Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/MivL-la5vyhW-e0gUKUfjX16ZP0.roa
File: MivL-la5vyhW-e0gUKUfjX16ZP0.roa (raw, json)
Hash identifier: /UuU2/CKLGsOmxwaxnc1Zk7q4mkAiJ+3MsGu3oUh+EM=
Subject key identifier: 32:2B:CB:FA:56:B9:BF:28:56:F9:ED:20:50:A5:1F:8D:7D:7A:64:FD
Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Certificate serial: 0198F02B92C30C9E4116267254B4E56BCE16
Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/MivL-la5vyhW-e0gUKUfjX16ZP0.roa
Signing time: Thu 28 Aug 2025 10:14:04 +0000
ROA not before: Thu 28 Aug 2025 10:14:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25211
IP address blocks: 94.26.3.0/24 maxlen: 24
94.26.38.0/24 maxlen: 24
94.26.41.0/24 maxlen: 24
94.26.42.0/24 maxlen: 24
94.26.69.0/24 maxlen: 24
94.26.88.0/24 maxlen: 24
94.26.105.0/24 maxlen: 24
192.109.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 17:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f0:2b:92:c3:0c:9e:41:16:26:72:54:b4:e5:6b:ce:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Validity
Not Before: Aug 28 10:14:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=322bcbfa56b9bf2856f9ed2050a51f8d7d7a64fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:db:e1:88:74:ec:6d:09:da:76:4f:aa:27:29:
32:d3:fd:27:0d:d7:3c:95:6d:11:91:1d:d2:14:97:
6f:14:60:b6:c2:1e:1d:7b:a3:af:74:c4:f9:12:d8:
33:16:08:ce:8e:fb:26:d2:f4:25:b2:84:f0:0a:d8:
43:51:da:cf:ea:14:da:3c:65:4a:79:88:2d:ac:c8:
94:22:75:e0:ba:08:da:fc:7d:73:36:7d:b9:6a:de:
f2:f0:73:37:5b:9c:0f:c9:89:de:23:9f:ab:b4:22:
e9:43:9e:ac:f1:c2:6d:79:6f:51:2e:90:47:d9:44:
c1:88:c9:7e:e2:00:54:76:d4:2d:ea:1f:de:d1:89:
94:94:e8:cb:33:ec:c0:16:74:56:0e:45:51:5b:47:
1f:ee:2e:94:fb:6a:6b:22:97:7f:17:80:bf:6f:91:
62:ef:95:ae:de:b1:1e:79:06:59:57:d8:03:be:c1:
9b:6e:fa:9d:ff:72:0d:c4:6b:87:4e:07:7c:a2:64:
a5:5d:e7:ff:5f:0d:c6:71:70:7e:b3:ff:84:c8:c7:
ed:72:af:b2:52:1c:72:3e:7d:16:59:cc:4e:9f:48:
56:6e:ad:4b:25:b8:40:a1:d9:fe:fb:5d:b0:41:c9:
aa:1c:89:2e:d5:d1:08:02:9a:b4:59:17:17:76:9b:
e4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2B:CB:FA:56:B9:BF:28:56:F9:ED:20:50:A5:1F:8D:7D:7A:64:FD
X509v3 Authority Key Identifier:
keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/MivL-la5vyhW-e0gUKUfjX16ZP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.26.3.0/24
94.26.38.0/24
94.26.41.0-94.26.42.255
94.26.69.0/24
94.26.88.0/24
94.26.105.0/24
192.109.138.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:7e:47:44:d6:a4:d5:9d:58:56:97:0b:b3:63:f1:ac:1a:7d:
1c:c6:97:74:b8:d2:40:fe:27:9d:53:51:6b:c0:65:b6:44:de:
94:aa:ac:a2:e4:db:cb:54:72:77:dc:fc:d6:0e:88:74:26:6b:
af:99:1c:d6:72:39:72:5a:69:4e:d6:27:a5:f9:09:b2:b0:0b:
0f:72:e5:57:86:0d:4e:e0:06:d0:a0:a0:2c:e3:1c:cb:fd:23:
3f:9c:3f:00:cf:c5:50:59:f1:d7:d4:c8:3f:6c:28:e9:81:e8:
d1:4d:42:14:9d:5a:54:c0:8e:7c:b3:f9:24:4d:f9:5a:29:34:
10:fc:30:56:50:4a:41:5b:6d:b1:f6:53:f6:61:fd:7f:63:73:
4f:79:04:25:74:7b:ea:06:5e:3e:0c:5e:8b:0f:b3:31:db:13:
c2:12:54:4c:c2:47:0b:2c:cb:a0:3d:5a:17:e8:e4:43:b4:19:
b1:e2:21:ec:c3:46:56:fc:59:9c:52:26:57:44:f0:d2:ce:53:
55:65:e6:83:ec:4a:f3:cf:a7:84:43:18:98:e5:62:5b:0e:cd:
e1:de:a1:5b:63:d7:90:be:6f:3e:b9:8d:5f:d9:00:0d:8c:c5:
b7:5a:ac:6e:8c:ed:68:f4:a4:31:0c:ea:4e:c5:a4:c3:ea:2f:
e4:d0:31:6f
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAZjwK5LDDJ5BFiZyVLTla84WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMTJlYjljNzVkMzU5ZDI1MTM3YjVlZjRlMTc2ZjVlZWI2
YzQzNDIwHhcNMjUwODI4MTAxNDA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjJiY2JmYTU2YjliZjI4NTZmOWVkMjA1MGE1MWY4ZDdkN2E2NGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdvhiHTsbQnadk+qJyky0/0nDdc8
lW0RkR3SFJdvFGC2wh4de6OvdMT5EtgzFgjOjvsm0vQlsoTwCthDUdrP6hTaPGVK
eYgtrMiUInXgugja/H1zNn25at7y8HM3W5wPyYneI5+rtCLpQ56s8cJteW9RLpBH
2UTBiMl+4gBUdtQt6h/e0YmUlOjLM+zAFnRWDkVRW0cf7i6U+2prIpd/F4C/b5Fi
75Wu3rEeeQZZV9gDvsGbbvqd/3INxGuHTgd8omSlXef/Xw3GcXB+s/+EyMftcq+y
UhxyPn0WWcxOn0hWbq1LJbhAodn++12wQcmqHIku1dEIApq0WRcXdpvkqQIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFDIry/pWub8oVvntIFClH419emT9MB8GA1UdIwQY
MBaAFN4S65x101nSUTe1704Xb17rbENCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQt
YzE2Nzg3MjcyMDQ5LzEvTWl2TC1sYTV2eWhXLWUwZ1VLVWZqWDE2WlAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQtYzE2Nzg3MjcyMDQ5
LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAXhoDAwQA
XhomMAwDBABeGikDBABeGioDBABeGkUDBABeGlgDBABeGmkDBADAbYowDQYJKoZI
hvcNAQELBQADggEBAAp+R0TWpNWdWFaXC7Nj8awafRzGl3S40kD+J51TUWvAZbZE
3pSqrKLk28tUcnfc/NYOiHQma6+ZHNZyOXJaaU7WJ6X5CbKwCw9y5VeGDU7gBtCg
oCzjHMv9Iz+cPwDPxVBZ8dfUyD9sKOmB6NFNQhSdWlTAjnyz+SRN+VopNBD8MFZQ
SkFbbbH2U/Zh/X9jc095BCV0e+oGXj4MXosPszHbE8ISVEzCRwssy6A9Whfo5EO0
GbHiIezDRlb8WZxSJldE8NLOU1Vl5oPsSvPPp4RDGJjlYlsOzeHeoVtj15C+bz65
jV/ZAA2MxbdarG6M7Wj0pDEM6k7FpMPqL+TQMW8=
-----END CERTIFICATE-----
Generated at Tue Sep 9 01:15:16 2025 by rpki-client