Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/n5TYbZlwqk9Di5T_xGhmV1Fi85Y.roa
File: n5TYbZlwqk9Di5T_xGhmV1Fi85Y.roa (raw, json)
Hash identifier: 3CX1KAK/iYVVm6O2IseKhoZ3NxYUbgrRYXQl90o2sBk=
Subject key identifier: 9F:94:D8:6D:99:70:AA:4F:43:8B:94:FF:C4:68:66:57:51:62:F3:96
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 019A3A3C4C1DC6C23B12772462EA8BAF86EA
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/n5TYbZlwqk9Di5T_xGhmV1Fi85Y.roa
Signing time: Fri 31 Oct 2025 12:27:01 +0000
ROA not before: Fri 31 Oct 2025 12:27:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34549
IP address blocks: 5.1.64.0/19 maxlen: 32
5.1.64.0/20 maxlen: 32
5.1.64.0/24 maxlen: 32
5.1.65.0/24 maxlen: 32
5.1.66.0/24 maxlen: 32
5.1.67.0/24 maxlen: 32
5.1.70.0/24 maxlen: 32
5.1.72.0/24 maxlen: 32
5.1.73.0/24 maxlen: 32
5.1.75.0/24 maxlen: 24
5.1.76.0/24 maxlen: 32
5.1.79.0/24 maxlen: 24
5.1.82.0/24 maxlen: 32
5.1.84.0/24 maxlen: 32
5.1.85.0/24 maxlen: 32
5.1.86.0/24 maxlen: 32
5.1.87.0/24 maxlen: 32
5.1.89.0/24 maxlen: 32
5.1.90.0/24 maxlen: 32
5.1.91.0/24 maxlen: 32
5.1.93.0/24 maxlen: 32
5.1.94.0/23 maxlen: 32
5.1.94.0/24 maxlen: 32
31.47.232.0/22 maxlen: 32
31.47.236.0/23 maxlen: 32
45.155.248.0/22 maxlen: 22
80.77.16.0/20 maxlen: 32
80.77.16.0/24 maxlen: 32
80.77.31.254/32 maxlen: 32
83.243.40.0/21 maxlen: 32
83.243.41.0/24 maxlen: 24
83.243.44.0/24 maxlen: 32
83.243.45.0/24 maxlen: 32
83.243.45.114/32 maxlen: 32
83.243.46.0/24 maxlen: 32
83.243.46.83/32 maxlen: 32
83.243.47.0/24 maxlen: 32
94.247.40.0/21 maxlen: 32
94.247.45.0/24 maxlen: 32
94.247.46.0/24 maxlen: 32
178.251.224.0/21 maxlen: 21
178.251.224.0/22 maxlen: 32
178.251.225.0/24 maxlen: 32
178.251.228.0/23 maxlen: 32
178.251.229.0/24 maxlen: 32
178.251.230.0/23 maxlen: 32
178.251.230.0/24 maxlen: 32
185.37.144.0/22 maxlen: 32
185.37.144.0/24 maxlen: 24
185.37.145.0/24 maxlen: 32
185.37.147.0/24 maxlen: 32
185.44.104.0/22 maxlen: 32
185.44.106.0/24 maxlen: 32
185.44.107.0/24 maxlen: 32
185.90.160.0/23 maxlen: 32
185.90.160.0/24 maxlen: 32
185.90.161.0/24 maxlen: 32
185.90.163.0/24 maxlen: 32
185.150.96.0/22 maxlen: 32
195.10.195.0/24 maxlen: 32
2a00:f820::/29 maxlen: 29
2a01:360::/29 maxlen: 29
2a01:360::/32 maxlen: 32
2a07:6fc0::/29 maxlen: 48
2a07:6fc0:452::/48 maxlen: 48
2a0f:b80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3a:3c:4c:1d:c6:c2:3b:12:77:24:62:ea:8b:af:86:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Oct 31 12:27:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f94d86d9970aa4f438b94ffc46866575162f396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8c:eb:97:39:c8:b8:3d:14:ee:3b:b0:22:d9:
d4:91:42:6a:36:4d:7e:c1:2f:e0:54:66:17:16:ce:
6c:51:a9:d6:4f:e4:59:1a:e0:d6:e4:f9:b3:4d:dc:
f5:e2:4e:34:0e:40:9c:60:28:87:c6:b8:5e:6e:a7:
1c:bb:9f:2d:a6:96:dc:68:de:99:65:aa:6e:4e:87:
d3:dc:db:7e:f2:37:32:09:55:81:66:85:a7:da:81:
4f:ba:07:6b:f3:4f:fe:25:05:87:2b:6c:f7:d5:99:
42:be:a4:c6:6c:ab:fd:2a:43:40:f3:20:f1:f1:fb:
33:c1:20:f7:f7:30:3a:ea:99:c6:6c:fd:b0:53:34:
55:e7:cd:e5:36:e8:7c:a1:2b:a1:c1:65:10:62:1e:
cd:c8:27:49:ed:66:f9:73:2d:65:f9:35:f0:86:fb:
5c:5f:fc:a8:09:f4:a5:cc:35:4d:cb:a8:e2:7c:42:
99:84:1d:90:ac:3b:a7:6c:13:b6:80:bd:b8:62:37:
2d:90:1e:68:14:fe:04:bb:8d:c7:e4:d8:52:04:22:
b2:d1:45:e1:d1:39:30:f0:0a:b1:f6:ac:c7:b8:fe:
71:97:c0:fb:f9:02:72:54:4b:f1:4e:70:2d:15:2b:
ea:f3:0d:79:aa:23:e3:5d:2c:95:22:58:cb:53:4f:
6d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:94:D8:6D:99:70:AA:4F:43:8B:94:FF:C4:68:66:57:51:62:F3:96
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/n5TYbZlwqk9Di5T_xGhmV1Fi85Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.64.0/19
31.47.232.0-31.47.237.255
45.155.248.0/22
80.77.16.0/20
83.243.40.0/21
94.247.40.0/21
178.251.224.0/21
185.37.144.0/22
185.44.104.0/22
185.90.160.0/23
185.90.163.0/24
185.150.96.0/22
195.10.195.0/24
IPv6:
2a00:f820::/29
2a01:360::/29
2a07:6fc0::/29
2a0f:b80::/29
Signature Algorithm: sha256WithRSAEncryption
b9:43:f4:7e:b3:2f:5c:73:96:d4:2f:46:a4:03:4d:c6:b6:a8:
29:5f:32:81:87:1e:31:79:78:8d:77:b8:ce:fd:a0:70:30:bd:
f2:f0:28:cf:ea:95:a4:1a:5e:8b:74:e2:a1:23:43:e3:4a:0d:
47:3e:c9:ce:5e:18:5b:e1:ba:c9:5a:b1:7b:0c:f7:9d:1a:50:
68:78:5b:d1:7c:53:39:53:9d:eb:2e:3c:52:b1:7e:b4:70:c4:
d5:7d:6e:f7:1b:a7:66:5e:e7:8a:35:d2:5b:79:91:4a:4f:ef:
6f:95:5a:c7:d2:ec:d8:6d:9b:73:57:81:3a:74:26:37:62:eb:
0f:f0:6d:3a:df:8a:a4:5b:ca:3d:e4:e6:96:22:95:67:03:90:
20:a3:36:fc:5c:38:42:40:45:38:09:63:92:2b:96:e7:10:74:
fa:3d:e5:78:29:e5:d1:5f:81:e6:e2:6a:83:37:80:1d:95:f0:
9b:76:15:89:52:d7:18:60:77:56:de:28:6f:ef:fa:03:d5:29:
a1:88:18:40:0f:62:af:a5:28:a1:9b:63:34:7e:71:a1:e7:be:
1b:4e:43:f7:32:9d:55:b2:8b:ab:74:94:f0:ad:9f:44:3f:59:
38:4d:6c:a6:dd:43:41:cf:d6:bd:d7:8f:75:4a:14:d9:e3:4a:
0f:8a:37:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:14:35 2025 by rpki-client