Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/mah4AWfXC0pa7vVaoRQiMo894vo.roa
File: mah4AWfXC0pa7vVaoRQiMo894vo.roa (raw, json)
Hash identifier: FRBDBjNrcarz6+cgNnWqdZSbwkqTq4d1ETUAtkcAHtM=
Subject key identifier: 99:A8:78:01:67:D7:0B:4A:5A:EE:F5:5A:A1:14:22:32:8F:3D:E2:FA
Certificate issuer: /CN=acddc73b59a1fcdee22e25824d40acc27286aa52
Certificate serial: 01992EB20458E2E05ED80B531A0B5F917501
Authority key identifier: AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/mah4AWfXC0pa7vVaoRQiMo894vo.roa
Signing time: Tue 09 Sep 2025 13:37:22 +0000
ROA not before: Tue 09 Sep 2025 13:37:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39305
IP address blocks: 45.84.52.0/22 maxlen: 22
62.68.77.0/24 maxlen: 24
62.106.73.0/24 maxlen: 24
77.75.228.0/24 maxlen: 24
78.24.32.0/21 maxlen: 21
91.211.64.0/22 maxlen: 22
91.238.63.0/24 maxlen: 24
91.242.224.0/24 maxlen: 24
109.234.73.0/24 maxlen: 24
146.19.18.0/24 maxlen: 24
185.88.9.0/24 maxlen: 24
185.151.214.0/23 maxlen: 23
185.182.107.0/24 maxlen: 24
185.196.63.0/24 maxlen: 24
193.57.226.0/24 maxlen: 24
193.57.227.0/24 maxlen: 24
194.247.36.0/24 maxlen: 24
195.242.146.0/24 maxlen: 24
212.108.108.0/24 maxlen: 24
2a0c:7140::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:b2:04:58:e2:e0:5e:d8:0b:53:1a:0b:5f:91:75:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acddc73b59a1fcdee22e25824d40acc27286aa52
Validity
Not Before: Sep 9 13:37:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99a8780167d70b4a5aeef55aa11422328f3de2fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:19:d2:ca:a6:23:04:70:1c:10:e4:a3:7e:ed:
15:bd:e3:1f:b6:82:bd:59:c8:8e:3b:c1:d9:60:1c:
5b:d4:e1:6e:da:d4:45:8e:47:57:96:c3:46:94:a3:
89:41:ba:f0:93:19:10:a6:79:d1:e5:74:42:a6:fd:
8c:39:58:4d:07:0e:9f:03:d3:14:76:02:9d:e9:ab:
04:53:96:f2:a1:8a:de:0c:22:22:25:3f:94:3a:a4:
d1:97:ea:7c:6e:c3:4c:67:75:36:89:d2:73:5a:49:
99:00:00:36:5b:33:32:ca:7c:8e:47:06:58:7c:65:
be:f2:ee:4e:00:f4:0f:c7:b1:d7:bc:40:7a:cd:68:
f3:fb:b4:4c:55:10:98:03:af:60:74:91:d6:b2:08:
97:0b:bb:f1:2f:0f:b5:a8:d6:13:ce:a6:9b:ad:6e:
4a:81:02:64:b9:89:2f:66:86:9e:9f:0b:05:32:42:
73:c0:45:25:d8:ef:d3:02:53:1f:bf:ed:ed:6a:c1:
40:d4:78:bc:52:13:cd:62:2f:4e:22:a7:ff:75:96:
90:cd:d7:95:be:60:dd:b9:2f:a8:b0:dc:cb:e5:fa:
f6:b1:6c:7e:b7:6c:22:2a:1f:1c:7a:b0:b5:2e:47:
4d:19:ae:93:a9:76:89:97:64:8a:a9:f4:09:6b:80:
1a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A8:78:01:67:D7:0B:4A:5A:EE:F5:5A:A1:14:22:32:8F:3D:E2:FA
X509v3 Authority Key Identifier:
keyid:AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/mah4AWfXC0pa7vVaoRQiMo894vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.52.0/22
62.68.77.0/24
62.106.73.0/24
77.75.228.0/24
78.24.32.0/21
91.211.64.0/22
91.238.63.0/24
91.242.224.0/24
109.234.73.0/24
146.19.18.0/24
185.88.9.0/24
185.151.214.0/23
185.182.107.0/24
185.196.63.0/24
193.57.226.0/23
194.247.36.0/24
195.242.146.0/24
212.108.108.0/24
IPv6:
2a0c:7140::/29
Signature Algorithm: sha256WithRSAEncryption
be:13:5d:06:7b:2c:87:0e:52:00:a3:b1:ef:ec:6f:b3:e2:6f:
cc:58:17:0a:ae:17:ac:cd:bb:57:9a:0e:65:13:84:f3:1c:d4:
20:06:21:c2:3b:4e:bb:30:cb:6e:61:4e:e7:29:b4:0b:ab:bd:
96:0c:ec:1c:98:c5:32:c1:b6:c2:d4:1f:bb:b0:f9:cf:1e:d3:
a7:49:3e:36:fe:d4:dd:89:af:81:c7:cc:f1:f8:c8:b3:54:07:
ac:3e:7f:f0:ff:06:e5:99:5e:56:80:79:e7:75:35:a3:88:3c:
69:3a:5f:22:11:24:1f:b6:60:96:1e:68:ec:0a:da:df:53:89:
22:73:4a:dc:b1:5d:db:3d:b1:6d:2a:2c:05:c9:e0:c7:13:2e:
02:2e:61:a3:e4:94:0c:62:81:d8:0d:98:b6:b6:e9:1e:0e:4e:
76:9c:6c:7d:0a:93:db:ef:63:85:41:5e:f1:5a:e2:08:29:7e:
d6:d4:a8:be:06:b0:28:3d:f1:9d:b7:f4:6c:94:ee:c6:82:5f:
46:bf:35:74:b1:a2:76:96:72:07:26:db:9e:0a:ef:cb:0d:48:
45:bb:e0:d2:e8:eb:6c:15:e7:24:16:df:ab:a1:43:fe:78:97:
65:34:fc:7e:32:ab:21:e3:43:b4:2f:8c:9e:c2:08:08:1e:14:
c2:28:c0:4f
-----BEGIN CERTIFICATE-----
MIIFdTCCBF2gAwIBAgISAZkusgRY4uBe2AtTGgtfkXUBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZGRjNzNiNTlhMWZjZGVlMjJlMjU4MjRkNDBhY2MyNzI4
NmFhNTIwHhcNMjUwOTA5MTMzNzIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OWE4NzgwMTY3ZDcwYjRhNWFlZWY1NWFhMTE0MjIzMjhmM2RlMmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBnSyqYjBHAcEOSjfu0VveMftoK9
WciOO8HZYBxb1OFu2tRFjkdXlsNGlKOJQbrwkxkQpnnR5XRCpv2MOVhNBw6fA9MU
dgKd6asEU5byoYreDCIiJT+UOqTRl+p8bsNMZ3U2idJzWkmZAAA2WzMyynyORwZY
fGW+8u5OAPQPx7HXvEB6zWjz+7RMVRCYA69gdJHWsgiXC7vxLw+1qNYTzqabrW5K
gQJkuYkvZoaenwsFMkJzwEUl2O/TAlMfv+3tasFA1Hi8UhPNYi9OIqf/dZaQzdeV
vmDduS+osNzL5fr2sWx+t2wiKh8cerC1LkdNGa6TqXaJl2SKqfQJa4AasQIDAQAB
o4ICgTCCAn0wHQYDVR0OBBYEFJmoeAFn1wtKWu71WqEUIjKPPeL6MB8GA1UdIwQY
MBaAFKzdxztZofze4i4lgk1ArMJyhqpSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck4zSE8xbWhfTjdpTGlXQ1RVQ3N3bktHcWxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS84Nzg4ZTUtOGFiOC00M2U5LTlkYWIt
YTBlYzg0YTMxMzkzLzEvbWFoNEFXZlhDMHBhN3ZWYW9SUWlNbzg5NHZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS84Nzg4ZTUtOGFiOC00M2U5LTlkYWItYTBlYzg0YTMxMzkz
LzEvck4zSE8xbWhfTjdpTGlXQ1RVQ3N3bktHcWxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGWBggrBgEFBQcBBwEB/wSBhjCBgzByBAIAATBsAwQCLVQ0
AwQAPkRNAwQAPmpJAwQATUvkAwQDThggAwQCW9NAAwQAW+4/AwQAW/LgAwQAbepJ
AwQAkhMSAwQAuVgJAwQBuZfWAwQAubZrAwQAucQ/AwQBwTniAwQAwvckAwQAw/KS
AwQA1GxsMA0EAgACMAcDBQMqDHFAMA0GCSqGSIb3DQEBCwUAA4IBAQC+E10GeyyH
DlIAo7Hv7G+z4m/MWBcKrheszbtXmg5lE4TzHNQgBiHCO067MMtuYU7nKbQLq72W
DOwcmMUywbbC1B+7sPnPHtOnST42/tTdia+Bx8zx+MizVAesPn/w/wblmV5WgHnn
dTWjiDxpOl8iESQftmCWHmjsCtrfU4kic0rcsV3bPbFtKiwFyeDHEy4CLmGj5JQM
YoHYDZi2tukeDk52nGx9CpPb72OFQV7xWuIIKX7W1Ki+BrAoPfGdt/RslO7Ggl9G
vzV0saJ2lnIHJtueCu/LDUhFu+DS6OtsFeckFt+roUP+eJdlNPx+Mqsh40O0L4ye
wggIHhTCKMBP
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:06 2025 by rpki-client