Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/R5Lb2p61_4ynWAtPIZjdF8nGxA4.roa
File: R5Lb2p61_4ynWAtPIZjdF8nGxA4.roa (raw, json)
Hash identifier: hyAlLwkVfFI8YdGeGZuftw3XVjaCBhcC74dQWWlsy5I=
Subject key identifier: 47:92:DB:DA:9E:B5:FF:8C:A7:58:0B:4F:21:98:DD:17:C9:C6:C4:0E
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 019A3A3C4C9636084FD00FD31E5D60DE29CF
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/R5Lb2p61_4ynWAtPIZjdF8nGxA4.roa
Signing time: Fri 31 Oct 2025 12:27:01 +0000
ROA not before: Fri 31 Oct 2025 12:27:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211975
IP address blocks: 94.247.46.0/23 maxlen: 24
178.251.225.0/24 maxlen: 24
178.251.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3a:3c:4c:96:36:08:4f:d0:0f:d3:1e:5d:60:de:29:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Oct 31 12:27:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4792dbda9eb5ff8ca7580b4f2198dd17c9c6c40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:61:92:1e:c1:0c:40:06:ca:7e:fa:25:01:d9:
9f:36:09:88:fb:7e:c6:86:37:43:56:eb:16:45:6a:
5a:ba:cf:a7:99:fb:06:f4:f0:a9:1d:b8:67:97:d3:
ee:f7:22:58:49:b8:e7:30:05:04:5d:7e:a3:23:d6:
7f:64:a0:7a:98:0f:e2:c6:95:b6:c4:f7:bf:c9:c2:
fb:72:6f:10:68:b9:73:8e:97:97:86:71:94:41:44:
f3:29:fd:1d:b7:15:6c:47:d9:af:f9:06:bf:dc:c4:
c2:2a:1b:bf:25:38:33:a6:2d:11:fa:84:8f:51:99:
92:d5:fe:4d:11:cd:76:bd:cf:9a:a3:91:21:c4:6f:
ef:6b:90:c0:1e:2d:22:8b:24:cb:69:bb:f5:8f:a2:
22:9a:be:f6:51:58:d2:bf:27:0b:93:07:12:39:1b:
6d:58:ac:36:ce:f7:fd:31:ef:0c:b9:ed:11:6e:b8:
90:8d:87:af:ef:b4:ea:9f:b9:1b:57:60:13:2b:00:
19:ed:45:d4:2a:f8:b8:a1:a7:2b:f1:09:a2:63:f7:
9a:7d:72:5a:a3:82:a0:f3:7e:e5:71:57:de:a4:0f:
cd:85:d8:b4:6f:98:38:42:d9:6f:e3:2c:90:d2:4f:
b2:2f:b3:99:d0:3d:6f:e3:0c:42:a4:aa:f8:59:d7:
dc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:92:DB:DA:9E:B5:FF:8C:A7:58:0B:4F:21:98:DD:17:C9:C6:C4:0E
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/R5Lb2p61_4ynWAtPIZjdF8nGxA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.46.0/23
178.251.225.0/24
178.251.231.0/24
Signature Algorithm: sha256WithRSAEncryption
82:40:2b:cc:4f:fe:0c:8e:81:e4:ef:7d:c9:33:bd:f8:88:ef:
7d:00:d4:34:e8:d8:54:2b:83:59:4a:17:1c:d5:f8:89:b0:e9:
c1:67:a3:b2:9d:c7:83:3b:e9:12:85:5b:9b:28:eb:16:8e:88:
d5:cf:13:de:0a:7d:00:92:d4:45:67:89:11:48:7c:6e:10:4a:
db:94:12:c7:79:e0:2c:ad:52:f9:eb:60:44:44:31:15:15:d9:
51:22:bb:f1:38:2a:3f:b5:39:9a:e7:10:04:ed:dc:58:ab:5e:
58:5e:c5:9d:1a:6a:29:c0:91:0a:2c:8b:88:68:8c:ea:b2:9c:
c0:98:41:f3:fc:e5:8c:3d:55:dc:8b:84:e0:0c:f8:0d:6e:94:
ff:d3:28:5d:f8:56:22:22:5b:57:25:7a:c1:aa:c8:da:40:4c:
d1:42:c4:50:97:ad:b6:3b:2b:8b:14:9b:5a:4d:d9:65:1e:5e:
ea:8f:47:6a:de:5d:da:8b:e2:55:ec:8a:c7:3a:ac:21:8c:49:
f2:30:79:16:47:c2:e3:51:a4:41:3d:94:3e:a8:5a:e6:ec:4e:
58:3c:15:4e:e3:8e:9d:9b:a5:79:44:bd:a0:d9:45:f3:ed:86:
56:1f:a7:77:69:a7:da:63:69:a6:36:ab:99:66:4b:7c:8d:87:
2d:fe:80:c6
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZo6PEyWNghP0A/THl1g3inPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi
MGZhZGIwHhcNMjUxMDMxMTIyNzAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzkyZGJkYTllYjVmZjhjYTc1ODBiNGYyMTk4ZGQxN2M5YzZjNDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2GSHsEMQAbKfvolAdmfNgmI+37G
hjdDVusWRWpaus+nmfsG9PCpHbhnl9Pu9yJYSbjnMAUEXX6jI9Z/ZKB6mA/ixpW2
xPe/ycL7cm8QaLlzjpeXhnGUQUTzKf0dtxVsR9mv+Qa/3MTCKhu/JTgzpi0R+oSP
UZmS1f5NEc12vc+ao5EhxG/va5DAHi0iiyTLabv1j6Iimr72UVjSvycLkwcSORtt
WKw2zvf9Me8Mue0RbriQjYev77Tqn7kbV2ATKwAZ7UXUKvi4oacr8QmiY/eafXJa
o4Kg837lcVfepA/Nhdi0b5g4Qtlv4yyQ0k+yL7OZ0D1v4wxCpKr4Wdfc/QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEeS29qetf+Mp1gLTyGY3RfJxsQOMB8GA1UdIwQY
MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt
NThiMzhmNWFjODBiLzEvUjVMYjJwNjFfNHluV0F0UElaamRGOG5HeEE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi
LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBXvcuAwQA
svvhAwQAsvvnMA0GCSqGSIb3DQEBCwUAA4IBAQCCQCvMT/4MjoHk733JM734iO99
ANQ06NhUK4NZShcc1fiJsOnBZ6OynceDO+kShVubKOsWjojVzxPeCn0AktRFZ4kR
SHxuEErblBLHeeAsrVL562BERDEVFdlRIrvxOCo/tTma5xAE7dxYq15YXsWdGmop
wJEKLIuIaIzqspzAmEHz/OWMPVXci4TgDPgNbpT/0yhd+FYiIltXJXrBqsjaQEzR
QsRQl622OyuLFJtaTdllHl7qj0dq3l3ai+JV7IrHOqwhjEnyMHkWR8LjUaRBPZQ+
qFrm7E5YPBVO446dm6V5RL2g2UXz7YZWH6d3aafaY2mmNquZZkt8jYct/oDG
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:22:13 2025 by rpki-client