a3:ef:16:bc:59:a0:b3:4c:
d5:85:ba:56:db:2f:09:e6:24:c0:ee:10:3d:f3:99:
39:5e:1a:76:23:55:59:55:79:74:17:04:38:b3:62:
51:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C9:47:13:EE:01:6B:6F:5C:B1:CD:FF:D0:3B:69:22:CF:A5:3F:B4
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/0clHE-4Ba29csc3_0DtpIs-lP7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.20.0/22
5.189.252.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:80:47:56:4d:1a:d0:f7:99:72:4a:ce:20:94:36:a9:85:39:
63:69:25:b1:d7:04:ad:48:2b:ec:0c:5b:5d:6e:3a:90:65:04:
78:5f:3b:24:a7:41:f0:04:b0:e3:4f:2d:0b:7b:2f:0a:e1:99:
00:43:e9:44:b3:14:7d:11:cd:0b:1e:ff:c6:a8:53:c9:25:36:
ab:bb:f9:9d:3e:63:2d:aa:4b:c5:f3:2c:60:36:76:ec:9d:47:
95:88:e3:9f:8e:65:b7:21:47:21:44:a7:78:2c:d4:19:cb:3f:
45:56:51:3e:e3:28:47:d2:29:f7:12:b6:cd:ff:3c:72:8e:ce:
04:7a:e4:77:64:48:bd:c6:0a:96:2d:b2:f5:98:8c:5c:41:82:
9b:aa:a3:50:76:a9:16:82:5b:71:9d:c1:d2:3e:da:8a:1e:80:
16:8c:27:c2:15:0f:11:a6:d4:d2:39:5d:5a:5f:54:c4:52:0d:
26:4d:c3:66:ba:81:a3:f5:59:b8:80:1a:07:84:b3:e6:b7:93:
f8:59:b1:fc:8e:3e:65:5f:4d:32:67:04:7f:db:8c:e2:8f:f4:
42:33:29:c4:b4:d0:ef:2e:b3:93:8a:c3:c5:13:fb:d8:63:d0:
b9:66:62:82:6c:f5:bb:7f:6c:ef:76:ac:dd:ae:be:b1:69:3a:
d1:2e:b4:9a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZoA9+ya3BamHM7CJMi9wysQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjUxMDIwMDkzMzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMWM5NDcxM2VlMDE2YjZmNWNiMWNkZmZkMDNiNjkyMmNmYTUzZmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8NsxN7EXVpBQjpmG6tQn1Lw9/sa
2sMHSYqTM0fvEtbIa3MeHr1DrV7l7ZvB36VUCi5FK+jsop0fGnu4BzxWROCSgd3R
IxbSZNk3kZAbt/lcFsuq/NgJp2QHg6EoKti75oHGXGdUDquWXF3KTgmuaSTWWIKH
J3IdIrWB10OztBlBZRneg/9qKpI53Bw6blbxDmzMd5/Q2BxwH+T9va5tiPsow5Sn
oh5KjiYBZVT8kyHGrq/BnwteuzD2hyWeqgOm33EvCUMBchE0KPNJmvkvChL/CkE4
taz6o+8WvFmgs0zVhbpW2y8J5iTA7hA985k5Xhp2I1VZVXl0FwQ4s2JR+wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNHJRxPuAWtvXLHN/9A7aSLPpT+0MB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvMGNsSEUtNEJhMjljc2MzXzBEdHBJcy1sUDdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCBQgUAwQA
Bb38MA0GCSqGSIb3DQEBCwUAA4IBAQC8gEdWTRrQ95lySs4glDaphTljaSWx1wSt
SCvsDFtdbjqQZQR4Xzskp0HwBLDjTy0Ley8K4ZkAQ+lEsxR9Ec0LHv/GqFPJJTar
u/mdPmMtqkvF8yxgNnbsnUeViOOfjmW3IUchRKd4LNQZyz9FVlE+4yhH0in3ErbN
/zxyjs4EeuR3ZEi9xgqWLbL1mIxcQYKbqqNQdqkWgltxncHSPtqKHoAWjCfCFQ8R
ptTSOV1aX1TEUg0mTcNmuoGj9Vm4gBoHhLPmt5P4WbH8jj5lX00yZwR/24zij/RC
MynEtNDvLrOTisPFE/vYY9C5ZmKCbPW7f2zvdqzdrr6xaTrRLrSa
-----END CERTIFICATE-----
Generated at Wed Oct 22 07:17:43 2025 by rpki-client