Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/mRm5Pcaeh7ARiuQSZaTaFIQzlV4.roa
File: mRm5Pcaeh7ARiuQSZaTaFIQzlV4.roa (raw, json)
Hash identifier: SRjDoFDtCZGIa81wKDyuCO8n9PzLXPSishWYuw7XCOM=
Subject key identifier: 99:19:B9:3D:C6:9E:87:B0:11:8A:E4:12:65:A4:DA:14:84:33:95:5E
Certificate issuer: /CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4
Certificate serial: 0199003D8721E4AF2A9EC0177B060A7C7671
Authority key identifier: 95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/mRm5Pcaeh7ARiuQSZaTaFIQzlV4.roa
Signing time: Sun 31 Aug 2025 13:07:36 +0000
ROA not before: Sun 31 Aug 2025 13:07:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29690
IP address blocks: 83.101.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:00:3d:87:21:e4:af:2a:9e:c0:17:7b:06:0a:7c:76:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4
Validity
Not Before: Aug 31 13:07:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9919b93dc69e87b0118ae41265a4da148433955e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:13:e7:dd:57:8f:c1:5f:dc:9c:25:d8:d6:66:
d8:f9:8a:6b:08:79:44:b2:0d:66:df:43:55:55:2c:
b3:cd:5e:8c:3b:bf:25:e1:9b:b9:f3:f7:38:f7:ad:
38:a2:55:75:da:aa:8b:ce:65:08:16:dc:49:a7:81:
71:ff:86:29:4c:91:46:83:d1:ab:28:be:b6:40:27:
46:b7:9d:71:0f:fd:3a:e5:16:bc:eb:97:a3:22:39:
97:75:ef:6b:6b:5f:3e:82:47:69:3c:10:58:65:fd:
23:92:87:f4:b4:8f:5a:09:d8:b5:9f:24:a3:b0:db:
81:45:05:45:73:56:94:14:1c:c6:35:dd:bf:ed:1b:
47:92:db:f3:ab:8f:51:51:c9:da:92:39:95:6e:51:
93:14:91:39:74:dc:19:c3:47:f1:64:16:0b:aa:16:
53:7b:ff:17:8b:45:50:a8:5f:70:17:1a:36:ba:17:
31:f1:8b:82:04:fe:33:a8:41:f6:39:39:d8:1e:f4:
f8:4d:b1:f7:60:b7:a5:88:18:61:18:1d:8e:be:ac:
e9:18:c5:b2:0a:f6:2d:ec:d6:8a:c0:ab:ae:5e:11:
b0:d1:de:cf:5e:1a:e0:e0:01:bf:31:a3:b9:08:be:
3f:38:95:3d:36:52:46:a0:04:3b:3e:7e:4d:74:03:
d5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:19:B9:3D:C6:9E:87:B0:11:8A:E4:12:65:A4:DA:14:84:33:95:5E
X509v3 Authority Key Identifier:
keyid:95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/mRm5Pcaeh7ARiuQSZaTaFIQzlV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.101.166.0/24
Signature Algorithm: sha256WithRSAEncryption
59:76:48:5d:b4:45:95:f4:e5:77:e7:21:40:0e:77:fe:14:a1:
6a:b3:37:28:d0:2f:63:91:57:b0:8f:35:9f:a0:3c:2f:2b:51:
6d:3e:5f:7a:f8:e6:4d:b8:d6:59:1d:c2:ee:84:74:ba:b8:c3:
3b:86:79:05:e5:00:52:ca:b1:98:4d:29:e8:53:b9:df:da:e4:
11:ed:cc:ba:35:a9:bb:e3:0d:6d:7a:bc:f4:26:4a:7b:f9:95:
c0:72:e3:5c:dd:dd:54:a8:2f:35:bb:9f:4d:70:d5:17:62:ea:
04:9d:74:5c:64:4f:ad:88:fa:a9:27:73:68:f0:10:d4:69:88:
a3:49:05:cf:1f:5f:9d:40:bc:97:7d:09:d4:95:c0:c7:4c:f8:
ff:74:8e:71:2f:fe:13:dc:a4:3f:3c:7a:ac:4d:d4:cb:e0:95:
fa:1b:d1:00:91:5d:fb:8f:c6:61:a2:7d:85:6d:96:41:10:1a:
5a:da:cc:03:02:00:4e:25:3d:2e:f0:96:f8:7a:82:1f:1e:33:
77:94:65:b0:37:fb:0c:b9:0c:88:ab:86:9b:1e:09:92:99:6b:
8b:9e:e6:80:ab:b8:47:af:07:fa:e9:89:53:24:3e:f5:7d:d4:
5f:c4:72:df:7c:96:9e:ed:09:20:f1:bb:00:27:35:d6:34:96:
e8:7d:e0:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZkAPYch5K8qnsAXewYKfHZxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MjFhMjYyZjUwNzVlMjRiMmIzYzliNjljOGFmNDBlMjk4
OGExZTQwHhcNMjUwODMxMTMwNzM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTE5YjkzZGM2OWU4N2IwMTE4YWU0MTI2NWE0ZGExNDg0MzM5NTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthPn3VePwV/cnCXY1mbY+YprCHlE
sg1m30NVVSyzzV6MO78l4Zu58/c49604olV12qqLzmUIFtxJp4Fx/4YpTJFGg9Gr
KL62QCdGt51xD/065Ra865ejIjmXde9ra18+gkdpPBBYZf0jkof0tI9aCdi1nySj
sNuBRQVFc1aUFBzGNd2/7RtHktvzq49RUcnakjmVblGTFJE5dNwZw0fxZBYLqhZT
e/8Xi0VQqF9wFxo2uhcx8YuCBP4zqEH2OTnYHvT4TbH3YLeliBhhGB2OvqzpGMWy
CvYt7NaKwKuuXhGw0d7PXhrg4AG/MaO5CL4/OJU9NlJGoAQ7Pn5NdAPV+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJkZuT3GnoewEYrkEmWk2hSEM5VeMB8GA1UdIwQY
MBaAFJUhomL1B14ksrPJtpyK9A4piKHkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFNHaVl2VUhYaVN5czhtMm5JcjBEaW1Jb2VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9jMWYyMGUtZDk0Zi00M2M1LWJiOGQt
YWQzNjI5YjIwMmMwLzEvbVJtNVBjYWVoN0FSaXVRU1phVGFGSVF6bFY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9jMWYyMGUtZDk0Zi00M2M1LWJiOGQtYWQzNjI5YjIwMmMw
LzEvbFNHaVl2VUhYaVN5czhtMm5JcjBEaW1Jb2VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU2WmMA0G
CSqGSIb3DQEBCwUAA4IBAQBZdkhdtEWV9OV35yFADnf+FKFqszco0C9jkVewjzWf
oDwvK1FtPl96+OZNuNZZHcLuhHS6uMM7hnkF5QBSyrGYTSnoU7nf2uQR7cy6Nam7
4w1terz0Jkp7+ZXAcuNc3d1UqC81u59NcNUXYuoEnXRcZE+tiPqpJ3No8BDUaYij
SQXPH1+dQLyXfQnUlcDHTPj/dI5xL/4T3KQ/PHqsTdTL4JX6G9EAkV37j8Zhon2F
bZZBEBpa2swDAgBOJT0u8Jb4eoIfHjN3lGWwN/sMuQyIq4abHgmSmWuLnuaAq7hH
rwf66YlTJD71fdRfxHLffJae7Qkg8bsAJzXWNJbofeCy
-----END CERTIFICATE-----
Generated at Sat Sep 6 15:02:39 2025 by rpki-client