Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/5ZGlxXtHkl_D3voGj6rx85jwlZU.roa
File: 5ZGlxXtHkl_D3voGj6rx85jwlZU.roa (raw, json)
Hash identifier: JM4dPNTX67vo7LYoTP+WEMvsk0f45bFlZOiulkq76Ww=
Subject key identifier: E5:91:A5:C5:7B:47:92:5F:C3:DE:FA:06:8F:AA:F1:F3:98:F0:95:95
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01992932F8073FC38DFA5364076BB44225AF
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/5ZGlxXtHkl_D3voGj6rx85jwlZU.roa
Signing time: Mon 08 Sep 2025 12:00:30 +0000
ROA not before: Mon 08 Sep 2025 12:00:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211376
IP address blocks: 194.116.228.174/32 maxlen: 32
2a0f:b700::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:29:32:f8:07:3f:c3:8d:fa:53:64:07:6b:b4:42:25:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Sep 8 12:00:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e591a5c57b47925fc3defa068faaf1f398f09595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:34:1c:02:b5:da:d0:c8:90:91:43:17:78:ae:
ae:e4:be:29:4c:4c:b4:d4:85:74:ef:c3:55:7b:ae:
99:80:0a:d1:87:f1:8b:b4:65:ac:25:80:42:1a:b5:
d2:3c:99:30:48:85:df:3c:0c:95:42:a2:22:c5:d1:
58:46:95:53:97:01:ae:6f:25:39:38:25:0c:22:10:
b6:56:c0:a4:ac:85:13:2a:ef:95:c5:41:95:6b:fb:
26:47:ca:8e:b4:cd:9c:10:57:04:b0:48:d2:9b:34:
f7:48:5c:c5:d9:47:df:bd:1f:f7:85:f7:52:63:3c:
2f:a9:ec:38:a4:70:24:f1:fc:7f:16:60:05:68:e6:
0a:4b:e0:95:9d:44:22:e1:d3:07:63:7d:e2:5c:94:
ce:b6:c5:57:04:d3:1d:84:94:88:e3:35:78:04:ca:
be:88:68:f2:0b:a2:71:e4:db:86:24:66:60:8e:f3:
a9:31:76:79:77:6a:90:9b:76:fc:ea:41:25:8c:67:
dc:ed:34:89:d0:d3:d6:d1:47:ea:b0:3e:72:97:7b:
86:a8:6f:f6:f1:f0:c7:cb:22:9a:76:c7:9b:05:a7:
11:b6:56:b0:71:cb:98:5f:dd:48:91:e8:b7:6f:61:
e3:b1:8d:43:2d:ca:ae:35:1f:a1:c6:0e:8b:c0:c2:
45:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:91:A5:C5:7B:47:92:5F:C3:DE:FA:06:8F:AA:F1:F3:98:F0:95:95
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/5ZGlxXtHkl_D3voGj6rx85jwlZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.228.174/32
IPv6:
2a0f:b700::/29
Signature Algorithm: sha256WithRSAEncryption
71:26:29:e6:3f:a7:80:d8:50:2c:af:24:eb:41:71:aa:07:ee:
b0:c1:1f:44:26:83:58:31:ff:5a:7f:82:9f:95:93:41:2e:09:
ba:0c:20:86:1d:06:37:74:75:03:75:46:09:a5:38:2b:2e:ea:
09:49:a6:e7:ad:61:4d:1c:fb:65:a8:8d:9e:10:d2:da:40:93:
9c:a8:62:92:78:d1:13:fd:92:c4:5d:d7:14:33:2d:33:c2:eb:
23:6b:18:a0:b9:f1:45:f9:8a:3b:8a:5c:a0:b6:f4:e0:42:87:
75:40:05:18:e2:db:53:91:92:af:c3:18:23:41:bc:e6:82:27:
81:c6:9f:ab:4b:0a:87:7a:f4:c5:f8:7e:e4:b5:ba:73:a0:f8:
a1:90:3e:a4:b3:1a:dd:86:d2:17:7a:05:ae:31:d0:3a:c5:1a:
5e:12:08:db:42:a2:ba:5f:ea:16:ed:69:2d:75:00:b7:94:5e:
4f:fa:17:64:cf:53:13:95:d0:d8:02:f8:4c:25:11:7d:1e:69:
b7:47:f9:4b:d5:45:e4:2f:e9:1b:fc:34:18:aa:39:33:ac:0e:
94:0b:7c:df:13:c5:7d:1d:b7:7b:66:c3:09:f5:bd:be:f3:a0:
3f:a5:d8:48:5d:bd:15:a5:24:a2:b1:79:8b:cd:08:c5:63:33:
b7:25:c7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 13:54:20 2025 by rpki-client