Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/mYlveqhAa04nv4cUvO9CIMDxKTU.roa
File: mYlveqhAa04nv4cUvO9CIMDxKTU.roa (raw, json)
Hash identifier: wOaLgCiZMkxV/uSkkzETO+e72n7uVYHt9KIoh0cqs14=
Subject key identifier: 99:89:6F:7A:A8:40:6B:4E:27:BF:87:14:BC:EF:42:20:C0:F1:29:35
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 01981897EA22CFA1AD4B2A8EEBBA165A9BAE
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/mYlveqhAa04nv4cUvO9CIMDxKTU.roa
Signing time: Thu 17 Jul 2025 13:34:25 +0000
ROA not before: Thu 17 Jul 2025 13:34:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44559
IP address blocks: 46.151.176.0/24 maxlen: 24
46.151.177.0/24 maxlen: 24
46.151.178.0/24 maxlen: 24
46.151.179.0/24 maxlen: 24
83.142.210.0/24 maxlen: 24
83.142.211.0/24 maxlen: 24
83.142.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 01:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:18:97:ea:22:cf:a1:ad:4b:2a:8e:eb:ba:16:5a:9b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Jul 17 13:34:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99896f7aa8406b4e27bf8714bcef4220c0f12935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:39:6d:8b:b3:ef:0e:d0:4a:8c:72:2d:34:c5:
7c:f4:a9:3a:5d:28:35:b3:19:13:71:44:eb:56:62:
74:89:fd:05:18:4b:92:67:c6:e3:8a:92:f1:89:94:
e4:68:ab:e6:46:fa:4c:e9:c7:88:75:6d:5d:a7:85:
24:de:9a:3c:58:9e:88:00:a9:8b:2c:9d:30:42:a7:
05:1c:63:5e:40:bb:8c:ba:3c:0c:ea:34:b5:c1:25:
cc:dd:9c:e8:07:d4:1f:5f:39:a5:71:14:4a:62:c4:
98:2b:14:cd:df:39:01:61:30:55:f8:6b:68:bc:34:
28:2e:c2:ae:78:13:d2:20:60:87:2b:fa:c9:f9:64:
4b:e4:65:86:4c:95:fb:fc:3b:4f:89:c5:bc:42:5e:
22:05:66:13:87:30:13:6e:3a:1c:5b:7a:8d:60:b7:
1e:b4:86:ef:6a:82:33:2a:87:5b:d9:e3:fc:52:1c:
5a:35:8e:0c:90:8d:18:94:81:c3:57:ba:2c:e1:a5:
3f:98:12:9a:14:9e:62:16:46:f4:1b:91:7b:05:c5:
63:22:65:00:b6:aa:04:16:e6:0c:0b:7f:9d:f3:d5:
51:05:0f:71:69:86:c8:43:e6:76:96:25:23:07:f5:
8b:e4:ab:53:65:b1:16:86:74:e3:86:3f:68:ca:ed:
15:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:89:6F:7A:A8:40:6B:4E:27:BF:87:14:BC:EF:42:20:C0:F1:29:35
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/mYlveqhAa04nv4cUvO9CIMDxKTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.176.0/22
83.142.210.0-83.142.212.255
Signature Algorithm: sha256WithRSAEncryption
61:67:98:87:f7:df:5f:be:09:90:57:6c:56:72:be:31:bf:c1:
80:d6:10:06:3d:70:ef:b4:25:fd:21:b6:07:ea:04:76:27:91:
85:f6:23:6f:de:43:35:5c:c4:e0:e7:d0:4d:09:69:d3:24:83:
8e:48:e4:0e:4e:70:90:cf:b0:56:8c:42:21:30:7e:64:4b:05:
cf:64:e6:05:da:c4:88:c1:e9:7e:17:b2:84:50:dd:d8:23:a1:
9e:35:96:32:11:fd:83:87:d9:8c:7c:ef:6b:73:4f:0f:91:77:
9f:3c:a5:fd:bf:5a:e3:ee:27:5a:01:cd:ee:4f:38:ea:2d:08:
1c:ed:f4:ba:c1:0d:89:e1:28:f2:94:20:0c:3b:e5:76:be:3e:
00:e8:9f:11:13:ad:f6:5b:b8:4a:43:f3:8b:cb:04:ba:af:0c:
a4:39:32:d9:78:4b:55:53:79:da:64:12:c5:68:a6:2c:b0:ff:
f6:8b:3a:16:b3:5e:a3:98:a8:b5:10:28:18:7b:ad:2e:60:34:
5d:b7:15:e6:16:e4:26:0a:e2:11:2a:d0:8f:ee:4f:51:a5:9b:
27:e1:20:d5:71:9a:a7:eb:e0:29:74:a8:b4:de:93:c4:b3:23:
e2:38:70:90:1e:a2:12:e4:bb:77:59:3f:0e:aa:eb:4d:14:da:
4b:6f:4c:79
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZgYl+oiz6GtSyqO67oWWpuuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYjQ0MWRhZGJiZWNiNjk2NWQ0ZWExZjA0NmNjNWM4ZTI4
ODE3ZmMwHhcNMjUwNzE3MTMzNDI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTg5NmY3YWE4NDA2YjRlMjdiZjg3MTRiY2VmNDIyMGMwZjEyOTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDlti7PvDtBKjHItNMV89Kk6XSg1
sxkTcUTrVmJ0if0FGEuSZ8bjipLxiZTkaKvmRvpM6ceIdW1dp4Uk3po8WJ6IAKmL
LJ0wQqcFHGNeQLuMujwM6jS1wSXM3ZzoB9QfXzmlcRRKYsSYKxTN3zkBYTBV+Gto
vDQoLsKueBPSIGCHK/rJ+WRL5GWGTJX7/DtPicW8Ql4iBWYThzATbjocW3qNYLce
tIbvaoIzKodb2eP8UhxaNY4MkI0YlIHDV7os4aU/mBKaFJ5iFkb0G5F7BcVjImUA
tqoEFuYMC3+d89VRBQ9xaYbIQ+Z2liUjB/WL5KtTZbEWhnTjhj9oyu0VfQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFJmJb3qoQGtOJ7+HFLzvQiDA8Sk1MB8GA1UdIwQY
MBaAFI60QdrbvstpZdTqHwRsxcjiiBf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmIt
NDZiOTQ5MDkyY2JlLzEvbVlsdmVxaEFhMDRudjRjVXZPOUNJTUR4S1RVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmItNDZiOTQ5MDkyY2Jl
LzEvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCLpewMAwD
BAFTjtIDBABTjtQwDQYJKoZIhvcNAQELBQADggEBAGFnmIf331++CZBXbFZyvjG/
wYDWEAY9cO+0Jf0htgfqBHYnkYX2I2/eQzVcxODn0E0JadMkg45I5A5OcJDPsFaM
QiEwfmRLBc9k5gXaxIjB6X4XsoRQ3dgjoZ41ljIR/YOH2Yx872tzTw+Rd588pf2/
WuPuJ1oBze5POOotCBzt9LrBDYnhKPKUIAw75Xa+PgDonxETrfZbuEpD84vLBLqv
DKQ5Mtl4S1VTedpkEsVopiyw//aLOhazXqOYqLUQKBh7rS5gNF23FeYW5CYK4hEq
0I/uT1GlmyfhINVxmqfr4Cl0qLTek8SzI+I4cJAeohLku3dZPw6q600U2ktvTHk=
-----END CERTIFICATE-----
Generated at Mon Jul 21 08:44:03 2025 by rpki-client