Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/l5h2eDcgpRov1ZCudKc-XZKg8pY.roa
File: l5h2eDcgpRov1ZCudKc-XZKg8pY.roa (raw, json)
Hash identifier: sC7Ts5kVQEjneoGqlIKVB5T/vfD8YFX/olLl3GcQEbs=
Subject key identifier: 97:98:76:78:37:20:A5:1A:2F:D5:90:AE:74:A7:3E:5D:92:A0:F2:96
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0198EB169DC29253B79365A9C272F3DDCD0B
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/l5h2eDcgpRov1ZCudKc-XZKg8pY.roa
Signing time: Wed 27 Aug 2025 10:33:04 +0000
ROA not before: Wed 27 Aug 2025 10:33:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56619
IP address blocks: 79.98.249.0/24 maxlen: 24
82.162.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:eb:16:9d:c2:92:53:b7:93:65:a9:c2:72:f3:dd:cd:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Aug 27 10:33:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=979876783720a51a2fd590ae74a73e5d92a0f296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ca:f6:db:30:ee:bf:66:85:b7:53:ad:c3:f5:
63:58:0a:0d:06:53:a2:29:a4:f0:43:cb:22:1e:b2:
f5:92:77:35:48:c8:7d:81:bb:f8:c0:ab:93:9e:ec:
bc:76:8a:42:96:cc:22:41:c6:21:e8:dc:6d:01:9b:
0c:0b:47:bd:d5:3b:83:af:75:53:bf:9a:0c:58:53:
28:fa:d8:c4:3b:8e:04:a6:d8:b4:d2:a6:83:ce:1f:
49:0a:ce:25:38:a3:d4:da:b7:bb:d2:37:39:bf:bc:
47:c2:69:6b:b8:d7:3f:7e:05:4f:15:d5:09:f2:eb:
35:79:51:22:cd:ec:9b:25:0c:2c:6c:2a:06:8a:de:
3b:8d:c4:bb:b2:71:6a:52:33:ca:36:d9:69:f7:c7:
b9:be:8c:60:9e:23:2a:69:92:ae:3d:28:a2:ce:64:
0b:e0:38:84:dc:d9:d4:ac:13:e1:88:f0:f5:6f:f6:
3e:36:9f:62:ec:9e:30:b6:47:c4:81:a0:bf:81:5e:
53:f8:c8:71:80:80:b1:5f:13:d1:fb:b1:1b:01:92:
95:2a:3a:f0:bd:d3:81:b5:63:f7:c5:75:db:50:b5:
a1:7b:85:9f:8d:de:3e:95:e1:fd:3f:ee:06:3a:1a:
8b:84:4c:7f:d6:f4:b0:74:d6:9d:fc:3e:d0:17:ca:
90:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:98:76:78:37:20:A5:1A:2F:D5:90:AE:74:A7:3E:5D:92:A0:F2:96
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/l5h2eDcgpRov1ZCudKc-XZKg8pY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.249.0/24
82.162.161.0/24
Signature Algorithm: sha256WithRSAEncryption
84:71:f4:bf:fa:2e:1c:4c:1a:68:f8:60:69:44:be:d7:d0:53:
5b:e8:4c:19:90:70:aa:a2:65:a2:1f:58:e3:23:c7:8f:f5:02:
8c:97:fd:89:1d:0e:59:9f:2f:53:8e:26:fe:7a:45:e1:37:51:
0e:f0:e6:31:1d:54:b0:f5:f7:5b:b4:94:81:f9:65:7b:08:d5:
ec:e6:36:60:ab:a4:28:6d:bd:b9:d6:22:5a:4c:f9:08:38:48:
ad:31:2d:54:90:3b:15:2b:65:02:5d:78:24:11:d6:0f:8f:15:
05:ff:86:25:52:3f:bf:f7:a8:6f:c6:4c:4a:33:16:9d:6c:11:
84:8b:37:ad:f3:5b:4b:ef:92:13:a6:62:6c:bc:6a:fa:af:51:
2b:e9:c8:39:c8:17:14:7e:84:28:2e:09:9a:75:4a:e4:01:2c:
ca:5d:b3:b4:35:fa:40:eb:b3:d8:7d:33:c5:ee:a8:c7:da:40:
55:fb:c4:98:b4:76:8c:22:fe:1d:da:40:97:64:d2:d6:ea:54:
bd:c4:8c:ff:c1:34:e0:1e:87:09:24:f5:31:85:c5:67:59:86:
f7:ce:19:1c:7d:7d:90:bc:28:7c:05:68:8f:10:f5:71:03:bd:
cf:45:27:e4:df:40:47:22:56:0d:49:44:ba:17:50:28:fb:9d:
4c:fb:43:99
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZjrFp3CklO3k2WpwnLz3c0LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx
ZTZjMDkwHhcNMjUwODI3MTAzMzA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Nzk4NzY3ODM3MjBhNTFhMmZkNTkwYWU3NGE3M2U1ZDkyYTBmMjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscr22zDuv2aFt1Otw/VjWAoNBlOi
KaTwQ8siHrL1knc1SMh9gbv4wKuTnuy8dopClswiQcYh6NxtAZsMC0e91TuDr3VT
v5oMWFMo+tjEO44Epti00qaDzh9JCs4lOKPU2re70jc5v7xHwmlruNc/fgVPFdUJ
8us1eVEizeybJQwsbCoGit47jcS7snFqUjPKNtlp98e5voxgniMqaZKuPSiizmQL
4DiE3NnUrBPhiPD1b/Y+Np9i7J4wtkfEgaC/gV5T+MhxgICxXxPR+7EbAZKVKjrw
vdOBtWP3xXXbULWhe4Wfjd4+leH9P+4GOhqLhEx/1vSwdNad/D7QF8qQhQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJeYdng3IKUaL9WQrnSnPl2SoPKWMB8GA1UdIwQY
MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt
NWE4NmMyNzU3YzFlLzEvbDVoMmVEY2dwUm92MVpDdWRLYy1YWktnOHBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl
LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAT2L5AwQA
UqKhMA0GCSqGSIb3DQEBCwUAA4IBAQCEcfS/+i4cTBpo+GBpRL7X0FNb6EwZkHCq
omWiH1jjI8eP9QKMl/2JHQ5Zny9Tjib+ekXhN1EO8OYxHVSw9fdbtJSB+WV7CNXs
5jZgq6Qobb251iJaTPkIOEitMS1UkDsVK2UCXXgkEdYPjxUF/4YlUj+/96hvxkxK
MxadbBGEizet81tL75ITpmJsvGr6r1Er6cg5yBcUfoQoLgmadUrkASzKXbO0NfpA
67PYfTPF7qjH2kBV+8SYtHaMIv4d2kCXZNLW6lS9xIz/wTTgHocJJPUxhcVnWYb3
zhkcfX2QvCh8BWiPEPVxA73PRSfk30BHIlYNSUS6F1Ao+51M+0OZ
-----END CERTIFICATE-----
Generated at Tue Sep 9 14:07:24 2025 by rpki-client