Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MFcvgVH5teX4GI7Lswpsk7BEmtk.roa
File: MFcvgVH5teX4GI7Lswpsk7BEmtk.roa (raw, json)
Hash identifier: HxTKDCB7Lez4kvSYUD5m4GmBhdRmtzxxb+1sLcTSV4k=
Subject key identifier: 30:57:2F:81:51:F9:B5:E5:F8:18:8E:CB:B3:0A:6C:93:B0:44:9A:D9
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019A6F2506A28C8074249774CAC69DA7102C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MFcvgVH5teX4GI7Lswpsk7BEmtk.roa
Signing time: Mon 10 Nov 2025 19:01:28 +0000
ROA not before: Mon 10 Nov 2025 19:01:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213282
IP address blocks: 93.88.201.0/24 maxlen: 24
94.177.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Nov 2025 14:56:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:6f:25:06:a2:8c:80:74:24:97:74:ca:c6:9d:a7:10:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 10 19:01:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30572f8151f9b5e5f8188ecbb30a6c93b0449ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:31:8e:31:d3:75:b7:ed:6f:6d:9a:43:03:38:
8d:06:9f:4d:ce:ab:d6:03:46:d6:62:d2:dd:36:44:
20:57:bc:0e:22:91:5b:e0:1b:2e:4f:8b:3a:14:ec:
f1:c3:b1:9a:d0:47:3e:7b:e6:17:80:2a:1b:83:e4:
c9:a3:2c:23:bd:17:b3:ab:01:5f:77:03:ae:ea:59:
6a:9b:7c:b3:e7:98:f4:17:e0:f0:42:53:db:a3:c6:
99:c1:69:60:98:20:ae:2e:ed:cb:28:9c:4f:f7:c9:
fc:8c:2f:7d:25:be:49:13:d2:9c:74:a7:88:d2:02:
3e:0b:12:7d:38:f7:44:08:9e:75:d6:e0:7a:7e:f2:
00:b5:23:78:f9:73:6c:da:d6:49:51:e8:9f:01:4e:
8c:38:9f:d1:cb:3c:e8:e8:ec:5a:e2:83:a7:e8:80:
46:3d:16:f3:f1:11:fd:65:67:2b:21:45:46:2b:e1:
b8:21:e6:d0:15:11:97:5f:5d:2e:3b:47:18:f8:14:
cb:4e:70:87:7c:d0:b9:5c:1b:f6:68:38:d3:d7:fa:
19:16:0f:d9:b7:f0:02:20:00:44:75:25:b2:08:63:
52:16:73:18:d3:23:d3:a7:12:93:bf:09:a2:ac:49:
44:5c:42:02:6d:4f:d5:69:21:d4:7f:11:f2:89:ac:
a8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:57:2F:81:51:F9:B5:E5:F8:18:8E:CB:B3:0A:6C:93:B0:44:9A:D9
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MFcvgVH5teX4GI7Lswpsk7BEmtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.201.0/24
94.177.122.0/24
Signature Algorithm: sha256WithRSAEncryption
34:ae:58:48:ff:96:c7:65:7e:5a:7d:87:7a:37:a5:55:0b:17:
fd:80:52:48:21:5e:4d:48:2f:3d:92:ef:ba:fe:ad:b9:13:83:
9a:51:a2:c6:36:fd:90:c0:12:8f:de:23:3f:19:82:92:5c:79:
1f:cf:79:11:5f:7b:5b:82:b1:0d:17:a1:df:5f:bf:d5:21:7c:
b9:4b:e0:3b:a1:db:7a:c3:c7:35:a8:f0:a3:f9:c1:ff:87:4c:
0d:96:e4:df:1c:62:c2:58:da:a5:86:e1:f9:35:22:af:d1:8e:
36:77:80:25:f6:32:9f:6a:29:c5:4e:60:08:54:40:b7:f0:66:
32:e1:0e:dc:45:ee:16:cf:0c:a0:5b:bb:84:2a:46:5d:64:06:
3c:7f:23:68:77:cd:0a:74:19:07:9b:89:a9:a7:3b:9d:54:b1:
1b:80:bb:c4:a9:03:f0:c4:ee:7b:8f:11:cf:32:8e:13:a1:5d:
1f:e4:40:c7:e8:25:0f:d3:44:5c:25:27:fb:19:70:7e:c3:c0:
92:2d:31:f9:bc:57:00:79:cb:e1:8c:93:88:12:0b:2c:2c:67:
0e:55:78:74:ee:b3:f0:b8:21:fa:28:9d:b7:82:c9:14:57:de:
56:c0:49:5b:9a:e3:d2:50:96:ed:cd:36:ce:52:d9:86:1f:fe:
d6:8b:7c:2e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZpvJQaijIB0JJd0ysadpxAsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUxMTEwMTkwMTI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDU3MmY4MTUxZjliNWU1ZjgxODhlY2JiMzBhNmM5M2IwNDQ5YWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTGOMdN1t+1vbZpDAziNBp9NzqvW
A0bWYtLdNkQgV7wOIpFb4BsuT4s6FOzxw7Ga0Ec+e+YXgCobg+TJoywjvRezqwFf
dwOu6llqm3yz55j0F+DwQlPbo8aZwWlgmCCuLu3LKJxP98n8jC99Jb5JE9KcdKeI
0gI+CxJ9OPdECJ511uB6fvIAtSN4+XNs2tZJUeifAU6MOJ/Ryzzo6Oxa4oOn6IBG
PRbz8RH9ZWcrIUVGK+G4IebQFRGXX10uO0cY+BTLTnCHfNC5XBv2aDjT1/oZFg/Z
t/ACIABEdSWyCGNSFnMY0yPTpxKTvwmirElEXEICbU/VaSHUfxHyiayoLQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDBXL4FR+bXl+BiOy7MKbJOwRJrZMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvTUZjdmdWSDV0ZVg0R0k3THN3cHNrN0JFbXRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXVjJAwQA
XrF6MA0GCSqGSIb3DQEBCwUAA4IBAQA0rlhI/5bHZX5afYd6N6VVCxf9gFJIIV5N
SC89ku+6/q25E4OaUaLGNv2QwBKP3iM/GYKSXHkfz3kRX3tbgrENF6HfX7/VIXy5
S+A7odt6w8c1qPCj+cH/h0wNluTfHGLCWNqlhuH5NSKv0Y42d4Al9jKfainFTmAI
VEC38GYy4Q7cRe4WzwygW7uEKkZdZAY8fyNod80KdBkHm4mppzudVLEbgLvEqQPw
xO57jxHPMo4ToV0f5EDH6CUP00RcJSf7GXB+w8CSLTH5vFcAecvhjJOIEgssLGcO
VXh07rPwuCH6KJ23gskUV95WwElbmuPSUJbtzTbOUtmGH/7Wi3wu
-----END CERTIFICATE-----
Generated at Mon Nov 17 18:07:38 2025 by rpki-client