Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/UnFt6ZblbWYyaRfc67qziOMvQQw.roa
File: UnFt6ZblbWYyaRfc67qziOMvQQw.roa (raw, json)
Hash identifier: fpdDklwdk4hScRWaUS8MKHXNCx1RkD4ooM+sxm45Rl0=
Subject key identifier: 52:71:6D:E9:96:E5:6D:66:32:69:17:DC:EB:BA:B3:88:E3:2F:41:0C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019A1466F72F00631DAB7A24D1AA0C3E5C90
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/UnFt6ZblbWYyaRfc67qziOMvQQw.roa
Signing time: Fri 24 Oct 2025 04:08:03 +0000
ROA not before: Fri 24 Oct 2025 04:08:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58212
IP address blocks: 5.231.70.0/24 maxlen: 24
5.231.234.0/24 maxlen: 24
77.90.22.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
85.93.1.0/24 maxlen: 24
89.144.17.0/24 maxlen: 24
89.144.18.0/24 maxlen: 24
89.144.25.0/24 maxlen: 24
89.144.44.0/24 maxlen: 24
89.144.46.0/24 maxlen: 24
178.18.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:14:66:f7:2f:00:63:1d:ab:7a:24:d1:aa:0c:3e:5c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 24 04:08:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52716de996e56d66326917dcebbab388e32f410c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:74:77:cb:0d:b5:6d:10:9f:55:5e:24:68:6a:
f6:d6:eb:04:44:7a:68:f0:d9:50:66:42:14:dd:c3:
e5:0a:a0:78:a7:83:3e:95:95:41:61:99:f4:72:80:
42:b6:61:7c:f3:9f:36:de:67:a8:42:e0:f4:42:df:
6c:e9:85:3b:27:36:11:84:4d:52:0f:b4:68:c1:6f:
56:5a:6c:2e:c5:8a:e9:93:2e:6a:5d:74:88:c8:a6:
6a:da:cb:5f:fb:f9:eb:d9:83:94:6e:ad:b0:98:80:
8c:b3:3f:c2:05:34:1d:38:09:7b:6d:9f:26:d3:c2:
93:a8:e9:25:41:b7:e9:44:14:ea:2f:7c:41:72:94:
6e:e3:32:77:3e:48:e4:d1:a3:09:85:71:31:d9:d6:
df:0e:cd:e4:68:44:86:33:13:23:ec:9c:02:3b:b2:
6b:b6:67:e0:c5:a6:3a:ab:15:60:b7:4d:21:e2:11:
93:82:fe:9d:06:94:1f:25:20:5d:d0:92:5d:59:0e:
1e:13:54:3a:d1:36:cf:b2:c7:92:f1:ba:f4:9d:74:
19:64:a6:6a:5f:6b:66:28:4f:1a:ed:c6:e3:2e:42:
05:e3:ca:ae:bd:a5:b4:d5:2f:51:e9:a5:48:8f:89:
fa:4c:01:ed:2b:4c:f4:0d:d7:12:1c:94:c6:0f:5e:
2a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:71:6D:E9:96:E5:6D:66:32:69:17:DC:EB:BA:B3:88:E3:2F:41:0C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/UnFt6ZblbWYyaRfc67qziOMvQQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.70.0/24
5.231.234.0/24
77.90.22.0/24
77.90.41.0/24
77.90.52.0/24
85.93.1.0/24
89.144.17.0-89.144.18.255
89.144.25.0/24
89.144.44.0/24
89.144.46.0/24
178.18.147.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:1f:fb:fe:d0:95:d0:a5:ee:d1:c0:f7:30:08:3c:b9:e9:e9:
56:76:57:a9:f7:12:9e:4b:d8:d7:54:4c:22:8d:69:25:8c:0c:
51:fc:d3:bc:93:08:b3:c9:b3:17:ad:e3:41:22:0b:33:5c:94:
d5:22:3a:58:a7:f1:b0:d3:fd:1f:7a:9c:e6:40:73:43:24:83:
cf:53:6c:13:db:13:0c:2f:30:82:6e:9a:65:06:59:e4:d3:95:
5f:ff:8a:75:d3:f5:3d:89:53:54:8a:3e:99:d3:8d:05:4a:45:
2e:08:68:f6:e2:a0:cb:41:1a:c2:52:73:e3:7e:3a:e7:6e:2f:
54:92:d7:b7:13:e8:ec:cc:73:08:90:55:9a:ff:b1:56:9e:07:
f2:a6:af:ef:f9:d9:40:ad:56:d8:6d:e3:a3:99:d6:47:ac:ca:
77:a8:3f:34:8a:59:f5:e7:97:89:59:52:4d:67:fd:18:14:a0:
f2:b1:0e:62:33:d5:a2:da:57:16:8e:53:07:1b:60:16:be:6c:
21:e9:ea:23:66:37:a8:b9:db:4b:e1:b2:84:d2:24:22:73:d3:
35:5a:5c:84:18:37:4f:ec:9c:85:1a:0e:d3:42:91:8a:12:ae:
01:6a:73:71:46:08:9e:e2:c0:d6:7d:73:5f:11:42:78:73:72:
70:5f:4f:6a
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgISAZoUZvcvAGMdq3ok0aoMPlyQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUxMDI0MDQwODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjcxNmRlOTk2ZTU2ZDY2MzI2OTE3ZGNlYmJhYjM4OGUzMmY0MTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnR3yw21bRCfVV4kaGr21usERHpo
8NlQZkIU3cPlCqB4p4M+lZVBYZn0coBCtmF885823meoQuD0Qt9s6YU7JzYRhE1S
D7RowW9WWmwuxYrpky5qXXSIyKZq2stf+/nr2YOUbq2wmICMsz/CBTQdOAl7bZ8m
08KTqOklQbfpRBTqL3xBcpRu4zJ3Pkjk0aMJhXEx2dbfDs3kaESGMxMj7JwCO7Jr
tmfgxaY6qxVgt00h4hGTgv6dBpQfJSBd0JJdWQ4eE1Q60TbPsseS8br0nXQZZKZq
X2tmKE8a7cbjLkIF48quvaW01S9R6aVIj4n6TAHtK0z0DdcSHJTGD14qJwIDAQAB
o4ICTTCCAkkwHQYDVR0OBBYEFFJxbemW5W1mMmkX3Ou6s4jjL0EMMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvVW5GdDZaYmxiV1l5YVJmYzY3cXppT012UVF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQABedGAwQA
BefqAwQATVoWAwQATVopAwQATVo0AwQAVV0BMAwDBABZkBEDBABZkBIDBABZkBkD
BABZkCwDBABZkC4DBACyEpMwDQYJKoZIhvcNAQELBQADggEBACwf+/7QldCl7tHA
9zAIPLnp6VZ2V6n3Ep5L2NdUTCKNaSWMDFH807yTCLPJsxet40EiCzNclNUiOlin
8bDT/R96nOZAc0Mkg89TbBPbEwwvMIJummUGWeTTlV//inXT9T2JU1SKPpnTjQVK
RS4IaPbioMtBGsJSc+N+OuduL1SS17cT6OzMcwiQVZr/sVaeB/Kmr+/52UCtVtht
46OZ1kesyneoPzSKWfXnl4lZUk1n/RgUoPKxDmIz1aLaVxaOUwcbYBa+bCHp6iNm
N6i520vhsoTSJCJz0zVaXIQYN0/snIUaDtNCkYoSrgFqc3FGCJ7iwNZ9c18RQnhz
cnBfT2o=
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:44:45 2025 by rpki-client