Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/e1RGv0R-d5x_r5okkfiZrKFe-tQ.roa
File: e1RGv0R-d5x_r5okkfiZrKFe-tQ.roa (raw, json)
Hash identifier: nJqZ2lE/7rtdp9ZpGNTzEHFvPEX5qWfDPmKlJdgnx8E=
Subject key identifier: 7B:54:46:BF:44:7E:77:9C:7F:AF:9A:24:91:F8:99:AC:A1:5E:FA:D4
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019A2C13C05A5661A49BE8EA7908F31917A4
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/e1RGv0R-d5x_r5okkfiZrKFe-tQ.roa
Signing time: Tue 28 Oct 2025 18:28:03 +0000
ROA not before: Tue 28 Oct 2025 18:28:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137517
IP address blocks: 194.5.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:13:c0:5a:56:61:a4:9b:e8:ea:79:08:f3:19:17:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 28 18:28:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b5446bf447e779c7faf9a2491f899aca15efad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:32:50:cc:b8:72:3b:84:38:be:ba:c1:24:74:
3d:ad:1a:8b:9d:6a:fc:65:17:49:61:83:a7:7e:17:
2d:97:e3:c3:a2:35:4d:98:01:17:30:15:da:b6:83:
2c:0c:eb:e4:9f:5d:09:ed:33:ab:38:59:57:d5:9d:
57:06:f8:d2:81:8a:98:5e:73:cf:0d:d1:f6:bc:d9:
18:25:81:0e:37:1f:58:ee:b2:60:3e:03:cd:53:46:
0f:0c:5d:00:1b:5c:ad:ca:7c:97:6e:70:fc:c6:02:
97:43:10:5e:65:c3:5b:d7:8a:9f:8e:30:b2:c1:4c:
20:f5:f1:8c:47:83:74:ab:68:26:26:5f:f3:13:60:
11:38:f7:46:64:a9:0f:63:41:3d:c3:e0:bd:5d:ba:
e4:ae:ee:af:62:e2:b1:28:f9:66:aa:11:6a:d9:e3:
c2:81:c8:62:5c:52:f7:55:51:02:b1:47:3d:ff:52:
62:2d:97:88:52:6c:d2:63:9b:9c:cc:06:29:b0:e9:
db:7c:2f:84:94:76:a9:8d:c6:5c:8f:07:e1:bc:8c:
d8:1a:62:0c:3c:34:0c:78:98:b5:c2:70:44:19:e1:
87:6d:15:88:c8:22:03:7a:d9:77:85:a2:7d:69:e1:
af:be:10:c4:89:14:7a:c1:90:f4:72:4d:e0:cf:56:
99:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:54:46:BF:44:7E:77:9C:7F:AF:9A:24:91:F8:99:AC:A1:5E:FA:D4
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/e1RGv0R-d5x_r5okkfiZrKFe-tQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.64.0/24
Signature Algorithm: sha256WithRSAEncryption
22:e4:6a:f4:bf:27:99:7b:fc:a0:7d:73:b0:b9:f7:8c:b3:9e:
10:40:78:d8:68:a3:2a:45:be:8c:59:14:ea:96:32:30:3c:30:
8e:2d:c7:06:b7:dd:d9:b8:e8:c4:f6:8f:9d:3d:be:90:dd:0e:
3f:56:25:b7:3c:85:aa:de:e7:39:3e:ba:25:55:c2:bc:00:5e:
66:2c:20:a4:2b:b7:53:45:87:f9:2b:4e:e7:80:4c:db:ca:80:
2e:9f:80:3c:09:24:40:aa:21:b5:c5:04:d7:ee:80:de:30:60:
ae:fb:0a:97:35:e1:7e:6f:a4:fa:17:bf:7f:be:9a:27:a6:25:
fd:bd:d3:0b:f1:3d:97:0e:ef:b2:7e:80:6c:87:ae:67:79:72:
84:b1:8e:9d:a9:7b:13:33:f7:a5:db:ce:82:24:d2:6c:30:15:
3d:23:a6:51:46:33:e6:97:62:55:bb:22:06:a5:db:d9:ae:67:
77:a0:4c:43:31:bf:c8:e9:83:a6:3e:60:c1:dc:bd:ac:d9:d8:
0e:56:4d:d3:39:d5:af:68:03:87:fa:1b:e4:e9:82:16:22:e5:
de:c0:92:c7:f7:92:0a:d9:02:6a:7b:5f:5c:9d:96:ab:17:25:
a0:19:a7:d4:97:fb:f4:08:cb:1b:9e:70:d5:46:b3:57:5a:a5:
25:1f:fe:b3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZosE8BaVmGkm+jqeQjzGRekMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjUxMDI4MTgyODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjU0NDZiZjQ0N2U3NzljN2ZhZjlhMjQ5MWY4OTlhY2ExNWVmYWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjJQzLhyO4Q4vrrBJHQ9rRqLnWr8
ZRdJYYOnfhctl+PDojVNmAEXMBXatoMsDOvkn10J7TOrOFlX1Z1XBvjSgYqYXnPP
DdH2vNkYJYEONx9Y7rJgPgPNU0YPDF0AG1ytynyXbnD8xgKXQxBeZcNb14qfjjCy
wUwg9fGMR4N0q2gmJl/zE2AROPdGZKkPY0E9w+C9Xbrkru6vYuKxKPlmqhFq2ePC
gchiXFL3VVECsUc9/1JiLZeIUmzSY5uczAYpsOnbfC+ElHapjcZcjwfhvIzYGmIM
PDQMeJi1wnBEGeGHbRWIyCIDetl3haJ9aeGvvhDEiRR6wZD0ck3gz1aZ9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHtURr9Efnecf6+aJJH4mayhXvrUMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvZTFSR3YwUi1kNXhfcjVva2tmaVpyS0ZlLXRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgVAMA0G
CSqGSIb3DQEBCwUAA4IBAQAi5Gr0vyeZe/ygfXOwufeMs54QQHjYaKMqRb6MWRTq
ljIwPDCOLccGt93ZuOjE9o+dPb6Q3Q4/ViW3PIWq3uc5ProlVcK8AF5mLCCkK7dT
RYf5K07ngEzbyoAun4A8CSRAqiG1xQTX7oDeMGCu+wqXNeF+b6T6F79/vponpiX9
vdML8T2XDu+yfoBsh65neXKEsY6dqXsTM/el286CJNJsMBU9I6ZRRjPml2JVuyIG
pdvZrmd3oExDMb/I6YOmPmDB3L2s2dgOVk3TOdWvaAOH+hvk6YIWIuXewJLH95IK
2QJqe19cnZarFyWgGafUl/v0CMsbnnDVRrNXWqUlH/6z
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:38:44 2025 by rpki-client