Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/5_V9030i5lbUN1Hx1Pye1j7hGLk.roa
File: 5_V9030i5lbUN1Hx1Pye1j7hGLk.roa (raw, json)
Hash identifier: 467gGceg5qXX0XgAmoBfxTbSMRfs98NruHx3BfvlVpA=
Subject key identifier: E7:F5:7D:D3:7D:22:E6:56:D4:37:51:F1:D4:FC:9E:D6:3E:E1:18:B9
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019933F14584CBAA4ADEBA5D0D9E30CA6C7B
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/5_V9030i5lbUN1Hx1Pye1j7hGLk.roa
Signing time: Wed 10 Sep 2025 14:04:33 +0000
ROA not before: Wed 10 Sep 2025 14:04:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 45.90.17.0/24 maxlen: 24
185.222.30.0/24 maxlen: 24
194.5.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 20:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:f1:45:84:cb:aa:4a:de:ba:5d:0d:9e:30:ca:6c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 10 14:04:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7f57dd37d22e656d43751f1d4fc9ed63ee118b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c4:7c:92:1f:a2:98:4c:36:47:dd:01:3f:16:
5d:c4:be:d6:b6:8e:34:c2:1a:68:34:72:28:ce:f5:
b1:1a:3a:b9:3d:8e:a0:55:af:87:df:14:11:f4:0e:
89:cc:35:62:19:a8:89:d6:76:41:11:f1:da:cc:54:
90:6d:dd:a6:45:80:26:9e:c0:40:60:92:ae:a5:8d:
95:fd:43:7d:ba:cf:8a:54:6e:54:9e:87:3d:4f:95:
c8:97:b1:f1:28:48:1b:d1:f8:65:98:4f:55:10:06:
93:9e:e3:00:df:3f:54:83:f8:3c:7e:cc:50:8e:df:
7e:0f:49:5a:a6:88:42:40:80:07:05:81:9a:1d:0a:
db:fc:72:29:cc:03:36:91:41:a9:0b:ac:cf:a6:fe:
d3:21:7d:e0:99:ef:f1:27:f8:6b:ba:57:fe:d0:cc:
ba:1d:f8:45:7e:4f:bb:bc:4b:17:0e:28:f1:d5:29:
c8:fc:b0:61:13:9d:9a:6b:89:ba:56:18:55:e8:f9:
1a:58:f6:0f:e5:10:90:96:7c:2b:36:13:8f:a9:51:
b6:91:c2:77:1a:84:59:4a:81:86:0b:c4:4f:79:0c:
fb:50:02:c7:00:eb:f9:2e:33:c3:dc:06:dc:9e:05:
9b:fc:2b:8d:33:f6:bd:4c:70:4b:e6:ed:47:26:4c:
dc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F5:7D:D3:7D:22:E6:56:D4:37:51:F1:D4:FC:9E:D6:3E:E1:18:B9
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/5_V9030i5lbUN1Hx1Pye1j7hGLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.17.0/24
185.222.30.0/24
194.5.64.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:80:3e:8e:69:ba:a3:4e:03:ca:6b:4d:01:60:c5:81:94:e9:
a7:2c:a9:9d:4e:f8:29:d1:04:6c:bc:62:c6:f0:ea:a9:8e:af:
f6:f8:a0:ee:21:c8:b9:63:fb:9c:2d:78:cc:5c:61:cd:5e:c2:
8c:19:59:69:a7:59:e3:02:70:47:b6:6b:d3:58:b8:2f:9d:4c:
30:0c:97:c5:30:cf:7c:7d:5c:34:9b:ec:e2:53:00:a1:bb:28:
97:1a:6e:0a:36:65:3c:02:21:13:13:94:7f:f6:d5:f5:ea:8f:
79:de:87:e6:ea:8f:5e:29:d9:c1:e5:b9:bc:eb:fb:46:a9:3a:
bd:d4:9a:9e:45:b9:d4:3a:d7:f5:08:b7:cc:71:cd:21:f4:74:
30:c2:1f:33:68:ba:af:32:af:0d:ac:c9:ce:3b:58:93:ac:7d:
d1:55:c5:11:5a:28:7c:e3:b2:db:64:2a:57:c4:73:a0:07:5d:
ea:d0:48:cc:13:f3:c9:5d:0e:bd:b7:93:02:00:0f:1b:2e:a6:
0e:82:5a:65:20:4d:08:0c:b0:d5:6e:6c:ef:72:53:12:51:32:
93:1c:61:23:59:8d:0d:dd:32:f5:b5:73:9a:18:39:f3:fb:5a:
a6:b6:72:5c:34:b8:12:f2:c6:90:6c:ae:85:2a:88:f4:19:6e:
db:bf:0f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 04:40:15 2025 by rpki-client