Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/e-MtPgvXf9TMD6AQT6xVlb5-tKw.roa
File: e-MtPgvXf9TMD6AQT6xVlb5-tKw.roa (raw, json)
Hash identifier: ZhGyG48OfYzWOI1fUa8RuQTHe0urOKcyCwaxAUpZZKs=
Subject key identifier: 7B:E3:2D:3E:0B:D7:7F:D4:CC:0F:A0:10:4F:AC:55:95:BE:7E:B4:AC
Certificate issuer: /CN=810e50f8be21e6556a2a3b5e60e1de765ae02d4e
Certificate serial: 0198F0782190D61EA0C1A04C4365CB227B54
Authority key identifier: 81:0E:50:F8:BE:21:E6:55:6A:2A:3B:5E:60:E1:DE:76:5A:E0:2D:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/e-MtPgvXf9TMD6AQT6xVlb5-tKw.roa
Signing time: Thu 28 Aug 2025 11:37:41 +0000
ROA not before: Thu 28 Aug 2025 11:37:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 185.87.134.0/24 maxlen: 24
2a05:c341::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Sep 2025 18:42:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f0:78:21:90:d6:1e:a0:c1:a0:4c:43:65:cb:22:7b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810e50f8be21e6556a2a3b5e60e1de765ae02d4e
Validity
Not Before: Aug 28 11:37:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7be32d3e0bd77fd4cc0fa0104fac5595be7eb4ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f3:c5:2e:e1:23:8b:ab:d8:da:cd:85:4b:95:
34:fb:96:9c:55:ac:96:7e:a8:5d:1b:b2:48:57:af:
85:b3:be:17:0b:ab:af:d5:2a:b2:c9:75:fa:fc:a1:
59:e5:54:77:c1:3e:de:d7:5b:c1:63:59:6f:31:e2:
26:18:66:a4:c6:9e:6d:0d:34:ff:f3:f9:c2:9d:b7:
bc:dc:c4:cf:10:e8:fa:52:e5:4e:4b:37:cd:af:03:
55:fd:9f:67:2d:9e:d2:76:6e:61:36:76:92:4f:6b:
f5:af:76:19:ba:7d:d9:1f:c5:f5:5a:33:3c:17:22:
a1:e4:02:4c:01:0e:6a:92:11:a2:de:ae:5c:7e:ea:
f8:25:d4:20:f1:7b:e5:be:86:c1:80:61:d8:5e:1f:
c7:c0:3a:e1:83:12:93:32:a0:9b:e6:e1:1a:fc:d2:
66:44:bb:53:3f:b9:97:08:6a:f4:bd:da:c2:02:0a:
2c:5f:75:bf:1a:f4:01:1d:dd:85:cd:fe:30:be:86:
ac:ec:ab:f8:05:82:fb:dd:b6:fb:c1:be:0f:2c:f8:
2f:a9:90:8d:b8:fb:a9:98:9a:58:5e:62:49:09:9f:
96:8b:c5:d3:20:94:48:28:63:f9:49:29:aa:4d:3d:
a9:cc:e3:6e:27:b0:c4:b3:7c:f7:6f:68:4c:e6:00:
f0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E3:2D:3E:0B:D7:7F:D4:CC:0F:A0:10:4F:AC:55:95:BE:7E:B4:AC
X509v3 Authority Key Identifier:
keyid:81:0E:50:F8:BE:21:E6:55:6A:2A:3B:5E:60:E1:DE:76:5A:E0:2D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/e-MtPgvXf9TMD6AQT6xVlb5-tKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.87.134.0/24
IPv6:
2a05:c341::/48
Signature Algorithm: sha256WithRSAEncryption
75:04:10:6b:89:47:1b:ad:50:13:05:7f:b5:a8:63:49:76:48:
99:3b:56:b3:0d:30:04:e0:a9:7d:7f:79:8f:b5:bf:ec:5f:6c:
f6:98:7a:24:9a:c6:46:ea:25:86:6b:ec:b4:84:07:a2:97:5a:
f8:0d:f4:eb:ea:cb:c3:9b:cf:95:2c:a2:82:d8:84:39:7b:e6:
ce:73:56:b3:14:48:7f:6c:0a:14:13:42:65:93:b5:30:02:b7:
c2:1b:ec:50:b9:18:b7:31:d1:87:a9:2e:e3:5b:46:d5:ec:ee:
18:bb:71:2e:b8:df:09:8b:f3:9a:ca:7b:00:f8:d8:f7:a0:5b:
62:0c:1b:34:ca:b6:68:6f:d2:c3:bd:cd:a8:42:4e:e5:da:17:
b0:4f:0a:8c:44:b0:61:5b:c5:5d:b3:fb:24:a4:79:df:83:ba:
24:f2:40:47:02:9a:5d:6f:f8:02:58:1d:17:64:e0:cb:3c:1e:
8d:62:ff:da:f3:8c:1f:b5:f3:ed:ae:ae:6f:54:e1:c8:cc:56:
ff:52:8d:1e:9f:94:b0:00:df:a1:a2:d1:3b:35:16:3f:b5:17:
ae:f7:2a:3c:23:60:f0:f6:a3:42:9a:f0:e6:bf:c9:61:18:65:
92:ed:c9:6b:7a:08:a5:cc:c8:1f:7c:33:bb:a7:aa:79:0a:e8:
2c:7e:9c:d6
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZjweCGQ1h6gwaBMQ2XLIntUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMGU1MGY4YmUyMWU2NTU2YTJhM2I1ZTYwZTFkZTc2NWFl
MDJkNGUwHhcNMjUwODI4MTEzNzQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmUzMmQzZTBiZDc3ZmQ0Y2MwZmEwMTA0ZmFjNTU5NWJlN2ViNGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPPFLuEji6vY2s2FS5U0+5acVayW
fqhdG7JIV6+Fs74XC6uv1SqyyXX6/KFZ5VR3wT7e11vBY1lvMeImGGakxp5tDTT/
8/nCnbe83MTPEOj6UuVOSzfNrwNV/Z9nLZ7Sdm5hNnaST2v1r3YZun3ZH8X1WjM8
FyKh5AJMAQ5qkhGi3q5cfur4JdQg8XvlvobBgGHYXh/HwDrhgxKTMqCb5uEa/NJm
RLtTP7mXCGr0vdrCAgosX3W/GvQBHd2Fzf4wvoas7Kv4BYL73bb7wb4PLPgvqZCN
uPupmJpYXmJJCZ+Wi8XTIJRIKGP5SSmqTT2pzONuJ7DEs3z3b2hM5gDw1QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHvjLT4L13/UzA+gEE+sVZW+frSsMB8GA1UdIwQY
MBaAFIEOUPi+IeZVaio7XmDh3nZa4C1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1E1US1MNGg1bFZxS2p0ZVlPSGVkbHJnTFU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84ODBkZjQtZTMzNC00YTc3LThmNGEt
N2RmZGU4YjEyZTJjLzEvZS1NdFBndlhmOVRNRDZBUVQ2eFZsYjUtdEt3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84ODBkZjQtZTMzNC00YTc3LThmNGEtN2RmZGU4YjEyZTJj
LzEvZ1E1US1MNGg1bFZxS2p0ZVlPSGVkbHJnTFU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuVeGMA8E
AgACMAkDBwAqBcNBAAAwDQYJKoZIhvcNAQELBQADggEBAHUEEGuJRxutUBMFf7Wo
Y0l2SJk7VrMNMATgqX1/eY+1v+xfbPaYeiSaxkbqJYZr7LSEB6KXWvgN9Ovqy8Ob
z5UsooLYhDl75s5zVrMUSH9sChQTQmWTtTACt8Ib7FC5GLcx0YepLuNbRtXs7hi7
cS643wmL85rKewD42PegW2IMGzTKtmhv0sO9zahCTuXaF7BPCoxEsGFbxV2z+ySk
ed+DuiTyQEcCml1v+AJYHRdk4Ms8Ho1i/9rzjB+18+2urm9U4cjMVv9SjR6flLAA
36Gi0Ts1Fj+1F673KjwjYPD2o0Ka8Oa/yWEYZZLtyWt6CKXMyB98M7unqnkK6Cx+
nNY=
-----END CERTIFICATE-----
Generated at Thu Sep 4 00:00:17 2025 by rpki-client