Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/5SNpYmUEm5PTiz_P3KHQo3NkemU.roa
File: 5SNpYmUEm5PTiz_P3KHQo3NkemU.roa (raw, json)
Hash identifier: 7YEWIeF+q7GDsDQmUw450T+1AP87ZbGKzLERJ6FX3uM=
Subject key identifier: E5:23:69:62:65:04:9B:93:D3:8B:3F:CF:DC:A1:D0:A3:73:64:7A:65
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01984F65248899F8300DB8E5A6FAF737EEC3
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/5SNpYmUEm5PTiz_P3KHQo3NkemU.roa
Signing time: Mon 28 Jul 2025 04:58:05 +0000
ROA not before: Mon 28 Jul 2025 04:58:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210864
IP address blocks: 194.62.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4f:65:24:88:99:f8:30:0d:b8:e5:a6:fa:f7:37:ee:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jul 28 04:58:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e523696265049b93d38b3fcfdca1d0a373647a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:06:53:2a:ea:55:48:1a:46:2d:6e:a7:26:82:
cf:1e:47:58:31:ee:c5:b8:c6:10:24:79:93:10:0d:
13:2e:21:ee:ef:a8:d4:aa:f4:08:b2:1e:b4:47:4b:
fb:29:e9:3a:a5:1b:37:7c:31:4b:6b:33:c4:f6:1b:
ba:7e:f2:b8:0c:de:63:0d:bc:8b:85:4e:88:fd:6f:
68:43:84:60:e4:bd:d7:e4:27:42:10:3c:0a:24:7d:
3e:b0:ac:bf:90:de:ae:58:43:cc:0d:bd:01:50:ea:
d0:c4:ec:0f:92:53:48:db:1d:0e:92:c8:2e:cd:fc:
70:1c:ef:b5:96:0c:bb:96:0e:59:78:ea:8b:05:a0:
9c:40:17:fa:9c:3e:82:93:bb:56:54:bb:6c:4e:09:
d1:d2:d5:91:f2:06:29:1f:dd:22:05:fa:6b:a4:81:
bc:b6:d4:11:39:28:c7:8d:b1:65:d2:9b:a8:03:1a:
eb:bf:4e:9f:45:e0:68:ea:79:24:a3:5d:eb:2a:ea:
78:be:0d:23:0a:da:96:48:4f:03:ca:05:42:98:c3:
b5:1f:d8:6f:4f:39:27:32:08:96:65:ab:e4:4a:df:
e5:8d:41:d7:c3:78:44:0d:89:1c:d6:06:02:61:47:
d9:86:3a:62:66:ee:de:2b:4c:17:e9:28:34:4c:d8:
74:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:23:69:62:65:04:9B:93:D3:8B:3F:CF:DC:A1:D0:A3:73:64:7A:65
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/5SNpYmUEm5PTiz_P3KHQo3NkemU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.123.0/24
Signature Algorithm: sha256WithRSAEncryption
23:43:8d:08:9a:c5:2a:a3:04:e2:e5:3b:57:1d:d4:5e:58:64:
72:7c:3a:dd:db:d8:8d:92:ac:c5:49:0e:0b:ef:56:b3:0a:a2:
e3:88:db:0c:72:09:fd:cc:fa:bf:ba:7f:61:44:b2:f0:1f:a2:
65:5d:66:cc:2e:21:f1:dd:45:8a:b5:64:ef:11:20:04:82:4d:
fc:0e:cc:3e:eb:8f:67:58:05:c8:32:8b:13:3d:6a:33:b6:5e:
ee:68:44:24:57:d6:fb:49:73:e6:91:5c:43:c0:a1:35:19:99:
a4:74:f8:20:d0:f2:55:60:84:5d:38:92:48:5a:a5:d5:9c:40:
ed:4f:95:e7:d9:39:61:01:a7:fd:16:a3:07:d6:80:14:14:e7:
9f:11:65:07:95:ab:e0:7e:a2:e3:d1:07:2b:4d:6b:9c:b8:40:
3a:2c:c9:7c:56:69:58:03:a7:ab:ac:39:71:83:ad:9f:8f:88:
8a:b9:d6:aa:7b:fc:a0:c6:06:cc:41:8d:4d:d7:e7:b3:40:4a:
f8:43:cd:62:a1:a1:ad:0f:3f:c9:75:5e:77:9f:24:d7:5f:01:
5d:dd:3f:7a:72:54:de:54:42:a3:3c:33:06:ec:56:c9:23:ab:
01:72:3d:ee:91:f8:1f:d7:12:bc:73:5b:a3:cb:0d:4d:e2:68:
c5:b2:8f:7c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZhPZSSImfgwDbjlpvr3N+7DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjUwNzI4MDQ1ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTIzNjk2MjY1MDQ5YjkzZDM4YjNmY2ZkY2ExZDBhMzczNjQ3YTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgZTKupVSBpGLW6nJoLPHkdYMe7F
uMYQJHmTEA0TLiHu76jUqvQIsh60R0v7Kek6pRs3fDFLazPE9hu6fvK4DN5jDbyL
hU6I/W9oQ4Rg5L3X5CdCEDwKJH0+sKy/kN6uWEPMDb0BUOrQxOwPklNI2x0Oksgu
zfxwHO+1lgy7lg5ZeOqLBaCcQBf6nD6Ck7tWVLtsTgnR0tWR8gYpH90iBfprpIG8
ttQROSjHjbFl0puoAxrrv06fReBo6nkko13rKup4vg0jCtqWSE8DygVCmMO1H9hv
TzknMgiWZavkSt/ljUHXw3hEDYkc1gYCYUfZhjpiZu7eK0wX6Sg0TNh0XQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOUjaWJlBJuT04s/z9yh0KNzZHplMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvNVNOcFltVUVtNVBUaXpfUDNLSFFvM05rZW1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwj57MA0G
CSqGSIb3DQEBCwUAA4IBAQAjQ40ImsUqowTi5TtXHdReWGRyfDrd29iNkqzFSQ4L
71azCqLjiNsMcgn9zPq/un9hRLLwH6JlXWbMLiHx3UWKtWTvESAEgk38Dsw+649n
WAXIMosTPWoztl7uaEQkV9b7SXPmkVxDwKE1GZmkdPgg0PJVYIRdOJJIWqXVnEDt
T5Xn2TlhAaf9FqMH1oAUFOefEWUHlavgfqLj0QcrTWucuEA6LMl8VmlYA6errDlx
g62fj4iKudaqe/ygxgbMQY1N1+ezQEr4Q81ioaGtDz/JdV53nyTXXwFd3T96clTe
VEKjPDMG7FbJI6sBcj3ukfgf1xK8c1ujyw1N4mjFso98
-----END CERTIFICATE-----
Generated at Mon Aug 4 19:10:54 2025 by rpki-client