Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/Y5GCtBSidhvcw_3SSYUfDvMbzug.roa
File: Y5GCtBSidhvcw_3SSYUfDvMbzug.roa (raw, json)
Hash identifier: jacf0Q1rEeNMWmSXZkId8BlqjNp4I0/crgw/+VHO0/8=
Subject key identifier: 63:91:82:B4:14:A2:76:1B:DC:C3:FD:D2:49:85:1F:0E:F3:1B:CE:E8
Certificate issuer: /CN=1f046cde8512802b14933b34a22f7765e295d2ab
Certificate serial: 019A3A65096795E9A7AA6779499E2D6F0D8B
Authority key identifier: 1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/Y5GCtBSidhvcw_3SSYUfDvMbzug.roa
Signing time: Fri 31 Oct 2025 13:11:31 +0000
ROA not before: Fri 31 Oct 2025 13:11:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198292
IP address blocks: 5.133.61.0/24 maxlen: 24
5.133.62.0/24 maxlen: 24
5.133.63.0/24 maxlen: 24
134.255.160.0/22 maxlen: 22
134.255.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3a:65:09:67:95:e9:a7:aa:67:79:49:9e:2d:6f:0d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f046cde8512802b14933b34a22f7765e295d2ab
Validity
Not Before: Oct 31 13:11:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=639182b414a2761bdcc3fdd249851f0ef31bcee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c5:17:3e:6e:9f:5e:6c:f8:8c:de:80:88:ae:
7e:0f:5c:c5:20:7d:95:7c:f2:02:83:af:9b:02:7d:
42:e8:ed:70:b2:38:45:81:39:f5:b9:e1:f6:27:b8:
21:14:d6:b8:53:0b:40:90:1a:f7:86:15:ca:27:a4:
37:ec:04:37:27:8b:e7:57:5b:9c:4c:4b:06:36:42:
d3:73:c0:c6:5a:33:18:98:54:60:ef:3d:f5:c8:b6:
75:1c:36:13:e3:50:eb:dd:22:fa:0f:cc:b0:37:cf:
85:19:7c:71:69:97:0b:74:da:a6:11:b4:07:80:42:
a7:2f:74:ee:bf:8a:21:a8:9a:f0:c6:7c:a4:44:ae:
d4:63:df:eb:32:2d:af:b4:19:89:c9:8e:af:3e:94:
c8:10:c2:ea:1f:88:ff:dd:4b:86:c9:44:7b:e7:45:
ed:53:cd:58:73:7a:36:11:fb:62:33:64:79:40:a8:
95:2c:6a:ef:c2:15:4f:b0:0f:f9:40:40:5c:94:99:
d8:b6:20:51:01:45:3e:fc:ab:f9:0b:c3:ee:6e:c6:
a1:0f:7d:f6:da:53:a6:6b:d3:62:8c:15:7c:aa:48:
6b:b5:f7:2b:0f:80:6a:ca:72:ac:4a:86:0b:9d:95:
28:f2:e2:7c:c7:61:8b:5a:40:ba:c4:c7:a7:76:09:
2d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:91:82:B4:14:A2:76:1B:DC:C3:FD:D2:49:85:1F:0E:F3:1B:CE:E8
X509v3 Authority Key Identifier:
keyid:1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/Y5GCtBSidhvcw_3SSYUfDvMbzug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.61.0-5.133.63.255
134.255.160.0/22
134.255.172.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:0b:9a:cb:03:c4:a7:c9:04:ae:13:28:c5:a6:82:bb:c5:62:
4c:7b:3e:30:9f:96:0a:32:e4:20:e2:fe:fb:dd:59:db:ce:61:
8d:f9:b9:43:a9:7a:3b:98:c2:0f:8e:a9:00:c5:12:a9:f2:8e:
f4:c8:05:7b:b5:a8:00:20:f7:0e:03:89:45:7a:05:1d:77:e1:
22:90:66:10:13:c0:1a:0a:36:36:17:1e:35:1b:db:27:3f:20:
95:06:c2:71:ff:7f:67:be:9d:d0:da:79:67:1b:20:c6:29:75:
20:4e:15:6f:38:78:32:98:79:26:4e:21:ca:73:fd:f6:de:2a:
ec:25:05:5c:bc:6f:07:4f:a5:18:af:ac:c9:0a:3d:a4:7a:2f:
80:d9:cb:db:f4:ce:89:6e:b4:50:59:0e:c7:a8:21:26:48:7a:
9c:e1:3b:2b:40:a5:51:55:88:15:de:3a:04:01:e8:3a:d7:8b:
c9:a4:c9:0e:af:85:a2:7f:7f:f6:59:3e:66:de:71:8d:03:d9:
ec:97:1a:bd:b6:de:68:c1:c5:47:53:28:42:0e:32:b6:9d:0a:
92:89:f7:b0:5b:84:8b:a0:39:72:35:26:dc:33:f6:4e:06:71:
13:ba:f1:4b:cd:ba:44:2b:22:20:c1:52:49:9c:b3:ab:64:62:
84:8c:0d:14
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZo6ZQlnlemnqmd5SZ4tbw2LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMDQ2Y2RlODUxMjgwMmIxNDkzM2IzNGEyMmY3NzY1ZTI5
NWQyYWIwHhcNMjUxMDMxMTMxMTMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzkxODJiNDE0YTI3NjFiZGNjM2ZkZDI0OTg1MWYwZWYzMWJjZWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8UXPm6fXmz4jN6AiK5+D1zFIH2V
fPICg6+bAn1C6O1wsjhFgTn1ueH2J7ghFNa4UwtAkBr3hhXKJ6Q37AQ3J4vnV1uc
TEsGNkLTc8DGWjMYmFRg7z31yLZ1HDYT41Dr3SL6D8ywN8+FGXxxaZcLdNqmEbQH
gEKnL3Tuv4ohqJrwxnykRK7UY9/rMi2vtBmJyY6vPpTIEMLqH4j/3UuGyUR750Xt
U81Yc3o2EftiM2R5QKiVLGrvwhVPsA/5QEBclJnYtiBRAUU+/Kv5C8PubsahD332
2lOma9NijBV8qkhrtfcrD4BqynKsSoYLnZUo8uJ8x2GLWkC6xMendgktRQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFGORgrQUonYb3MP90kmFHw7zG87oMB8GA1UdIwQY
MBaAFB8EbN6FEoArFJM7NKIvd2XildKrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHdSczNvVVNnQ3NVa3pzMG9pOTNaZUtWMHFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS84MGU3NDAtMmM4Yy00NWE2LTkzOGMt
MjE5YjlmNmY5MDg3LzEvWTVHQ3RCU2lkaHZjd18zU1NZVWZEdk1ienVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS84MGU3NDAtMmM4Yy00NWE2LTkzOGMtMjE5YjlmNmY5MDg3
LzEvSHdSczNvVVNnQ3NVa3pzMG9pOTNaZUtWMHFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAAFhT0D
BAYFhQADBAKG/6ADBAKG/6wwDQYJKoZIhvcNAQELBQADggEBAB4LmssDxKfJBK4T
KMWmgrvFYkx7PjCflgoy5CDi/vvdWdvOYY35uUOpejuYwg+OqQDFEqnyjvTIBXu1
qAAg9w4DiUV6BR134SKQZhATwBoKNjYXHjUb2yc/IJUGwnH/f2e+ndDaeWcbIMYp
dSBOFW84eDKYeSZOIcpz/fbeKuwlBVy8bwdPpRivrMkKPaR6L4DZy9v0zolutFBZ
DseoISZIepzhOytApVFViBXeOgQB6DrXi8mkyQ6vhaJ/f/ZZPmbecY0D2eyXGr22
3mjBxUdTKEIOMradCpKJ97BbhIugOXI1Jtwz9k4GcRO68UvNukQrIiDBUkmcs6tk
YoSMDRQ=
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:04:48 2025 by rpki-client