Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/kP5Kud5JC4HdByWF3NmU2sgwbJg.roa
File: kP5Kud5JC4HdByWF3NmU2sgwbJg.roa (raw, json)
Hash identifier: aeS1WvwgOcwV+L4eoLjhAuXFnavKM4LbSU/DAgly4BI=
Subject key identifier: 90:FE:4A:B9:DE:49:0B:81:DD:07:25:85:DC:D9:94:DA:C8:30:6C:98
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 01986A3C898F3E1A771B3597DAAF0B9C5BC5
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/kP5Kud5JC4HdByWF3NmU2sgwbJg.roa
Signing time: Sat 02 Aug 2025 10:03:28 +0000
ROA not before: Sat 02 Aug 2025 10:03:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212093
IP address blocks: 91.196.139.0/24 maxlen: 24
93.179.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:6a:3c:89:8f:3e:1a:77:1b:35:97:da:af:0b:9c:5b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Aug 2 10:03:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90fe4ab9de490b81dd072585dcd994dac8306c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f1:3e:33:1e:98:93:22:d6:3e:7a:96:d4:eb:
85:80:3e:3e:fe:7a:74:d3:8b:08:a4:77:64:8c:d4:
14:99:05:95:ca:41:08:f7:93:09:54:20:a8:c5:92:
02:67:48:0d:ab:76:5b:ef:d9:0b:ce:88:f1:90:07:
91:3b:8b:94:cc:04:ad:bd:0b:fa:80:3d:96:46:8a:
5f:1c:6c:7c:f2:2c:ff:56:19:d1:c0:b6:37:ed:39:
b6:f7:27:29:b3:e2:11:42:e5:77:04:28:a3:34:a0:
bf:30:c0:9b:a3:28:67:11:c0:23:e5:62:63:dd:a9:
f1:ed:63:16:60:48:86:ff:41:55:11:45:2b:b8:fe:
ac:85:cd:9c:bc:ab:81:ff:f7:a5:c5:43:db:0d:f7:
2d:18:90:52:ae:40:da:88:7c:4c:27:9b:58:35:47:
c2:1c:9a:d9:1e:06:90:71:8b:f7:aa:49:ef:c5:36:
32:73:6d:95:ad:c7:be:a9:41:40:02:36:c5:c2:a8:
b2:4e:67:32:dc:a2:4a:37:36:f6:dc:c4:51:be:9d:
74:c3:28:23:e6:3e:26:43:71:34:f1:a3:9a:e4:61:
3b:96:20:58:17:ad:fb:3f:9f:6e:16:e3:91:f7:c6:
89:9f:ea:d2:ff:44:dd:f6:0e:35:f4:68:ba:11:f1:
a1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FE:4A:B9:DE:49:0B:81:DD:07:25:85:DC:D9:94:DA:C8:30:6C:98
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/kP5Kud5JC4HdByWF3NmU2sgwbJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.139.0/24
93.179.66.0/24
Signature Algorithm: sha256WithRSAEncryption
58:a3:15:50:b4:d7:8c:81:6b:d5:62:d7:78:02:0c:6b:95:66:
b2:3a:ac:ce:17:91:e1:93:3d:22:4f:b5:73:01:48:9c:27:b5:
61:1e:bf:f6:40:1d:e6:81:30:11:4b:cf:9a:4f:f5:c1:69:ef:
cb:22:1a:88:a9:69:05:dd:30:0b:e0:03:70:68:e4:e0:4d:18:
c5:53:19:4f:37:34:ed:ef:35:c0:6b:ab:9d:8a:2a:49:26:de:
37:60:3c:4a:58:ac:2a:7e:cf:f3:8b:74:bd:4a:32:f9:b4:f7:
05:8b:f4:1e:38:6b:82:98:b3:c7:da:b4:84:95:a7:10:4b:49:
14:04:5f:be:12:b1:8e:16:b6:e3:af:ee:f8:82:cc:0e:d9:c8:
c3:e7:ff:36:30:5f:71:00:aa:fe:59:2e:31:ec:73:96:74:f7:
6f:a1:35:8c:f7:10:f9:78:b9:b6:ec:9b:6c:2c:f8:55:7f:1d:
f1:fb:78:7b:58:35:ea:f3:5f:73:00:17:ff:a9:35:c2:35:42:
74:e1:36:32:6f:3e:b0:89:04:cd:1b:49:21:a4:f3:9f:20:16:
84:2e:b7:48:8e:9a:d2:c0:da:53:e5:35:b5:08:bd:79:a4:ba:
25:29:1f:df:64:d9:13:d9:d2:f1:d8:e3:7c:0c:fd:ec:7a:b3:
6f:73:9a:cd
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZhqPImPPhp3GzWX2q8LnFvFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMzhlZjQxYjJjMDEwNWE5MWNjYmI5Yzg5MzM3ZmFlYjEy
OWZmODQwHhcNMjUwODAyMTAwMzI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MGZlNGFiOWRlNDkwYjgxZGQwNzI1ODVkY2Q5OTRkYWM4MzA2Yzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/E+Mx6YkyLWPnqW1OuFgD4+/np0
04sIpHdkjNQUmQWVykEI95MJVCCoxZICZ0gNq3Zb79kLzojxkAeRO4uUzAStvQv6
gD2WRopfHGx88iz/VhnRwLY37Tm29ycps+IRQuV3BCijNKC/MMCboyhnEcAj5WJj
3anx7WMWYEiG/0FVEUUruP6shc2cvKuB//elxUPbDfctGJBSrkDaiHxMJ5tYNUfC
HJrZHgaQcYv3qknvxTYyc22Vrce+qUFAAjbFwqiyTmcy3KJKNzb23MRRvp10wygj
5j4mQ3E08aOa5GE7liBYF637P59uFuOR98aJn+rS/0Td9g419Gi6EfGh9QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJD+SrneSQuB3QclhdzZlNrIMGyYMB8GA1UdIwQY
MBaAFIM470GywBBakcy7nIkzf66xKf+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3Mzgt
MjhmYzc3OTY3NzYzLzEva1A1S3VkNUpDNEhkQnlXRjNObVUyc2d3YkpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3MzgtMjhmYzc3OTY3NzYz
LzEvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8SLAwQA
XbNCMA0GCSqGSIb3DQEBCwUAA4IBAQBYoxVQtNeMgWvVYtd4AgxrlWayOqzOF5Hh
kz0iT7VzAUicJ7VhHr/2QB3mgTARS8+aT/XBae/LIhqIqWkF3TAL4ANwaOTgTRjF
UxlPNzTt7zXAa6udiipJJt43YDxKWKwqfs/zi3S9SjL5tPcFi/QeOGuCmLPH2rSE
lacQS0kUBF++ErGOFrbjr+74gswO2cjD5/82MF9xAKr+WS4x7HOWdPdvoTWM9xD5
eLm27JtsLPhVfx3x+3h7WDXq819zABf/qTXCNUJ04TYybz6wiQTNG0khpPOfIBaE
LrdIjprSwNpT5TW1CL15pLolKR/fZNkT2dLx2ON8DP3serNvc5rN
-----END CERTIFICATE-----
Generated at Mon Aug 11 06:07:05 2025 by rpki-client