Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/A5sQkS7uV34eVKej6AR1hhoB46M.roa
File: A5sQkS7uV34eVKej6AR1hhoB46M.roa (raw, json)
Hash identifier: eFJSmWV9FN9AUQVrtCj0Gi9K4HAn4sO16nvoF3Du328=
Subject key identifier: 03:9B:10:91:2E:EE:57:7E:1E:54:A7:A3:E8:04:75:86:1A:01:E3:A3
Certificate issuer: /CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Certificate serial: 019A3A51619C561094B19D217447CF5D636E
Authority key identifier: 24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/A5sQkS7uV34eVKej6AR1hhoB46M.roa
Signing time: Fri 31 Oct 2025 12:50:02 +0000
ROA not before: Fri 31 Oct 2025 12:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 91.123.0.0/24 maxlen: 24
91.123.1.0/24 maxlen: 24
91.123.2.0/24 maxlen: 24
91.123.3.0/24 maxlen: 24
91.123.4.0/24 maxlen: 24
91.123.5.0/24 maxlen: 24
91.123.6.0/24 maxlen: 24
91.123.7.0/24 maxlen: 24
91.123.8.0/24 maxlen: 24
91.123.9.0/24 maxlen: 24
91.123.10.0/24 maxlen: 24
91.123.11.0/24 maxlen: 24
91.123.12.0/24 maxlen: 24
91.123.13.0/24 maxlen: 24
91.123.14.0/24 maxlen: 24
91.123.15.0/24 maxlen: 24
190.106.160.0/24 maxlen: 24
190.106.161.0/24 maxlen: 24
190.106.162.0/24 maxlen: 24
190.106.163.0/24 maxlen: 24
190.106.164.0/24 maxlen: 24
190.106.165.0/24 maxlen: 24
190.106.166.0/24 maxlen: 24
190.106.167.0/24 maxlen: 24
190.106.168.0/24 maxlen: 24
190.106.169.0/24 maxlen: 24
190.106.170.0/24 maxlen: 24
190.106.171.0/24 maxlen: 24
190.106.172.0/24 maxlen: 24
190.106.173.0/24 maxlen: 24
190.106.174.0/24 maxlen: 24
190.106.175.0/24 maxlen: 24
190.106.176.0/24 maxlen: 24
190.106.177.0/24 maxlen: 24
190.106.178.0/24 maxlen: 24
190.106.179.0/24 maxlen: 24
190.106.180.0/24 maxlen: 24
190.106.181.0/24 maxlen: 24
190.106.182.0/24 maxlen: 24
190.106.183.0/24 maxlen: 24
190.106.184.0/24 maxlen: 24
190.106.185.0/24 maxlen: 24
190.106.186.0/24 maxlen: 24
190.106.187.0/24 maxlen: 24
190.106.188.0/24 maxlen: 24
190.106.189.0/24 maxlen: 24
190.106.190.0/24 maxlen: 24
190.106.191.0/24 maxlen: 24
206.195.128.0/24 maxlen: 24
206.195.129.0/24 maxlen: 24
206.195.130.0/24 maxlen: 24
206.195.131.0/24 maxlen: 24
206.195.132.0/24 maxlen: 24
206.195.133.0/24 maxlen: 24
206.195.134.0/24 maxlen: 24
206.195.135.0/24 maxlen: 24
206.195.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3a:51:61:9c:56:10:94:b1:9d:21:74:47:cf:5d:63:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Validity
Not Before: Oct 31 12:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=039b10912eee577e1e54a7a3e80475861a01e3a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:91:a9:f1:07:32:88:e9:b9:0d:32:0b:37:eb:
c4:57:6c:03:f6:9f:7b:b6:a7:32:03:2c:71:15:9f:
8e:6a:86:07:95:65:22:2f:0d:23:dc:2c:87:fa:c9:
cf:d6:a1:df:a7:8d:b0:31:42:a3:5c:e8:3d:68:16:
8c:19:bb:c2:52:5f:f3:b4:ab:37:fd:0c:0f:13:f7:
17:85:50:23:8e:4a:ac:8a:d0:d9:81:a0:6f:2e:49:
16:81:5a:a3:69:fb:86:00:40:2d:db:79:44:0e:c0:
31:f8:b0:26:0d:fa:13:3e:1a:f1:a4:22:b5:ee:fc:
99:32:75:3f:15:0c:65:0f:52:30:be:d8:30:71:fa:
90:58:79:e5:79:83:8a:82:dd:47:e6:42:7f:8d:69:
53:89:6b:f7:54:58:fa:0c:99:4e:5c:26:96:e1:6d:
00:f2:66:35:77:00:dd:af:d3:59:16:53:fe:15:bb:
89:d7:84:24:bb:d3:15:34:0a:37:af:33:d8:5b:12:
e4:f0:d8:b4:28:3d:ed:0c:66:a8:0b:76:b7:1e:f6:
55:5c:15:ed:a0:ed:ad:81:4b:c4:24:e7:f2:23:b8:
28:50:c7:09:82:83:c3:5e:3d:7e:be:bf:9b:be:cb:
3c:2c:14:cd:6d:a6:cc:54:54:10:4d:1b:bd:00:74:
03:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9B:10:91:2E:EE:57:7E:1E:54:A7:A3:E8:04:75:86:1A:01:E3:A3
X509v3 Authority Key Identifier:
keyid:24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/A5sQkS7uV34eVKej6AR1hhoB46M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.123.0.0/20
190.106.160.0/19
206.195.128.0-206.195.136.255
Signature Algorithm: sha256WithRSAEncryption
58:e7:1e:16:80:1c:24:1f:5a:e5:fd:5d:bd:87:22:83:21:bd:
6b:28:77:5d:2b:ae:86:48:18:be:c9:1a:b7:c3:96:d9:64:00:
0a:64:06:b2:a9:4b:fb:bf:e3:98:2a:bb:d2:ce:29:eb:fa:4b:
d1:7e:3c:f3:f7:68:fa:23:7e:ed:9a:09:d5:f0:b9:66:21:e2:
47:b2:eb:83:ad:48:7c:a9:9d:89:cf:c9:55:52:63:8c:26:39:
41:50:08:00:e6:46:a5:8a:d4:f4:d4:0a:0c:d0:4d:41:49:db:
04:c7:84:b1:1d:8b:72:73:d5:9d:56:bb:3b:39:85:25:7b:8b:
dd:55:5b:71:09:85:8a:54:05:29:1c:32:96:3b:fa:c2:53:92:
94:53:e6:04:25:9f:14:cf:49:a4:52:72:b3:34:8c:d2:a2:11:
7a:c0:ca:dd:26:f6:25:fe:2b:0a:5c:d3:82:35:7d:8c:dc:8b:
d7:8a:b4:49:9c:60:94:ec:f2:23:d5:60:02:f3:53:01:cd:95:
76:27:e4:eb:7b:aa:63:42:b0:c3:66:a0:12:38:eb:28:0c:e7:
61:10:bd:7a:f0:c4:a5:a1:9b:03:24:a5:3e:cb:91:5d:12:e1:
78:4d:65:4b:93:c0:24:30:32:66:e0:1d:ac:a1:61:db:33:e1:
5f:aa:d4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:37:36 2025 by rpki-client