Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/A7sqpkbDFHn3rXCsQci7_2AnGGQ.roa
File: A7sqpkbDFHn3rXCsQci7_2AnGGQ.roa (raw, json)
Hash identifier: OF7dfEPyTqKusbs4xEAG9g5/WcqMRObERErS7sQwUB8=
Subject key identifier: 03:BB:2A:A6:46:C3:14:79:F7:AD:70:AC:41:C8:BB:FF:60:27:18:64
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019A481BA7E96AD477651EF305D43A1687C5
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/A7sqpkbDFHn3rXCsQci7_2AnGGQ.roa
Signing time: Mon 03 Nov 2025 05:06:03 +0000
ROA not before: Mon 03 Nov 2025 05:06:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211066
IP address blocks: 5.83.134.0/24 maxlen: 24
5.175.140.0/24 maxlen: 24
5.175.192.0/24 maxlen: 24
5.175.237.0/24 maxlen: 24
85.118.162.0/24 maxlen: 24
185.47.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:48:1b:a7:e9:6a:d4:77:65:1e:f3:05:d4:3a:16:87:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 3 05:06:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03bb2aa646c31479f7ad70ac41c8bbff60271864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4a:34:5d:cf:70:74:3d:a7:cf:b2:19:24:c2:
77:76:42:37:f8:3f:e9:49:a0:9a:87:6b:4f:bc:35:
b1:2c:44:24:2f:a7:b8:23:82:6b:7b:3f:f4:6c:e1:
e7:9d:92:56:9d:4b:36:f3:29:c9:b9:3c:c9:4b:8b:
fd:3f:25:e2:9f:09:dd:1e:70:13:5a:57:05:3d:36:
27:61:86:78:02:c1:96:e9:c4:51:16:32:70:d4:01:
31:9d:b2:43:c5:d2:f6:68:96:29:7b:91:ac:58:cc:
6c:9d:07:34:77:b8:26:81:ac:28:1a:8c:a9:34:d5:
83:01:16:63:bd:8d:59:52:5c:ca:cf:a3:05:61:f3:
e5:0b:b2:13:f0:e0:95:4e:fe:c1:04:15:58:09:7b:
73:98:b7:88:65:eb:81:f9:76:91:d1:2c:35:af:32:
a3:28:27:75:5c:51:8e:18:60:8c:da:d3:4b:46:2a:
27:18:a0:b0:a8:d3:df:6c:ed:45:35:0e:67:df:a4:
54:55:4b:fc:73:4c:cf:1c:6d:2f:d1:3a:64:2f:c2:
b9:71:06:df:2b:3f:fc:64:48:53:98:15:d5:db:bb:
bc:3f:ef:a7:3c:2a:41:22:50:ef:53:88:a7:85:c9:
e3:5c:3f:0f:56:61:29:b5:45:b1:02:d0:5d:f1:78:
d6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BB:2A:A6:46:C3:14:79:F7:AD:70:AC:41:C8:BB:FF:60:27:18:64
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/A7sqpkbDFHn3rXCsQci7_2AnGGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.134.0/24
5.175.140.0/24
5.175.192.0/24
5.175.237.0/24
85.118.162.0/24
185.47.142.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:a8:e2:37:20:2b:f8:f1:52:e5:d2:ce:af:4c:db:ec:92:7a:
66:3b:91:95:29:69:19:2b:40:ee:50:6b:a8:34:e3:62:7e:ef:
d6:90:26:31:50:32:8b:42:a4:41:65:c6:57:d1:1b:bd:d9:ab:
a4:82:ec:c4:e2:07:4f:e6:fd:4e:0f:6d:ae:a8:95:e0:0f:c3:
78:95:66:de:d3:cf:4a:93:c9:ff:54:0a:b9:e3:0d:29:7d:dd:
5e:f9:63:5f:33:c4:f7:9c:02:d4:67:c5:7c:62:6d:d4:a2:76:
d0:6a:7e:e9:c1:61:1f:e0:e1:70:fa:46:1d:1c:6d:92:b4:1e:
4b:a4:39:6d:b9:c4:7b:be:f3:50:dc:fd:56:5c:8c:13:49:d0:
d5:0b:2c:d8:b0:40:d7:35:4f:d3:49:aa:2f:11:10:fe:05:f7:
f0:7f:5e:44:15:67:5d:25:b2:0b:04:76:2d:a2:17:74:fe:f8:
bc:1a:7e:3f:c7:17:43:fe:e3:6b:d1:24:8e:fe:12:c4:77:05:
1e:fd:13:76:cd:fc:06:0c:54:98:06:e5:39:22:88:8a:9b:f4:
cc:60:27:f5:27:d8:25:2f:4d:7d:a3:05:85:e5:5b:81:fb:9d:
c2:92:34:d0:57:c8:a7:3f:36:ca:c8:cd:d8:d7:c8:aa:c5:bc:
a8:fe:9e:79
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZpIG6fpatR3ZR7zBdQ6FofFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUxMTAzMDUwNjAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2JiMmFhNjQ2YzMxNDc5ZjdhZDcwYWM0MWM4YmJmZjYwMjcxODY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0o0Xc9wdD2nz7IZJMJ3dkI3+D/p
SaCah2tPvDWxLEQkL6e4I4Jrez/0bOHnnZJWnUs28ynJuTzJS4v9PyXinwndHnAT
WlcFPTYnYYZ4AsGW6cRRFjJw1AExnbJDxdL2aJYpe5GsWMxsnQc0d7gmgawoGoyp
NNWDARZjvY1ZUlzKz6MFYfPlC7IT8OCVTv7BBBVYCXtzmLeIZeuB+XaR0Sw1rzKj
KCd1XFGOGGCM2tNLRionGKCwqNPfbO1FNQ5n36RUVUv8c0zPHG0v0TpkL8K5cQbf
Kz/8ZEhTmBXV27u8P++nPCpBIlDvU4inhcnjXD8PVmEptUWxAtBd8XjWfQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFAO7KqZGwxR5961wrEHIu/9gJxhkMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvQTdzcXBrYkRGSG4zclhDc1FjaTdfMkFuR0dRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQABVOGAwQA
Ba+MAwQABa/AAwQABa/tAwQAVXaiAwQAuS+OMA0GCSqGSIb3DQEBCwUAA4IBAQBa
qOI3ICv48VLl0s6vTNvsknpmO5GVKWkZK0DuUGuoNONifu/WkCYxUDKLQqRBZcZX
0Ru92aukguzE4gdP5v1OD22uqJXgD8N4lWbe089Kk8n/VAq54w0pfd1e+WNfM8T3
nALUZ8V8Ym3UonbQan7pwWEf4OFw+kYdHG2StB5LpDltucR7vvNQ3P1WXIwTSdDV
CyzYsEDXNU/TSaovERD+Bffwf15EFWddJbILBHYtohd0/vi8Gn4/xxdD/uNr0SSO
/hLEdwUe/RN2zfwGDFSYBuU5IoiKm/TMYCf1J9glL019owWF5VuB+53CkjTQV8in
PzbKyM3Y18iqxbyo/p55
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:46:37 2025 by rpki-client