Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/5-5dw7BQUILpSuBDRasWi_TUWvo.roa
File: 5-5dw7BQUILpSuBDRasWi_TUWvo.roa (raw, json)
Hash identifier: hm9ysYElh3sbrH5I7xkNigsOqhpocQkIVZkL8ahr+uU=
Subject key identifier: E7:EE:5D:C3:B0:50:50:82:E9:4A:E0:43:45:AB:16:8B:F4:D4:5A:FA
Certificate issuer: /CN=7653a98a749e569744a1ede2c940f2e433c4408a
Certificate serial: 0198656C636214C338B72C73B30ABD0AB539
Authority key identifier: 76:53:A9:8A:74:9E:56:97:44:A1:ED:E2:C9:40:F2:E4:33:C4:40:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlOpinSeVpdEoe3iyUDy5DPEQIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/5-5dw7BQUILpSuBDRasWi_TUWvo.roa
Signing time: Fri 01 Aug 2025 11:37:38 +0000
ROA not before: Fri 01 Aug 2025 11:37:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50751
IP address blocks: 91.242.52.0/24 maxlen: 24
91.242.54.0/24 maxlen: 24
91.242.55.0/24 maxlen: 24
178.216.0.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dlOpinSeVpdEoe3iyUDy5DPEQIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:65:6c:63:62:14:c3:38:b7:2c:73:b3:0a:bd:0a:b5:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7653a98a749e569744a1ede2c940f2e433c4408a
Validity
Not Before: Aug 1 11:37:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7ee5dc3b0505082e94ae04345ab168bf4d45afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:41:e4:20:ef:31:04:23:c0:3f:9f:ea:b5:74:
0f:b6:b0:e3:13:70:5d:8e:1b:39:3f:ad:69:bf:6b:
fb:84:b1:18:44:83:31:4f:a3:1d:98:4e:4a:8b:2b:
a8:d8:65:7e:9b:f1:da:3b:fb:e4:30:34:ba:c3:31:
d6:44:2a:7b:ee:39:2c:22:cf:1e:73:d4:17:24:f3:
cf:78:b3:fa:7d:74:5b:c9:1e:3a:3f:20:43:6f:0f:
f3:25:c9:9b:71:47:7a:c5:07:14:7d:c0:34:b6:c6:
ba:09:be:fe:6b:ca:85:50:91:35:bd:5c:1c:ee:ee:
f5:da:8a:6e:c8:da:e6:b3:3f:9e:28:e9:fd:83:29:
b7:ad:5b:2d:44:dd:54:ab:f3:d6:8c:5f:e0:96:3c:
a5:72:77:22:c1:4b:3a:2b:d9:bf:fb:fb:09:7a:98:
8a:ff:b2:91:42:30:e4:8d:37:6d:b8:bc:63:a4:33:
7b:bf:cd:cd:01:bb:8c:2b:77:67:9f:5b:79:f2:75:
da:70:66:4c:ff:3a:70:5b:08:cc:ce:f0:f4:b9:98:
89:39:15:bb:55:10:ab:26:bc:9b:bd:96:cb:33:1f:
ce:4c:80:10:9b:2a:0e:b2:fd:df:04:dd:78:18:82:
3a:00:02:6a:cb:f4:b0:a6:34:07:c0:51:20:4a:64:
ed:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:EE:5D:C3:B0:50:50:82:E9:4A:E0:43:45:AB:16:8B:F4:D4:5A:FA
X509v3 Authority Key Identifier:
keyid:76:53:A9:8A:74:9E:56:97:44:A1:ED:E2:C9:40:F2:E4:33:C4:40:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlOpinSeVpdEoe3iyUDy5DPEQIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/5-5dw7BQUILpSuBDRasWi_TUWvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.52.0/24
91.242.54.0/23
178.216.0.0/21
Signature Algorithm: sha256WithRSAEncryption
98:bc:a5:94:87:2d:66:e3:de:f5:f9:35:2c:ef:12:6d:6f:a0:
23:43:74:83:0b:fd:f5:07:13:9d:5a:5d:18:cb:ea:7e:d6:35:
25:5d:25:1e:dc:2f:23:5d:d6:4c:b8:0a:74:e0:91:c1:a5:89:
61:62:b5:21:cf:8b:30:b9:71:21:52:9a:60:00:cd:91:7d:7f:
77:20:04:58:e1:ee:d6:eb:ad:bc:68:d8:5b:98:b4:97:90:2f:
3d:c8:85:a4:7c:09:32:b0:b9:bd:e9:99:26:62:a4:2e:6f:75:
34:60:40:9c:26:0c:5c:55:2d:4a:71:59:6b:73:da:8c:76:38:
c4:80:78:08:2f:b0:06:4e:f5:81:ca:82:91:5a:e0:94:08:38:
92:94:0c:51:47:5f:8b:c6:c0:eb:a6:4b:eb:6d:39:7a:82:a1:
b0:46:06:8b:86:9b:2a:86:e6:92:bb:27:14:c5:56:f8:32:00:
1a:3f:21:87:d9:d9:ac:4d:c0:f1:0a:42:f1:d6:37:96:e6:fe:
65:6d:93:48:f8:6a:cc:d0:71:86:6f:7e:0f:41:08:9c:e8:23:
c9:3f:3c:02:16:ab:9c:3a:da:63:36:8c:3b:46:71:2c:c4:62:
5e:db:52:0a:3f:3d:f1:09:d8:bd:de:e5:93:94:16:96:1b:d2:
07:b5:9c:db
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZhlbGNiFMM4tyxzswq9CrU5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NTNhOThhNzQ5ZTU2OTc0NGExZWRlMmM5NDBmMmU0MzNj
NDQwOGEwHhcNMjUwODAxMTEzNzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2VlNWRjM2IwNTA1MDgyZTk0YWUwNDM0NWFiMTY4YmY0ZDQ1YWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEHkIO8xBCPAP5/qtXQPtrDjE3Bd
jhs5P61pv2v7hLEYRIMxT6MdmE5Kiyuo2GV+m/HaO/vkMDS6wzHWRCp77jksIs8e
c9QXJPPPeLP6fXRbyR46PyBDbw/zJcmbcUd6xQcUfcA0tsa6Cb7+a8qFUJE1vVwc
7u712opuyNrmsz+eKOn9gym3rVstRN1Uq/PWjF/gljylcnciwUs6K9m/+/sJepiK
/7KRQjDkjTdtuLxjpDN7v83NAbuMK3dnn1t58nXacGZM/zpwWwjMzvD0uZiJORW7
VRCrJrybvZbLMx/OTIAQmyoOsv3fBN14GII6AAJqy/SwpjQHwFEgSmTtMwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOfuXcOwUFCC6UrgQ0WrFov01Fr6MB8GA1UdIwQY
MBaAFHZTqYp0nlaXRKHt4slA8uQzxECKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGxPcGluU2VWcGRFb2UzaXlVRHk1RFBFUUlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS84NjE1OTItYjFjMi00OTVmLWI1YTEt
YjlkYzJmMmIwMDJjLzEvNS01ZHc3QlFVSUxwU3VCRFJhc1dpX1RVV3ZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS84NjE1OTItYjFjMi00OTVmLWI1YTEtYjlkYzJmMmIwMDJj
LzEvZGxPcGluU2VWcGRFb2UzaXlVRHk1RFBFUUlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW/I0AwQB
W/I2AwQDstgAMA0GCSqGSIb3DQEBCwUAA4IBAQCYvKWUhy1m4971+TUs7xJtb6Aj
Q3SDC/31BxOdWl0Yy+p+1jUlXSUe3C8jXdZMuAp04JHBpYlhYrUhz4swuXEhUppg
AM2RfX93IARY4e7W6628aNhbmLSXkC89yIWkfAkysLm96ZkmYqQub3U0YECcJgxc
VS1KcVlrc9qMdjjEgHgIL7AGTvWByoKRWuCUCDiSlAxRR1+LxsDrpkvrbTl6gqGw
RgaLhpsqhuaSuycUxVb4MgAaPyGH2dmsTcDxCkLx1jeW5v5lbZNI+GrM0HGGb34P
QQic6CPJPzwCFqucOtpjNow7RnEsxGJe21IKPz3xCdi93uWTlBaWG9IHtZzb
-----END CERTIFICATE-----
Generated at Sat Aug 9 02:53:44 2025 by rpki-client