Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/iVyiZxwev_wYI7BNU3e008G4zfk.roa
File: iVyiZxwev_wYI7BNU3e008G4zfk.roa (raw, json)
Hash identifier: 8qCaR6UbT2VINv7ijvxNhHg8ECE+Q7GiqaPlqabo5mM=
Subject key identifier: 89:5C:A2:67:1C:1E:BF:FC:18:23:B0:4D:53:77:B4:D3:C1:B8:CD:F9
Certificate issuer: /CN=a4ea660ddb6100e7d32e5d36689a777ca9cafa19
Certificate serial: 019A2B1BFC5BF7AED64D69F9D10454EE26E2
Authority key identifier: A4:EA:66:0D:DB:61:00:E7:D3:2E:5D:36:68:9A:77:7C:A9:CA:FA:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/iVyiZxwev_wYI7BNU3e008G4zfk.roa
Signing time: Tue 28 Oct 2025 13:57:25 +0000
ROA not before: Tue 28 Oct 2025 13:57:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210976
IP address blocks: 5.42.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:1b:fc:5b:f7:ae:d6:4d:69:f9:d1:04:54:ee:26:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ea660ddb6100e7d32e5d36689a777ca9cafa19
Validity
Not Before: Oct 28 13:57:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=895ca2671c1ebffc1823b04d5377b4d3c1b8cdf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d1:c5:93:71:92:de:cc:c3:2c:bf:0c:48:1f:
81:3c:da:ee:50:f8:b4:86:2c:26:fe:73:31:0c:79:
5f:74:c6:8f:82:79:6e:ba:fa:a4:29:6b:58:6b:09:
5e:8a:e3:1d:89:ba:fd:e6:fe:1b:14:5c:b7:93:a2:
22:f3:5e:c0:1c:c0:b9:42:a8:bd:b5:d1:f4:44:8b:
c0:9a:da:be:2e:6f:84:d1:8a:3a:41:6a:6d:bf:ab:
b6:9a:08:67:c0:6d:11:fa:cb:c6:a1:b2:c5:eb:78:
48:45:bf:8d:42:95:5b:9d:72:78:ee:de:2f:c4:83:
1a:71:6c:4a:de:a2:10:56:90:2e:39:84:1b:45:bb:
5f:65:da:77:5e:71:4a:c7:0b:fb:28:cd:77:2c:ef:
08:d3:aa:f5:92:19:26:c0:43:ba:bd:79:22:4d:ac:
ca:38:6f:1e:84:d3:89:d7:7b:83:f2:0d:3f:1e:2a:
9f:36:76:6f:e3:ab:b1:93:8d:1b:d5:0a:e9:ea:2e:
ad:a9:14:bb:f6:95:ec:65:10:07:f1:cc:94:db:be:
57:e2:37:81:9f:64:e5:58:d1:1e:90:82:b7:65:81:
93:f4:49:a7:46:25:7e:ff:d1:dd:3f:2f:d5:cb:2f:
47:4c:dd:ec:e2:69:d8:0b:8a:84:c7:4e:b1:3f:64:
c1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5C:A2:67:1C:1E:BF:FC:18:23:B0:4D:53:77:B4:D3:C1:B8:CD:F9
X509v3 Authority Key Identifier:
keyid:A4:EA:66:0D:DB:61:00:E7:D3:2E:5D:36:68:9A:77:7C:A9:CA:FA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/iVyiZxwev_wYI7BNU3e008G4zfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.127.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:15:25:32:a5:67:72:d8:aa:89:b5:66:0b:ef:af:d0:ff:ff:
4e:95:03:b8:63:f8:da:b2:f8:57:26:78:a4:05:f3:6d:e1:03:
d5:62:a5:1f:7f:78:e5:ac:a4:8b:26:74:f2:25:ea:46:33:ce:
c0:79:74:0d:91:20:6e:fd:b1:d9:f8:ef:ed:d5:47:76:b2:2c:
fa:ec:ce:ca:ba:f8:65:63:70:a8:a8:1a:62:95:dc:74:cb:12:
72:a3:f8:2b:c4:20:42:87:86:25:1c:99:66:93:37:e7:db:e7:
8f:85:ec:58:e7:58:32:e3:c3:3f:41:8c:23:a3:6d:14:7b:06:
4d:5b:b7:28:27:63:5f:0c:64:b4:e2:8e:e5:6f:e6:43:ec:f9:
12:88:d5:8f:1e:13:58:3e:f7:81:75:96:f0:ec:5a:19:eb:58:
ac:aa:27:4b:9e:ab:f4:57:68:b2:87:19:f4:0e:99:18:0b:6c:
ef:1a:15:bf:9a:a4:08:7f:f3:34:77:3e:8b:7f:72:1d:99:15:
42:df:fb:ea:1d:8c:55:72:02:1c:e7:41:b9:e9:79:24:9d:4a:
de:62:bf:28:86:3a:67:6d:58:19:d6:b4:61:4e:3c:ae:70:41:
67:d5:9a:89:c3:d5:9b:d6:fe:c3:8e:83:16:61:22:9c:84:65:
11:2d:8b:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZorG/xb967WTWn50QRU7ibiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZWE2NjBkZGI2MTAwZTdkMzJlNWQzNjY4OWE3NzdjYTlj
YWZhMTkwHhcNMjUxMDI4MTM1NzI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTVjYTI2NzFjMWViZmZjMTgyM2IwNGQ1Mzc3YjRkM2MxYjhjZGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9HFk3GS3szDLL8MSB+BPNruUPi0
hiwm/nMxDHlfdMaPgnluuvqkKWtYawleiuMdibr95v4bFFy3k6Ii817AHMC5Qqi9
tdH0RIvAmtq+Lm+E0Yo6QWptv6u2mghnwG0R+svGobLF63hIRb+NQpVbnXJ47t4v
xIMacWxK3qIQVpAuOYQbRbtfZdp3XnFKxwv7KM13LO8I06r1khkmwEO6vXkiTazK
OG8ehNOJ13uD8g0/HiqfNnZv46uxk40b1Qrp6i6tqRS79pXsZRAH8cyU275X4jeB
n2TlWNEekIK3ZYGT9EmnRiV+/9HdPy/Vyy9HTN3s4mnYC4qEx06xP2TBUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIlcomccHr/8GCOwTVN3tNPBuM35MB8GA1UdIwQY
MBaAFKTqZg3bYQDn0y5dNmiad3ypyvoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE9wbURkdGhBT2ZUTGwwMmFKcDNmS25LLWhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9lMjBhYTAtMzM4ZS00ZjMzLTg2ZWEt
NmY2MjJmZDE4ZDMwLzEvaVZ5aVp4d2V2X3dZSTdCTlUzZTAwOEc0emZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9lMjBhYTAtMzM4ZS00ZjMzLTg2ZWEtNmY2MjJmZDE4ZDMw
LzEvcE9wbURkdGhBT2ZUTGwwMmFKcDNmS25LLWhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABSp/MA0G
CSqGSIb3DQEBCwUAA4IBAQB/FSUypWdy2KqJtWYL76/Q//9OlQO4Y/jasvhXJnik
BfNt4QPVYqUff3jlrKSLJnTyJepGM87AeXQNkSBu/bHZ+O/t1Ud2siz67M7Kuvhl
Y3CoqBpildx0yxJyo/grxCBCh4YlHJlmkzfn2+ePhexY51gy48M/QYwjo20UewZN
W7coJ2NfDGS04o7lb+ZD7PkSiNWPHhNYPveBdZbw7FoZ61isqidLnqv0V2iyhxn0
DpkYC2zvGhW/mqQIf/M0dz6Lf3IdmRVC3/vqHYxVcgIc50G56XkknUreYr8ohjpn
bVgZ1rRhTjyucEFn1ZqJw9Wb1v7DjoMWYSKchGURLYtR
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:17:40 2025 by rpki-client