Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/1-Cyzwb2XQqDkpOsGwOgAeJVNVbQ.roa
File: 1-Cyzwb2XQqDkpOsGwOgAeJVNVbQ.roa (raw, json)
Hash identifier: DumSU40J40K0zKa52TzMzNWl0OO8xKRPkll5x5+k/cY=
Subject key identifier: F8:2C:B3:C1:BD:97:42:A0:E4:A4:EB:06:C0:E8:00:78:95:4D:55:B4
Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f
Certificate serial: 019A53D26DAABF74EC52C8F7D73D7D8F0747
Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/1-Cyzwb2XQqDkpOsGwOgAeJVNVbQ.roa
Signing time: Wed 05 Nov 2025 11:41:30 +0000
ROA not before: Wed 05 Nov 2025 11:41:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204692
IP address blocks: 185.243.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:d2:6d:aa:bf:74:ec:52:c8:f7:d7:3d:7d:8f:07:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f
Validity
Not Before: Nov 5 11:41:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f82cb3c1bd9742a0e4a4eb06c0e80078954d55b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7b:ec:aa:4c:10:17:25:ae:97:ce:63:ec:cf:
04:af:8a:5f:2b:81:c7:30:62:36:c3:d5:31:63:ba:
bf:57:f0:16:a1:47:cf:a1:43:ca:ba:86:34:0c:d6:
75:2a:44:59:b3:f7:03:b7:d0:60:8b:17:cc:ba:47:
1c:94:3c:6b:21:f0:e1:8a:52:f4:31:31:8f:1c:30:
50:f2:df:8a:d6:4b:7d:9e:0d:5c:49:94:f9:79:44:
f8:53:31:6a:8d:ff:58:7b:d2:0e:8b:a7:3e:0b:73:
cb:62:3d:e5:f6:0c:ff:36:d6:84:ef:11:4e:9d:2d:
e9:01:40:63:e6:7f:5c:bd:c8:ad:3e:86:fb:23:8a:
fa:53:c9:d7:de:58:52:9f:87:91:25:4e:b1:98:b5:
61:33:8a:46:7f:36:7c:f0:72:c0:3e:46:51:d9:2e:
b9:e6:7c:0d:f2:16:95:f2:46:f8:78:0c:10:1b:01:
4a:08:dc:4d:83:50:49:d1:57:7c:7c:8c:fe:30:9d:
ae:b5:9e:67:df:b8:0b:51:6b:ad:d2:80:49:ea:00:
e7:1c:63:1a:92:f9:95:3a:71:e7:23:d1:7e:c5:ed:
02:44:a9:6a:d1:52:71:7a:85:a2:7f:f5:c5:f0:74:
3d:38:00:93:9d:bc:a3:49:4b:8e:d6:90:0f:99:7f:
6d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:2C:B3:C1:BD:97:42:A0:E4:A4:EB:06:C0:E8:00:78:95:4D:55:B4
X509v3 Authority Key Identifier:
keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/1-Cyzwb2XQqDkpOsGwOgAeJVNVbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.31.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:60:be:a1:c5:c9:45:bd:5b:c2:3a:22:ff:cd:ee:82:f6:c1:
3e:70:cb:40:22:fc:fd:fe:21:12:4a:fd:6c:13:74:aa:46:a0:
c2:e6:81:08:36:56:a8:13:66:91:df:f6:e7:ae:33:ac:14:5e:
c2:30:77:fc:19:fa:13:e1:3f:37:23:78:71:ae:08:65:db:9b:
77:1e:36:b2:0a:80:78:7e:ef:0d:18:9a:d2:c1:12:6d:1e:e5:
db:d0:b9:7d:59:51:4a:19:90:60:ab:8a:a1:73:ca:16:9a:69:
ae:68:c9:0f:1d:db:51:7f:59:14:db:1d:5b:37:3f:16:7e:4c:
0a:71:5c:7c:95:96:be:c7:51:a1:7e:da:fc:a7:84:53:4b:6a:
02:5a:3d:b1:c6:49:50:21:67:6f:a4:7c:56:36:03:8e:3b:28:
2f:2b:89:eb:59:b1:bd:fa:97:0a:c8:62:57:9f:f8:2a:7e:30:
29:b0:5f:43:3e:36:1e:6b:e0:dd:db:df:05:2c:29:44:67:83:
8d:8f:9c:80:b8:64:3b:ce:2d:f8:07:12:93:a0:f6:63:98:11:
83:6b:fd:e2:47:26:7a:ad:5a:e8:02:24:20:d7:b5:bf:0d:be:
02:b8:e9:53:8f:44:3e:19:8b:3d:c7:50:11:44:fe:83:95:73:
f8:13:a4:ca
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZpT0m2qv3TsUsj31z19jwdHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmN2RhNTY4YWQwMjdiOWUyNDljMTNlMjIzZDMyMjc2OTg4
MWEyOWYwHhcNMjUxMTA1MTE0MTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODJjYjNjMWJkOTc0MmEwZTRhNGViMDZjMGU4MDA3ODk1NGQ1NWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnvsqkwQFyWul85j7M8Er4pfK4HH
MGI2w9UxY7q/V/AWoUfPoUPKuoY0DNZ1KkRZs/cDt9BgixfMukcclDxrIfDhilL0
MTGPHDBQ8t+K1kt9ng1cSZT5eUT4UzFqjf9Ye9IOi6c+C3PLYj3l9gz/NtaE7xFO
nS3pAUBj5n9cvcitPob7I4r6U8nX3lhSn4eRJU6xmLVhM4pGfzZ88HLAPkZR2S65
5nwN8haV8kb4eAwQGwFKCNxNg1BJ0Vd8fIz+MJ2utZ5n37gLUWut0oBJ6gDnHGMa
kvmVOnHnI9F+xe0CRKlq0VJxeoWif/XF8HQ9OACTnbyjSUuO1pAPmX9tewIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPgss8G9l0Kg5KTrBsDoAHiVTVW0MB8GA1UdIwQY
MBaAFF99pWitAnueJJwT4iPTInaYgaKfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUt
Mzc1NzUzOWMyYWM5LzEvMS1DeXp3YjJYUXFEa3BPc0d3T2dBZUpWTlZiUS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvM2EvMDU0ODhmLWY0ZTAtNGU2Yy05NGY1LTM3NTc1MzljMmFj
OS8xL1gzMmxhSzBDZTU0a25CUGlJOU1pZHBpQm9wOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnzHzAN
BgkqhkiG9w0BAQsFAAOCAQEASmC+ocXJRb1bwjoi/83ugvbBPnDLQCL8/f4hEkr9
bBN0qkagwuaBCDZWqBNmkd/2564zrBRewjB3/Bn6E+E/NyN4ca4IZdubdx42sgqA
eH7vDRia0sESbR7l29C5fVlRShmQYKuKoXPKFppprmjJDx3bUX9ZFNsdWzc/Fn5M
CnFcfJWWvsdRoX7a/KeEU0tqAlo9scZJUCFnb6R8VjYDjjsoLyuJ61mxvfqXCshi
V5/4Kn4wKbBfQz42Hmvg3dvfBSwpRGeDjY+cgLhkO84t+AcSk6D2Y5gRg2v94kcm
eq1a6AIkINe1vw2+ArjpU49EPhmLPcdQEUT+g5Vz+BOkyg==
-----END CERTIFICATE-----
Generated at Fri Nov 7 12:37:32 2025 by rpki-client