Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/5QAjffJ9UTMoOfKsVB7nUUF8l3Y.roa
File: 5QAjffJ9UTMoOfKsVB7nUUF8l3Y.roa (raw, json)
Hash identifier: BXTCY43MkWuUb+iCCSBL6wLwSDm/WEeyucu4LR87kMs=
Subject key identifier: E5:00:23:7D:F2:7D:51:33:28:39:F2:AC:54:1E:E7:51:41:7C:97:76
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019A074091F7F4D0F7B23EE1924409DAFBFE
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/5QAjffJ9UTMoOfKsVB7nUUF8l3Y.roa
Signing time: Tue 21 Oct 2025 14:51:03 +0000
ROA not before: Tue 21 Oct 2025 14:51:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396356
IP address blocks: 195.40.106.0/23 maxlen: 24
195.172.108.0/23 maxlen: 24
195.172.118.0/23 maxlen: 24
195.172.200.0/23 maxlen: 24
212.135.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 06:34:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:40:91:f7:f4:d0:f7:b2:3e:e1:92:44:09:da:fb:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 21 14:51:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e500237df27d51332839f2ac541ee751417c9776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ad:76:6e:47:5e:47:7c:2f:e5:ac:8e:0a:1d:
e8:1b:5c:59:ef:db:bc:94:6a:67:6b:f1:f5:2a:48:
4e:8c:9b:fa:83:d5:83:00:8c:e9:65:25:bd:b0:a5:
5e:df:49:19:65:15:59:9f:42:a9:ac:7e:dc:76:27:
c7:37:35:44:a3:f6:4a:cc:ea:0f:8e:99:89:46:b1:
12:a2:ad:8d:70:e2:e7:9b:71:74:3d:fc:66:e7:7b:
f2:6f:9d:a0:2e:a7:92:cd:21:21:27:8b:2e:7a:79:
d2:18:e8:74:38:f2:d3:3a:26:82:6e:e8:e0:46:f7:
80:67:5b:42:d7:8f:18:6d:bc:16:47:14:0d:8d:db:
f5:1d:25:f7:1f:e4:40:bd:56:7e:6a:c9:78:68:8f:
f5:50:69:2a:3b:a5:5e:36:4a:69:90:72:11:ba:af:
a0:e5:e3:0b:82:06:61:29:31:e3:bc:45:03:0c:dd:
08:89:da:16:db:83:5f:17:3b:a3:ce:a6:66:85:4f:
07:3c:1e:36:ba:e0:63:aa:c1:63:3f:3a:13:68:9f:
3c:90:0d:b6:b6:25:6a:db:59:43:60:54:1a:b8:a2:
4e:49:51:b4:08:9d:3e:5f:fe:e4:af:b5:18:69:86:
a1:c4:51:07:12:bc:53:b3:b5:15:0b:b2:ad:49:30:
e5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:00:23:7D:F2:7D:51:33:28:39:F2:AC:54:1E:E7:51:41:7C:97:76
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/5QAjffJ9UTMoOfKsVB7nUUF8l3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.40.106.0/23
195.172.108.0/23
195.172.118.0/23
195.172.200.0/23
212.135.204.0/22
Signature Algorithm: sha256WithRSAEncryption
93:28:9b:6a:53:68:96:c5:c1:34:33:1f:2a:c8:2b:82:c8:34:
4a:a8:43:95:18:49:a4:9d:34:cd:7c:ed:5c:49:4a:c1:cf:b1:
62:21:cc:47:dc:de:05:42:db:32:53:78:5c:f0:b2:28:ca:61:
f5:ac:38:9a:53:fd:f1:3f:e8:52:1c:b4:7b:9f:21:4e:51:b9:
c5:31:25:d2:52:37:5b:fd:6b:fd:93:ff:2a:f9:35:38:45:3c:
ec:bc:3e:52:5f:f2:16:75:91:8c:ad:4f:a7:34:03:77:92:85:
38:07:f3:38:55:7a:e8:af:a5:81:fa:10:27:17:ea:68:22:ea:
10:05:20:83:c3:e6:7e:9a:5b:ea:5c:9e:fa:19:cb:8e:cd:ca:
60:c4:2c:db:ba:e5:9d:69:8b:87:2c:ab:f9:0d:c7:57:7c:a5:
42:c7:c7:9c:c2:de:8a:70:21:2b:b7:f0:19:41:70:a4:8e:53:
eb:45:74:87:c0:ca:6f:5c:a3:63:7d:72:97:41:91:b2:f7:2b:
f9:a0:33:e0:16:1a:be:8e:4d:3e:dc:f5:73:a6:5a:e1:36:ec:
96:1c:34:57:46:73:a4:8c:72:2e:12:bf:82:b7:7c:ac:9d:f2:
9b:e9:dd:78:7e:4c:d3:01:77:0a:23:ca:9b:19:94:45:fc:67:
4a:06:0b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 14:54:56 2025 by rpki-client