Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/MxATlJUaw4Gk_IX3JJvf-FvdKtg.roa
File: MxATlJUaw4Gk_IX3JJvf-FvdKtg.roa (raw, json)
Hash identifier: QJhW9a+BARvMM3cABQqz6dn3YgNSVvzFXTl6jFrNBqI=
Subject key identifier: 33:10:13:94:95:1A:C3:81:A4:FC:85:F7:24:9B:DF:F8:5B:DD:2A:D8
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0198F6A441F409B5B64DEBA7640E61293BEF
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/MxATlJUaw4Gk_IX3JJvf-FvdKtg.roa
Signing time: Fri 29 Aug 2025 16:23:36 +0000
ROA not before: Fri 29 Aug 2025 16:23:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207569
IP address blocks: 46.243.1.0/24 maxlen: 24
46.243.4.0/24 maxlen: 24
46.243.6.0/24 maxlen: 24
89.44.86.0/24 maxlen: 24
89.44.87.0/24 maxlen: 24
95.81.113.0/24 maxlen: 24
95.81.126.0/24 maxlen: 24
95.81.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f6:a4:41:f4:09:b5:b6:4d:eb:a7:64:0e:61:29:3b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Aug 29 16:23:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33101394951ac381a4fc85f7249bdff85bdd2ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e1:c8:2f:ad:1e:6b:b6:f8:f0:e1:b9:c3:d3:
3b:d9:7b:f2:bd:0b:45:b6:03:91:d7:e8:16:a6:e1:
bc:ea:99:e8:e6:f5:56:94:e0:df:57:e5:fa:02:ed:
3a:68:b9:39:52:84:fd:a4:f3:3e:f5:03:ef:88:3c:
89:ec:48:6b:59:a9:82:4b:ce:80:86:c2:3a:33:2c:
a9:a1:4a:48:e0:df:07:45:c6:39:27:81:19:c0:95:
cd:27:06:ce:74:eb:77:40:8a:0c:54:63:46:ee:b9:
7b:81:fd:e3:c4:0e:1a:6f:0c:46:87:af:e7:08:b1:
6b:96:2c:98:2a:f0:6f:d6:33:90:db:30:a6:f2:d5:
53:0d:8a:21:4b:81:f3:7f:6f:ad:c7:87:3f:60:a6:
be:42:6a:0f:75:3e:68:7d:d0:40:ba:bb:7f:4d:58:
10:1b:ba:bb:47:4c:8c:ce:8b:ca:a6:bb:c1:16:e3:
9d:fc:0b:82:6e:55:f3:4e:10:cf:2c:9a:40:70:72:
a9:f0:e9:9c:32:5a:8c:3c:e7:31:a4:00:b3:a8:85:
5c:10:5e:4a:21:33:de:5e:f6:cf:55:0b:00:16:8d:
e4:e3:4b:40:4e:47:b2:ec:cd:9c:b0:bf:ae:82:3c:
92:d4:44:62:2e:9b:6e:1d:b5:b9:b4:40:3d:e5:21:
0b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:10:13:94:95:1A:C3:81:A4:FC:85:F7:24:9B:DF:F8:5B:DD:2A:D8
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/MxATlJUaw4Gk_IX3JJvf-FvdKtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.1.0/24
46.243.4.0/24
46.243.6.0/24
89.44.86.0/23
95.81.113.0/24
95.81.126.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:5b:97:47:28:56:82:6c:65:42:ce:1b:91:ad:27:fd:c2:cf:
44:cd:99:8a:81:32:5e:b5:d5:52:84:19:88:dd:0a:ec:a9:d7:
a7:e5:64:01:f3:32:a2:d5:f0:ff:81:2b:3f:dd:c2:bf:17:06:
4a:31:e7:0c:b7:5c:fa:7f:96:41:4c:c2:8e:91:2c:1b:af:46:
02:45:d6:21:ac:b7:42:56:9d:49:ec:9b:33:6b:2d:47:99:19:
1b:6b:af:92:3d:29:9c:41:20:9a:ae:91:8d:96:d7:ce:33:6d:
59:50:d4:61:0c:45:16:7f:a2:35:c8:55:5e:d6:07:77:25:5c:
e4:c9:14:a2:2d:96:97:01:74:4c:30:e7:57:04:7f:97:56:19:
e3:68:cd:9d:32:90:15:ff:a5:44:05:ad:4e:8b:25:89:db:2f:
11:31:16:41:5d:2e:8d:35:32:3d:e1:6e:2a:7e:fe:41:e9:c2:
1d:4e:7a:cf:a9:5c:1a:db:41:c0:1a:38:90:b2:44:86:61:74:
26:29:0e:b8:96:36:1f:5b:d3:2a:7e:90:26:0d:cc:d5:2b:ba:
33:dc:7a:58:d3:9b:4c:d9:fb:5d:06:86:c1:f9:cb:44:26:82:
19:af:3a:a4:ea:ec:b6:fa:7b:97:16:14:86:b7:41:b9:ef:50:
3b:a0:2e:92
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZj2pEH0CbW2TeunZA5hKTvvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx
ZmE4MzkwHhcNMjUwODI5MTYyMzM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzEwMTM5NDk1MWFjMzgxYTRmYzg1ZjcyNDliZGZmODViZGQyYWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeHIL60ea7b48OG5w9M72XvyvQtF
tgOR1+gWpuG86pno5vVWlODfV+X6Au06aLk5UoT9pPM+9QPviDyJ7EhrWamCS86A
hsI6MyypoUpI4N8HRcY5J4EZwJXNJwbOdOt3QIoMVGNG7rl7gf3jxA4abwxGh6/n
CLFrliyYKvBv1jOQ2zCm8tVTDYohS4Hzf2+tx4c/YKa+QmoPdT5ofdBAurt/TVgQ
G7q7R0yMzovKprvBFuOd/AuCblXzThDPLJpAcHKp8OmcMlqMPOcxpACzqIVcEF5K
ITPeXvbPVQsAFo3k40tATkey7M2csL+ugjyS1ERiLptuHbW5tEA95SELlwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFDMQE5SVGsOBpPyF9ySb3/hb3SrYMB8GA1UdIwQY
MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt
MzA0OTVmNDAzNzg0LzEvTXhBVGxKVWF3NEdrX0lYM0pKdmYtRnZkS3RnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0
LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQALvMBAwQA
LvMEAwQALvMGAwQBWSxWAwQAX1FxAwQBX1F+MA0GCSqGSIb3DQEBCwUAA4IBAQCN
W5dHKFaCbGVCzhuRrSf9ws9EzZmKgTJetdVShBmI3Qrsqden5WQB8zKi1fD/gSs/
3cK/FwZKMecMt1z6f5ZBTMKOkSwbr0YCRdYhrLdCVp1J7Jszay1HmRkba6+SPSmc
QSCarpGNltfOM21ZUNRhDEUWf6I1yFVe1gd3JVzkyRSiLZaXAXRMMOdXBH+XVhnj
aM2dMpAV/6VEBa1OiyWJ2y8RMRZBXS6NNTI94W4qfv5B6cIdTnrPqVwa20HAGjiQ
skSGYXQmKQ64ljYfW9MqfpAmDczVK7oz3HpY05tM2ftdBobB+ctEJoIZrzqk6uy2
+nuXFhSGt0G571A7oC6S
-----END CERTIFICATE-----
Generated at Sat Sep 6 17:19:11 2025 by rpki-client