Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/5Be-DogsMcwur62atWy2HANYVpQ.roa
File: 5Be-DogsMcwur62atWy2HANYVpQ.roa (raw, json)
Hash identifier: q4IWRhNTg0NSxcmzADiESfHwcxWgFXWjjf2QyIb44ls=
Subject key identifier: E4:17:BE:0E:88:2C:31:CC:2E:AF:AD:9A:B5:6C:B6:1C:03:58:56:94
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 019A2180899BE2E56F59B201972E7DFD83D4
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/5Be-DogsMcwur62atWy2HANYVpQ.roa
Signing time: Sun 26 Oct 2025 17:11:03 +0000
ROA not before: Sun 26 Oct 2025 17:11:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 89.23.66.0/24 maxlen: 24
89.23.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:80:89:9b:e2:e5:6f:59:b2:01:97:2e:7d:fd:83:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Oct 26 17:11:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e417be0e882c31cc2eafad9ab56cb61c03585694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:dc:72:bd:db:40:5b:4a:f1:c8:2f:37:d1:22:
a0:2d:bc:40:44:5f:f6:8d:06:cc:2c:7e:e3:92:50:
67:9a:ed:4b:a7:cf:f6:11:49:b1:5c:b6:a8:31:59:
2b:8f:5e:71:72:e6:67:cd:bd:5e:4f:7a:bb:0e:f5:
55:61:1a:e8:ea:bf:1b:63:22:19:93:bf:91:af:df:
45:12:d3:04:e1:e4:af:8f:ad:60:6b:f5:eb:c0:07:
5f:07:6e:23:0e:8d:bf:73:70:63:92:eb:62:95:34:
e3:55:79:84:34:04:e2:c0:68:3d:31:71:d2:b3:ef:
73:d8:65:91:17:1c:08:e7:f9:cb:2b:44:39:63:56:
55:a0:fa:9b:16:39:ec:18:fb:a5:8c:d4:39:e7:9a:
06:ee:d3:04:c4:fc:3b:ad:40:6f:c6:d9:4b:fb:57:
f5:18:b9:38:17:30:9b:c9:aa:ce:d4:7a:3c:71:82:
6a:b9:bb:b7:f0:b7:f4:aa:ac:24:a0:53:4c:2f:f7:
c7:d6:f5:05:9b:e9:ea:2b:d4:f9:23:f5:b7:1d:d4:
66:f4:e3:e9:eb:36:7a:fb:7c:df:4b:a9:57:20:5e:
92:1d:ab:0f:43:61:cc:08:46:3a:94:e5:0f:13:89:
6d:76:da:32:81:7e:c8:de:0f:90:a5:cc:bf:77:ca:
5f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:17:BE:0E:88:2C:31:CC:2E:AF:AD:9A:B5:6C:B6:1C:03:58:56:94
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/5Be-DogsMcwur62atWy2HANYVpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.66.0/24
89.23.93.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:1e:b5:91:fe:4b:35:ec:0b:9a:ce:3d:23:4e:e0:6b:be:94:
db:2b:4b:67:1f:50:c3:70:83:88:c2:54:a1:98:d1:e1:30:97:
86:54:91:8a:e3:9e:16:cf:f8:e4:4a:47:85:22:31:60:db:05:
7d:07:80:8f:82:da:64:50:94:11:f1:29:15:fb:5e:be:10:d8:
9a:02:7d:ff:40:3c:10:8d:8a:e4:07:a8:c3:31:fd:0d:be:a7:
b3:67:41:b1:94:be:82:e4:cb:67:48:45:3f:80:aa:d0:8a:cf:
10:7a:ec:f0:f6:5f:bf:5f:1c:2f:0a:59:6a:af:01:2a:7b:ed:
56:e2:4d:b2:6b:97:53:37:80:d2:ec:99:7e:3d:c5:e1:5e:b8:
d3:e3:e1:47:f4:73:02:a9:3d:db:e3:1a:6b:91:50:83:68:8c:
4e:fe:ec:5e:2d:e5:cc:02:d4:f0:07:1c:62:47:d7:13:f4:07:
80:68:1c:ea:d7:67:36:c5:fa:17:5a:b8:a9:8f:82:2a:a6:16:
c9:de:e3:c3:89:87:de:a7:86:a2:47:13:15:21:f9:3c:f9:8b:
25:b7:35:ad:8a:7e:7a:cf:3f:02:96:77:86:c1:ef:64:d0:03:
2b:c5:ae:91:8a:8a:af:03:c4:ec:26:8c:92:49:1a:4b:17:c9:
f3:c5:0c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 12:45:59 2025 by rpki-client