Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/pMqUwUEJddGWKKqQVHPSNc54I3U.roa
File: pMqUwUEJddGWKKqQVHPSNc54I3U.roa (raw, json)
Hash identifier: 9otKMlkOWPjl+ohEgrVjfmE34jwVivopD8ptau8msv8=
Subject key identifier: A4:CA:94:C1:41:09:75:D1:96:28:AA:90:54:73:D2:35:CE:78:23:75
Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Certificate serial: 019A48F84B43AD8E056E8B742765A5FD0C20
Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/pMqUwUEJddGWKKqQVHPSNc54I3U.roa
Signing time: Mon 03 Nov 2025 09:07:03 +0000
ROA not before: Mon 03 Nov 2025 09:07:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29752
IP address blocks: 104.166.158.0/24 maxlen: 24
2a0b:21c1:601c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 15:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:48:f8:4b:43:ad:8e:05:6e:8b:74:27:65:a5:fd:0c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Validity
Not Before: Nov 3 09:07:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4ca94c1410975d19628aa905473d235ce782375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:33:7e:5d:f9:9b:f1:92:7e:d6:ea:84:df:6e:
b2:02:98:00:5c:3b:42:4b:3f:f0:d7:ce:7b:8c:2d:
0e:d1:ff:63:2d:c1:aa:57:ab:7b:17:73:48:4d:fa:
98:56:a8:c7:ee:cc:28:9e:f3:42:ff:a1:08:25:2a:
b5:28:04:87:06:46:33:1e:07:c2:e5:a3:b5:71:1b:
ff:4a:8c:30:c4:e7:eb:40:a4:de:23:62:05:70:c8:
cf:a7:a4:5c:17:f5:01:a2:24:87:8d:ce:69:2b:df:
b1:a6:9f:c0:f6:af:85:da:86:56:1a:7c:47:e3:e3:
5e:8c:0f:b3:3b:56:54:40:c4:d3:6d:30:fa:3a:c2:
27:ba:23:1a:82:9c:61:b9:0c:fd:e6:d4:19:87:ea:
13:b6:6c:4f:a9:12:b9:32:ce:9e:7d:79:df:33:34:
30:9c:98:eb:38:83:35:f7:82:6d:d4:82:4c:32:f2:
2e:72:54:3a:8b:b2:1a:93:4a:58:9c:82:ce:06:67:
9a:16:2d:13:b3:e3:c1:7e:4e:72:74:62:97:d8:75:
71:ab:24:8f:f7:88:6d:5a:ac:92:d2:fc:77:b5:ca:
f6:23:1b:4a:3b:d1:51:a4:62:87:25:a6:90:00:d4:
33:a9:75:e4:3a:31:a8:17:e4:ce:70:7c:c9:27:68:
80:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:CA:94:C1:41:09:75:D1:96:28:AA:90:54:73:D2:35:CE:78:23:75
X509v3 Authority Key Identifier:
keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/pMqUwUEJddGWKKqQVHPSNc54I3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.166.158.0/24
IPv6:
2a0b:21c1:601c::/48
Signature Algorithm: sha256WithRSAEncryption
a7:c6:96:72:bc:9f:56:0b:ba:a9:5d:d8:b6:a4:30:55:20:e1:
bf:7e:ee:08:1a:f9:12:69:22:f5:d2:76:da:3a:b3:4c:6e:85:
1e:74:a0:82:e3:30:3f:9f:54:e0:14:79:f8:35:4b:70:ba:72:
b8:00:ab:e8:a8:b9:f4:78:dc:e0:2f:0d:93:46:a8:f1:ac:2a:
97:cd:74:f2:b5:f9:05:77:80:93:75:c5:1a:bf:bc:bd:9c:40:
3a:d1:9f:38:cc:b4:14:8d:56:43:a0:37:02:47:b1:30:59:cf:
10:79:b2:2d:bb:7c:a2:b6:36:f9:63:0a:a0:71:6b:6c:92:24:
ab:92:29:4f:c8:ed:68:4f:a0:42:e3:19:9e:74:9a:86:a6:51:
31:59:4f:f4:32:9b:e5:a7:b4:29:bd:19:bc:b0:bb:8a:18:f2:
e0:40:4b:86:36:9e:f6:e8:dc:90:01:f2:b2:c5:33:de:22:e3:
a6:f3:ea:7e:f4:53:f6:f8:f8:87:17:f0:3d:9b:f3:3f:77:ea:
41:07:43:fb:ce:88:12:54:d9:0b:20:4e:61:86:f4:20:9c:7f:
15:a4:ae:08:f6:3b:f6:9d:97:ad:d5:97:9c:02:d3:f6:71:36:
b3:6c:3a:25:26:c4:7d:61:52:6c:ad:63:fc:03:f4:5d:9c:41:
93:11:3e:97
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZpI+EtDrY4Fbot0J2Wl/QwgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1Nzc2Yzc3ZjhlYmU3MDk0Y2EwMDdhY2UxYTljMGJmZGMy
YjNhZWMwHhcNMjUxMTAzMDkwNzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNGNhOTRjMTQxMDk3NWQxOTYyOGFhOTA1NDczZDIzNWNlNzgyMzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DN+Xfmb8ZJ+1uqE326yApgAXDtC
Sz/w1857jC0O0f9jLcGqV6t7F3NITfqYVqjH7swonvNC/6EIJSq1KASHBkYzHgfC
5aO1cRv/SowwxOfrQKTeI2IFcMjPp6RcF/UBoiSHjc5pK9+xpp/A9q+F2oZWGnxH
4+NejA+zO1ZUQMTTbTD6OsInuiMagpxhuQz95tQZh+oTtmxPqRK5Ms6efXnfMzQw
nJjrOIM194Jt1IJMMvIuclQ6i7Iak0pYnILOBmeaFi0Ts+PBfk5ydGKX2HVxqySP
94htWqyS0vx3tcr2IxtKO9FRpGKHJaaQANQzqXXkOjGoF+TOcHzJJ2iAEQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKTKlMFBCXXRliiqkFRz0jXOeCN1MB8GA1UdIwQY
MBaAFCV3bHf46+cJTKAHrOGpwL/cKzrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQt
ZTdkYWVjMTk0YTY5LzEvcE1xVXdVRUpkZEdXS0txUVZIUFNOYzU0STNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQtZTdkYWVjMTk0YTY5
LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAaKaeMA8E
AgACMAkDBwAqCyHBYBwwDQYJKoZIhvcNAQELBQADggEBAKfGlnK8n1YLuqld2Lak
MFUg4b9+7gga+RJpIvXSdto6s0xuhR50oILjMD+fVOAUefg1S3C6crgAq+ioufR4
3OAvDZNGqPGsKpfNdPK1+QV3gJN1xRq/vL2cQDrRnzjMtBSNVkOgNwJHsTBZzxB5
si27fKK2NvljCqBxa2ySJKuSKU/I7WhPoELjGZ50moamUTFZT/Qym+WntCm9Gbyw
u4oY8uBAS4Y2nvbo3JAB8rLFM94i46bz6n70U/b4+IcX8D2b8z936kEHQ/vOiBJU
2QsgTmGG9CCcfxWkrgj2O/adl63Vl5wC0/ZxNrNsOiUmxH1hUmytY/wD9F2cQZMR
Ppc=
-----END CERTIFICATE-----
Generated at Mon Nov 3 23:16:29 2025 by rpki-client