Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/7oB3ar7GwFtb0clbtSqh_ldJanw.roa
File: 7oB3ar7GwFtb0clbtSqh_ldJanw.roa (raw, json)
Hash identifier: d421V6jyf/lL0flOYjT5So8TNIpbSRnpdeNItUDXdnM=
Subject key identifier: EE:80:77:6A:BE:C6:C0:5B:5B:D1:C9:5B:B5:2A:A1:FE:57:49:6A:7C
Certificate issuer: /CN=fa5755762dfe4c70cd83b30a13b782c4ffc15f5a
Certificate serial: 019A006DACA2F25D084C4B2A7460100B98C5
Authority key identifier: FA:57:55:76:2D:FE:4C:70:CD:83:B3:0A:13:B7:82:C4:FF:C1:5F:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/7oB3ar7GwFtb0clbtSqh_ldJanw.roa
Signing time: Mon 20 Oct 2025 07:02:58 +0000
ROA not before: Mon 20 Oct 2025 07:02:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214286
IP address blocks: 5.181.220.0/24 maxlen: 24
5.181.221.0/24 maxlen: 24
5.181.222.0/24 maxlen: 24
5.181.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6d:ac:a2:f2:5d:08:4c:4b:2a:74:60:10:0b:98:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa5755762dfe4c70cd83b30a13b782c4ffc15f5a
Validity
Not Before: Oct 20 07:02:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee80776abec6c05b5bd1c95bb52aa1fe57496a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0b:0a:3b:c2:cd:3a:2a:9e:64:f8:00:41:2b:
f9:a9:9b:86:dc:d1:e8:70:0d:27:ab:88:c9:0a:7c:
35:40:d0:88:6c:79:f1:88:f1:67:a1:34:22:24:55:
28:4b:6b:0e:76:e6:ec:55:08:5b:bb:16:76:f6:7d:
c9:eb:2c:48:44:59:dc:3d:79:e8:06:e3:4a:30:d0:
31:6a:e1:13:38:18:10:b8:b4:b6:3b:23:d2:a9:ba:
58:2d:44:ae:ac:c7:b4:6e:11:62:00:14:3c:0a:cc:
0b:d4:00:a8:cb:59:d1:9a:00:c6:85:bc:92:33:ab:
d4:ca:e3:71:9d:9d:3b:20:0a:e7:e1:c9:2d:dc:0c:
98:40:2e:fd:69:ad:c3:bc:11:86:08:b9:ca:86:d4:
96:0e:38:52:25:00:cb:8f:d3:dc:41:1e:9f:20:81:
9f:dd:2e:72:f7:81:38:78:b3:d2:fc:6f:8b:e2:ac:
19:ea:7f:d5:5e:0c:f0:75:5e:6f:95:91:c6:47:da:
4c:c8:94:b4:01:f3:bb:b6:40:0d:ba:7f:fc:d3:92:
88:89:82:55:d3:f0:05:dd:58:a6:99:c8:bf:dd:9b:
96:47:33:d5:6c:86:87:a8:29:b5:86:e0:e7:c3:4b:
d5:b7:8d:cb:0f:e9:f2:21:ae:81:d1:b4:e1:44:86:
b9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:80:77:6A:BE:C6:C0:5B:5B:D1:C9:5B:B5:2A:A1:FE:57:49:6A:7C
X509v3 Authority Key Identifier:
keyid:FA:57:55:76:2D:FE:4C:70:CD:83:B3:0A:13:B7:82:C4:FF:C1:5F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/7oB3ar7GwFtb0clbtSqh_ldJanw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.220.0/22
Signature Algorithm: sha256WithRSAEncryption
85:30:b4:c7:10:c8:95:f8:fc:7a:87:98:4e:3c:e6:c9:f3:1f:
46:1f:a7:23:0c:29:92:74:26:5e:34:51:b9:23:c1:aa:1b:79:
db:b8:8e:68:44:fd:8f:1f:47:78:a3:3f:a4:43:bf:49:b5:98:
af:2c:d1:e3:f5:81:af:f9:c5:ec:08:31:09:bf:94:ff:87:a2:
7c:8e:37:c5:b3:13:21:64:d1:8e:44:81:23:f2:63:96:a9:c7:
89:85:a0:ba:19:81:1e:f8:ae:61:d8:1f:ad:18:61:15:b5:6d:
0a:12:36:0d:b8:33:31:eb:25:a7:9b:e9:f2:23:89:7d:b8:e5:
8f:1d:75:59:85:90:9d:44:2b:fd:af:63:42:4e:46:d5:b0:f1:
60:84:00:4d:45:94:26:2b:d1:93:3b:77:2d:df:12:ff:fb:46:
8b:0f:1a:48:92:85:3f:a0:e5:d9:32:08:76:27:14:5d:87:2c:
09:38:f3:6e:32:7a:83:5b:a3:69:44:ef:6a:fb:f2:d3:2b:0c:
7b:77:a0:0f:55:ca:fd:40:f9:5f:38:90:3f:60:79:b7:da:a4:
a0:50:60:f3:40:19:6e:8b:d0:02:21:3a:e5:40:97:93:53:24:
c2:dc:34:e2:d6:08:d8:dc:e7:c6:39:fa:2e:41:9f:2c:d7:3e:
16:43:a6:40
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZoAbayi8l0ITEsqdGAQC5jFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNTc1NTc2MmRmZTRjNzBjZDgzYjMwYTEzYjc4MmM0ZmZj
MTVmNWEwHhcNMjUxMDIwMDcwMjU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTgwNzc2YWJlYzZjMDViNWJkMWM5NWJiNTJhYTFmZTU3NDk2YTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAsKO8LNOiqeZPgAQSv5qZuG3NHo
cA0nq4jJCnw1QNCIbHnxiPFnoTQiJFUoS2sOdubsVQhbuxZ29n3J6yxIRFncPXno
BuNKMNAxauETOBgQuLS2OyPSqbpYLUSurMe0bhFiABQ8CswL1ACoy1nRmgDGhbyS
M6vUyuNxnZ07IArn4ckt3AyYQC79aa3DvBGGCLnKhtSWDjhSJQDLj9PcQR6fIIGf
3S5y94E4eLPS/G+L4qwZ6n/VXgzwdV5vlZHGR9pMyJS0AfO7tkANun/805KIiYJV
0/AF3Vimmci/3ZuWRzPVbIaHqCm1huDnw0vVt43LD+nyIa6B0bThRIa5rwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFO6Ad2q+xsBbW9HJW7Uqof5XSWp8MB8GA1UdIwQY
MBaAFPpXVXYt/kxwzYOzChO3gsT/wV9aMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1sZFZkaTMtVEhETmc3TUtFN2VDeFBfQlgxby5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvZDU5MjQ2LTk1M2UtNDIzYS05NzA0
LTkzMTQxNDEwMWEwMS8xLzdvQjNhcjdHd0Z0YjBjbGJ0U3FoX2xkSmFudy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvN2IvZDU5MjQ2LTk1M2UtNDIzYS05NzA0LTkzMTQxNDEwMWEw
MS8xLzEtbGRWZGkzLVRIRE5nN01LRTdlQ3hQX0JYMW8uY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIFtdww
DQYJKoZIhvcNAQELBQADggEBAIUwtMcQyJX4/HqHmE485snzH0YfpyMMKZJ0Jl40
Ubkjwaobedu4jmhE/Y8fR3ijP6RDv0m1mK8s0eP1ga/5xewIMQm/lP+HonyON8Wz
EyFk0Y5EgSPyY5apx4mFoLoZgR74rmHYH60YYRW1bQoSNg24MzHrJaeb6fIjiX24
5Y8ddVmFkJ1EK/2vY0JORtWw8WCEAE1FlCYr0ZM7dy3fEv/7RosPGkiShT+g5dky
CHYnFF2HLAk4824yeoNbo2lE72r78tMrDHt3oA9Vyv1A+V84kD9gebfapKBQYPNA
GW6L0AIhOuVAl5NTJMLcNOLWCNjc58Y5+i5BnyzXPhZDpkA=
-----END CERTIFICATE-----
Generated at Wed Oct 22 09:52:05 2025 by rpki-client