Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/5dNFvIO-zbznRLmVF6QAMVX2o0A.roa
File: 5dNFvIO-zbznRLmVF6QAMVX2o0A.roa (raw, json)
Hash identifier: 9mx7HafqAu6Bu8FJ7Ab6X4jgT5Oz61/dm+ZXSP7PMrQ=
Subject key identifier: E5:D3:45:BC:83:BE:CD:BC:E7:44:B9:95:17:A4:00:31:55:F6:A3:40
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 0196E8B0EA88C8CFCDB7559AA38D449A3CFC
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/5dNFvIO-zbznRLmVF6QAMVX2o0A.roa
Signing time: Mon 19 May 2025 13:17:10 +0000
ROA not before: Mon 19 May 2025 13:17:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56582
IP address blocks: 91.102.160.0/23 maxlen: 23
91.102.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 21:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e8:b0:ea:88:c8:cf:cd:b7:55:9a:a3:8d:44:9a:3c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: May 19 13:17:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5d345bc83becdbce744b99517a4003155f6a340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:52:fb:3a:79:fb:0a:ab:28:13:bf:31:ae:78:
25:7c:f8:78:8b:66:4a:56:6e:27:93:79:7c:09:4f:
f4:04:f0:d6:e5:9b:63:1d:cc:66:d4:59:35:c6:83:
75:29:2f:95:3d:03:94:9c:ea:2d:b9:55:1a:bb:72:
88:e4:5a:9a:5a:d2:70:d5:bf:e2:04:18:5a:ba:35:
2b:ab:73:24:fe:4a:c2:77:02:9e:29:f4:a0:cd:a9:
57:58:31:35:80:df:bf:34:2b:88:78:35:82:44:bd:
b5:10:ca:bd:e0:53:d1:88:1c:70:90:99:d9:e6:ca:
d8:f0:55:ff:c6:05:29:01:cb:3d:29:49:a1:57:bf:
60:c6:03:51:61:ef:f5:00:36:89:e8:22:dc:d5:af:
ab:0d:37:c0:f1:b0:5d:4e:33:ad:e6:ac:0b:44:a0:
00:be:f5:cb:6c:b1:9e:4b:a3:18:68:1b:26:2d:f8:
ad:4b:12:6a:64:54:24:49:cb:eb:ec:59:8b:0f:a8:
c2:82:a3:9e:12:ac:60:83:a8:25:0f:4d:ef:6d:58:
43:32:d6:98:61:1d:07:3b:59:c5:52:b8:26:d2:09:
e4:74:0d:b9:94:a5:9b:65:21:12:c4:73:06:a4:74:
79:cc:16:d8:b6:8e:50:3d:cd:f4:e6:57:d5:d0:db:
0e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D3:45:BC:83:BE:CD:BC:E7:44:B9:95:17:A4:00:31:55:F6:A3:40
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/5dNFvIO-zbznRLmVF6QAMVX2o0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.160.0/23
91.102.164.0/24
Signature Algorithm: sha256WithRSAEncryption
57:44:22:c5:62:0d:9e:6a:ed:2b:3c:8e:9b:8e:d6:ea:40:c3:
13:f2:af:c8:84:7e:9a:3c:0c:5e:23:1e:67:03:cf:d1:7b:6c:
ea:16:0c:1e:14:e6:68:ce:16:96:6d:89:fd:cd:ea:48:69:0c:
47:d0:ab:99:4b:04:f3:34:c9:d3:c8:62:97:e5:72:82:86:e6:
2a:65:16:3b:e7:c4:27:31:4d:e5:ab:57:c3:ca:85:22:77:0f:
83:15:58:1f:90:a3:92:a5:94:cd:d1:b4:f2:80:38:23:c0:43:
c7:d8:aa:bc:1e:63:54:ca:4c:6a:69:30:59:fa:f9:fd:c9:b2:
51:aa:4d:ec:0b:0f:34:da:a9:59:0e:53:b8:29:04:79:5a:3c:
c6:15:90:be:90:79:16:b2:09:69:40:d2:e2:a7:a8:dc:14:6e:
2c:46:a8:ca:50:20:6f:fb:f4:a9:c8:47:dd:e8:39:9b:e0:d3:
88:8d:5d:5c:af:73:35:e5:bb:ff:79:39:ee:98:b5:7b:a2:e8:
4f:a5:57:bb:6d:0f:d9:db:ad:44:a4:c3:92:56:a6:fd:3b:6b:
f2:1e:d2:65:ca:c4:0c:d5:b4:b0:84:a3:d0:ce:97:f3:5a:83:
f2:8f:77:95:ba:51:ab:e9:64:24:b2:e7:83:4b:4c:ac:dd:fd:
c2:f6:8c:a4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZbosOqIyM/Nt1Wao41Emjz8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YzhiNDI3YzMxMzU5OGE5MmU4ZDhlYzYwZTI5NTBkYTM5
ZmMyYzkwHhcNMjUwNTE5MTMxNzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNWQzNDViYzgzYmVjZGJjZTc0NGI5OTUxN2E0MDAzMTU1ZjZhMzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1L7Onn7CqsoE78xrnglfPh4i2ZK
Vm4nk3l8CU/0BPDW5ZtjHcxm1Fk1xoN1KS+VPQOUnOotuVUau3KI5FqaWtJw1b/i
BBhaujUrq3Mk/krCdwKeKfSgzalXWDE1gN+/NCuIeDWCRL21EMq94FPRiBxwkJnZ
5srY8FX/xgUpAcs9KUmhV79gxgNRYe/1ADaJ6CLc1a+rDTfA8bBdTjOt5qwLRKAA
vvXLbLGeS6MYaBsmLfitSxJqZFQkScvr7FmLD6jCgqOeEqxgg6glD03vbVhDMtaY
YR0HO1nFUrgm0gnkdA25lKWbZSESxHMGpHR5zBbYto5QPc305lfV0NsO1QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOXTRbyDvs2850S5lRekADFV9qNAMB8GA1UdIwQY
MBaAFCfItCfDE1mKkujY7GDilQ2jn8LJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzct
MWM2ZWU0NGUxMWFkLzEvNWRORnZJTy16YnpuUkxtVkY2UUFNVlgybzBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzctMWM2ZWU0NGUxMWFk
LzEvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW2agAwQA
W2akMA0GCSqGSIb3DQEBCwUAA4IBAQBXRCLFYg2eau0rPI6bjtbqQMMT8q/IhH6a
PAxeIx5nA8/Re2zqFgweFOZozhaWbYn9zepIaQxH0KuZSwTzNMnTyGKX5XKChuYq
ZRY758QnMU3lq1fDyoUidw+DFVgfkKOSpZTN0bTygDgjwEPH2Kq8HmNUykxqaTBZ
+vn9ybJRqk3sCw802qlZDlO4KQR5WjzGFZC+kHkWsglpQNLip6jcFG4sRqjKUCBv
+/SpyEfd6Dmb4NOIjV1cr3M15bv/eTnumLV7ouhPpVe7bQ/Z261EpMOSVqb9O2vy
HtJlysQM1bSwhKPQzpfzWoPyj3eVulGr6WQksueDS0ys3f3C9oyk
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:32:53 2025 by rpki-client