Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_mPfa2GHFlT5KVsrJ__NYp0xih0.roa
File: _mPfa2GHFlT5KVsrJ__NYp0xih0.roa (raw, json)
Hash identifier: G+qbewRNRFbNYaLpodGk/v4UJID5LFGN5Ji0H4OQNO8=
Subject key identifier: FE:63:DF:6B:61:87:16:54:F9:29:5B:2B:27:FF:CD:62:9D:31:8A:1D
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01999EF07A2D6CFF7B9144ED625E94ABE357
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_mPfa2GHFlT5KVsrJ__NYp0xih0.roa
Signing time: Wed 01 Oct 2025 08:43:03 +0000
ROA not before: Wed 01 Oct 2025 08:43:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210538
IP address blocks: 82.153.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9e:f0:7a:2d:6c:ff:7b:91:44:ed:62:5e:94:ab:e3:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 1 08:43:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe63df6b61871654f9295b2b27ffcd629d318a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:26:02:bb:1a:53:d6:a4:40:f0:98:c4:3a:6e:
82:92:00:ed:13:a5:ea:22:2f:84:21:9a:4f:63:7f:
56:91:1c:40:ba:be:89:39:84:b7:97:c9:50:a1:8d:
bd:84:1a:62:15:79:f6:1b:b9:b5:78:e7:44:4f:d0:
46:53:a6:34:49:2a:2d:bc:48:c7:71:58:d0:50:c9:
a6:fb:4b:b2:e9:11:02:f4:82:d1:70:ee:90:3c:33:
0f:f9:d3:06:3b:64:a8:d0:64:b6:dd:82:1e:ed:a1:
46:d7:2f:6c:99:eb:84:92:f6:78:c6:20:62:0d:25:
75:94:d5:5c:99:ab:33:0e:a0:67:01:5a:68:a3:18:
fe:3e:c8:3e:82:f9:9f:27:ff:f0:41:8e:9c:f1:1d:
f2:4e:60:b8:b5:5e:1b:9f:19:86:e1:34:4d:d3:0c:
4a:be:a7:b3:08:49:26:c2:e9:38:39:29:0b:26:8e:
e5:86:30:26:8c:1d:e9:28:83:10:17:b4:71:9c:fd:
3e:ee:22:14:54:83:2c:f3:ec:77:fe:df:26:0a:fd:
91:55:89:d3:67:8c:0c:9c:36:11:d7:d1:ff:99:71:
b8:af:9f:4b:9d:66:5c:55:24:57:c8:50:20:9d:ab:
ed:6d:55:dc:82:86:14:7d:40:cf:5f:e0:ce:08:00:
ff:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:63:DF:6B:61:87:16:54:F9:29:5B:2B:27:FF:CD:62:9D:31:8A:1D
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_mPfa2GHFlT5KVsrJ__NYp0xih0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.241.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:c0:c8:44:c6:f6:16:4b:67:3f:cd:6a:87:04:e4:40:9b:67:
f2:3e:22:03:a0:1e:35:eb:00:03:96:69:fd:8b:75:91:63:fb:
3f:83:69:d7:9a:5f:c1:35:97:52:a1:1d:65:ec:87:75:26:16:
b5:48:11:62:f1:21:c7:74:3e:55:39:f7:c0:b9:89:ee:24:d8:
75:32:e7:47:00:1e:74:36:58:12:e9:4a:e7:24:ff:26:f5:dd:
cd:5d:06:91:7b:8f:38:29:1f:e2:12:cb:e7:2f:d7:c9:39:43:
11:64:33:29:3e:5d:b5:6c:b2:d7:fe:6f:72:f6:24:e4:dc:51:
a2:15:2e:eb:57:0b:f9:ff:c5:0a:14:6d:b3:73:6f:55:02:61:
ae:66:79:b9:01:15:17:5d:10:8c:25:86:b0:da:c7:87:7e:c3:
62:8b:5a:2b:e4:3c:06:9b:4f:6f:e0:b2:25:64:31:29:84:6d:
b0:93:28:4d:fb:06:3b:dd:17:22:ac:d7:8c:0f:4e:1d:70:6f:
05:62:0d:04:ec:96:01:24:b6:4f:69:b3:a5:82:58:12:7c:4e:
e6:6a:7c:eb:cc:12:01:18:fb:0f:1c:fd:af:9f:65:ef:3c:6f:
3f:e6:56:e1:6f:6c:df:dd:05:d8:ed:32:d6:5f:7e:7d:1b:a1:
cf:15:f9:8f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZme8HotbP97kUTtYl6Uq+NXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUxMDAxMDg0MzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTYzZGY2YjYxODcxNjU0ZjkyOTViMmIyN2ZmY2Q2MjlkMzE4YTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiYCuxpT1qRA8JjEOm6CkgDtE6Xq
Ii+EIZpPY39WkRxAur6JOYS3l8lQoY29hBpiFXn2G7m1eOdET9BGU6Y0SSotvEjH
cVjQUMmm+0uy6REC9ILRcO6QPDMP+dMGO2So0GS23YIe7aFG1y9smeuEkvZ4xiBi
DSV1lNVcmaszDqBnAVpooxj+Psg+gvmfJ//wQY6c8R3yTmC4tV4bnxmG4TRN0wxK
vqezCEkmwuk4OSkLJo7lhjAmjB3pKIMQF7RxnP0+7iIUVIMs8+x3/t8mCv2RVYnT
Z4wMnDYR19H/mXG4r59LnWZcVSRXyFAgnavtbVXcgoYUfUDPX+DOCAD/0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP5j32thhxZU+SlbKyf/zWKdMYodMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvX21QZmEyR0hGbFQ1S1ZzckpfX05ZcDB4aWgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpnxMA0G
CSqGSIb3DQEBCwUAA4IBAQBdwMhExvYWS2c/zWqHBORAm2fyPiIDoB416wADlmn9
i3WRY/s/g2nXml/BNZdSoR1l7Id1Jha1SBFi8SHHdD5VOffAuYnuJNh1MudHAB50
NlgS6UrnJP8m9d3NXQaRe484KR/iEsvnL9fJOUMRZDMpPl21bLLX/m9y9iTk3FGi
FS7rVwv5/8UKFG2zc29VAmGuZnm5ARUXXRCMJYaw2seHfsNii1or5DwGm09v4LIl
ZDEphG2wkyhN+wY73RcirNeMD04dcG8FYg0E7JYBJLZPabOlglgSfE7manzrzBIB
GPsPHP2vn2XvPG8/5lbhb2zf3QXY7TLWX359G6HPFfmP
-----END CERTIFICATE-----
Generated at Thu Oct 9 01:28:02 2025 by rpki-client