
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/BaBYfJwZPDUx1kaffceS9M7N8jE.roa
File: BaBYfJwZPDUx1kaffceS9M7N8jE.roa (raw, json)
Hash identifier: L0/9c3IDJHZBXQ0SAKYuL0TpeVhhnqdqaNhPSHKJx6k=
Subject key identifier: 05:A0:58:7C:9C:19:3C:35:31:D6:46:9F:7D:C7:92:F4:CE:CD:F2:31
Certificate issuer: /CN=b30fd255c96b42e72b5688c670f6e26119ad3935
Certificate serial: 01987464A4899FCA011DF5E7D3C410D9852C
Authority key identifier: B3:0F:D2:55:C9:6B:42:E7:2B:56:88:C6:70:F6:E2:61:19:AD:39:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sw_SVclrQucrVojGcPbiYRmtOTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/BaBYfJwZPDUx1kaffceS9M7N8jE.roa
Signing time: Mon 04 Aug 2025 09:23:29 +0000
ROA not before: Mon 04 Aug 2025 09:23:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34984
IP address blocks: 5.181.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/sw_SVclrQucrVojGcPbiYRmtOTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/sw_SVclrQucrVojGcPbiYRmtOTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sw_SVclrQucrVojGcPbiYRmtOTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:64:a4:89:9f:ca:01:1d:f5:e7:d3:c4:10:d9:85:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30fd255c96b42e72b5688c670f6e26119ad3935
Validity
Not Before: Aug 4 09:23:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05a0587c9c193c3531d6469f7dc792f4cecdf231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:48:54:ff:ca:e4:50:9d:b5:7c:44:08:2f:e9:
79:d2:d5:ca:18:72:ba:24:ea:02:27:9f:e0:87:1a:
b9:fe:95:db:6a:fe:31:e9:cf:47:13:ef:7e:11:34:
41:cd:95:80:92:8e:98:4e:e0:fe:49:a6:b1:9a:36:
e6:e7:51:9f:bb:1a:61:21:5f:d5:0c:01:98:18:8f:
84:4a:71:3d:8b:2e:3f:1a:ad:42:fd:c4:81:e4:f8:
61:9e:31:79:79:04:0f:f6:53:f8:cf:aa:74:9a:73:
8b:4c:91:a1:a6:a7:de:5b:35:57:5e:c6:c6:5b:54:
ed:d7:9d:0f:3d:79:1c:7c:91:93:51:fe:ea:e7:ac:
d0:4f:c2:92:a4:0c:f2:12:be:79:99:15:9b:ea:f5:
a8:ff:e5:71:de:70:23:15:18:83:4b:06:7f:cc:9b:
ab:fa:cc:5b:7a:36:fa:c8:34:7d:61:18:ea:b5:5c:
56:b6:8d:de:e6:42:8f:38:39:5b:31:46:9b:84:84:
64:30:83:82:3d:aa:96:a4:8d:1f:d2:f9:7d:62:51:
3a:e2:3a:50:e9:40:49:0d:4b:d2:62:55:3b:5d:66:
18:6b:4f:0c:93:9d:d4:0f:9d:35:4a:be:55:ab:a2:
b9:0e:dc:87:d6:01:69:89:5e:89:06:25:43:ce:7d:
7f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A0:58:7C:9C:19:3C:35:31:D6:46:9F:7D:C7:92:F4:CE:CD:F2:31
X509v3 Authority Key Identifier:
keyid:B3:0F:D2:55:C9:6B:42:E7:2B:56:88:C6:70:F6:E2:61:19:AD:39:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw_SVclrQucrVojGcPbiYRmtOTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/BaBYfJwZPDUx1kaffceS9M7N8jE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/sw_SVclrQucrVojGcPbiYRmtOTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.17.0/24
Signature Algorithm: sha256WithRSAEncryption
76:96:bd:a3:a0:79:0d:7b:c0:41:95:e6:9b:68:65:82:24:2a:
04:85:7f:3e:42:dc:53:a9:4c:78:c2:17:f5:74:7e:ef:b2:2d:
65:28:f2:ad:80:15:7d:0e:e7:0c:a9:a3:43:46:1e:4d:8c:96:
a6:c1:c9:6b:36:9e:e5:b4:d2:cc:cc:03:e0:07:81:be:a9:27:
f5:7d:f3:fc:fd:d4:fc:3b:64:69:3c:39:df:77:86:bc:40:c3:
65:d2:d0:4e:5f:64:e4:53:35:99:a7:1e:14:a3:f0:f7:aa:c2:
83:b9:2f:26:46:34:76:9f:2f:13:a1:1c:8c:9d:dd:7d:5b:49:
e8:1c:71:3a:fd:2c:cb:61:09:34:41:b5:5d:be:0e:7a:3a:69:
c3:b6:21:54:56:0a:c5:8a:ea:9d:fa:65:61:80:7d:63:77:f9:
dd:02:be:11:71:9a:4c:c2:02:17:35:3a:41:53:15:51:fe:1b:
de:53:bb:32:e7:cf:d5:4a:6b:a7:37:08:14:43:c3:20:b7:bd:
67:17:1c:ec:48:41:21:06:8c:d4:95:3f:d8:d8:ab:90:9d:f4:
c6:a5:75:3f:42:3b:88:63:02:ea:b5:b0:3f:e2:0c:e1:0e:04:
7f:f2:89:64:3f:4b:58:9a:8a:a3:5f:09:7d:28:62:e5:2f:18:
99:cf:4a:05
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZh0ZKSJn8oBHfXn08QQ2YUsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMGZkMjU1Yzk2YjQyZTcyYjU2ODhjNjcwZjZlMjYxMTlh
ZDM5MzUwHhcNMjUwODA0MDkyMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNWEwNTg3YzljMTkzYzM1MzFkNjQ2OWY3ZGM3OTJmNGNlY2RmMjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0hU/8rkUJ21fEQIL+l50tXKGHK6
JOoCJ5/ghxq5/pXbav4x6c9HE+9+ETRBzZWAko6YTuD+Saaxmjbm51GfuxphIV/V
DAGYGI+ESnE9iy4/Gq1C/cSB5PhhnjF5eQQP9lP4z6p0mnOLTJGhpqfeWzVXXsbG
W1Tt150PPXkcfJGTUf7q56zQT8KSpAzyEr55mRWb6vWo/+Vx3nAjFRiDSwZ/zJur
+sxbejb6yDR9YRjqtVxWto3e5kKPODlbMUabhIRkMIOCPaqWpI0f0vl9YlE64jpQ
6UBJDUvSYlU7XWYYa08Mk53UD501Sr5Vq6K5DtyH1gFpiV6JBiVDzn1/zwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAWgWHycGTw1MdZGn33HkvTOzfIxMB8GA1UdIwQY
MBaAFLMP0lXJa0LnK1aIxnD24mEZrTk1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3dfU1ZjbHJRdWNyVm9qR2NQYmlZUm10T1RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC85OWI2YjYtYzJhNi00YTdiLTgwNDUt
OTIyOWNmNDkyZmI0LzEvQmFCWWZKd1pQRFV4MWthZmZjZVM5TTdOOGpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC85OWI2YjYtYzJhNi00YTdiLTgwNDUtOTIyOWNmNDkyZmI0
LzEvc3dfU1ZjbHJRdWNyVm9qR2NQYmlZUm10T1RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbURMA0G
CSqGSIb3DQEBCwUAA4IBAQB2lr2joHkNe8BBleabaGWCJCoEhX8+QtxTqUx4whf1
dH7vsi1lKPKtgBV9DucMqaNDRh5NjJamwclrNp7ltNLMzAPgB4G+qSf1ffP8/dT8
O2RpPDnfd4a8QMNl0tBOX2TkUzWZpx4Uo/D3qsKDuS8mRjR2ny8ToRyMnd19W0no
HHE6/SzLYQk0QbVdvg56OmnDtiFUVgrFiuqd+mVhgH1jd/ndAr4RcZpMwgIXNTpB
UxVR/hveU7sy58/VSmunNwgUQ8Mgt71nFxzsSEEhBozUlT/Y2KuQnfTGpXU/QjuI
YwLqtbA/4gzhDgR/8olkP0tYmoqjXwl9KGLlLxiZz0oF
-----END CERTIFICATE-----
Generated at Mon Aug 4 21:52:38 2025 by rpki-client