Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/MrRldFhaNhVoeCmw8xkb8TOhACY.roa
File: MrRldFhaNhVoeCmw8xkb8TOhACY.roa (raw, json)
Hash identifier: K+X8TmG47yctp/QDpywhtZlC+KrX7gLEQ1SpS6yd2E0=
Subject key identifier: 32:B4:65:74:58:5A:36:15:68:78:29:B0:F3:19:1B:F1:33:A1:00:26
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 01997FF4A5ACE99EAD3065A621DFB7D3D1A1
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/MrRldFhaNhVoeCmw8xkb8TOhACY.roa
Signing time: Thu 25 Sep 2025 08:19:23 +0000
ROA not before: Thu 25 Sep 2025 08:19:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64445
IP address blocks: 93.115.56.0/24 maxlen: 24
93.115.57.0/24 maxlen: 24
94.177.10.0/24 maxlen: 24
94.177.11.0/24 maxlen: 24
94.177.21.0/24 maxlen: 24
94.177.96.0/24 maxlen: 24
94.177.97.0/24 maxlen: 24
188.241.66.0/24 maxlen: 24
188.241.67.0/24 maxlen: 24
188.241.138.0/24 maxlen: 24
188.241.139.0/24 maxlen: 24
188.241.143.0/24 maxlen: 24
188.241.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7f:f4:a5:ac:e9:9e:ad:30:65:a6:21:df:b7:d3:d1:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Sep 25 08:19:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32b46574585a3615687829b0f3191bf133a10026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7a:dd:b9:bf:c2:e0:ff:33:6d:73:45:83:3c:
65:63:ee:8d:46:d0:9a:59:6f:0a:2d:47:bb:a8:9b:
93:8a:58:2b:c3:35:f3:0c:c0:d4:6c:51:e5:79:f6:
42:24:2b:af:13:31:5a:d6:e6:82:c0:89:8a:49:3e:
82:2a:21:c2:4a:11:d2:ae:ac:52:3a:91:13:15:ad:
69:f4:c4:68:56:88:e2:d1:23:bc:a1:a1:f6:90:57:
83:df:05:9e:4a:ef:4b:d0:c5:e4:60:6e:ed:ed:10:
38:de:c7:85:a4:05:9b:12:88:fe:76:ce:97:4b:e8:
ea:66:2e:0d:40:5b:c6:dc:63:82:ef:c7:35:50:8b:
c2:80:b4:16:6b:52:5a:e4:8b:b0:3d:da:ec:0c:1e:
c6:31:fd:85:9a:1a:87:72:84:3b:f6:cc:4f:cc:a9:
8f:bf:10:15:0f:a7:aa:74:2f:0d:a8:79:89:f3:76:
ca:bf:74:59:bd:02:c4:f7:d8:94:72:ea:dd:52:6c:
9d:b4:60:48:39:bb:eb:17:f4:f0:b0:77:e1:0a:a9:
8a:75:11:05:8b:97:5f:15:6e:e3:5a:74:55:2a:29:
21:02:31:31:35:d6:ab:37:25:11:3c:e5:a3:65:4a:
39:42:b4:99:4c:7a:ab:e6:a4:8b:a9:13:fb:23:69:
2a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B4:65:74:58:5A:36:15:68:78:29:B0:F3:19:1B:F1:33:A1:00:26
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/MrRldFhaNhVoeCmw8xkb8TOhACY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.56.0/23
94.177.10.0/23
94.177.21.0/24
94.177.96.0/23
188.241.66.0/23
188.241.138.0/23
188.241.143.0/24
188.241.213.0/24
Signature Algorithm: sha256WithRSAEncryption
90:96:eb:d5:d6:e0:2d:42:51:c7:ae:b6:fa:60:90:7b:10:98:
76:7c:90:e9:8e:91:cc:65:c1:04:01:cf:f4:09:13:6d:f0:04:
ba:91:21:81:a0:a1:1d:71:d3:34:2e:b6:d3:ee:cd:2b:3a:e5:
ca:12:94:f9:57:2f:12:3f:16:26:f0:2d:f6:87:99:02:53:22:
3b:9e:2b:f9:d4:b1:ea:7c:b7:b4:66:84:94:78:47:f9:ca:7e:
35:d1:e2:bb:51:39:63:7d:70:b1:43:be:7c:53:87:01:b2:33:
15:b5:48:7b:c8:a7:03:29:ec:c1:59:ef:38:c4:8a:fc:86:99:
32:b4:e1:5d:86:89:3e:1e:df:80:2b:cc:2d:ec:f2:38:00:c5:
b6:1d:ff:3a:c1:b0:84:3c:96:ba:d4:b4:1f:e7:46:8a:2e:7e:
c8:35:0e:95:8f:fa:ca:32:2f:d0:6c:01:2e:dc:eb:c9:04:45:
0c:89:cd:2e:56:39:34:7a:70:fd:bd:1b:f0:52:80:3d:74:c3:
22:ef:72:18:10:15:03:ce:b6:2a:6d:5b:ab:74:db:5e:64:f3:
3e:eb:49:2f:78:52:5c:d6:be:c4:dc:2a:af:aa:36:ee:89:b9:
cc:b3:1b:7a:e2:16:50:86:54:be:49:24:c1:59:4f:88:11:a0:
8a:58:7a:25
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZl/9KWs6Z6tMGWmId+309GhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZmE2NmZiODRhNzgxYTA1ODRmZDBkMWMyZGYzOWJkYTQ3
NjA1MTkwHhcNMjUwOTI1MDgxOTIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmI0NjU3NDU4NWEzNjE1Njg3ODI5YjBmMzE5MWJmMTMzYTEwMDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3rdub/C4P8zbXNFgzxlY+6NRtCa
WW8KLUe7qJuTilgrwzXzDMDUbFHlefZCJCuvEzFa1uaCwImKST6CKiHCShHSrqxS
OpETFa1p9MRoVoji0SO8oaH2kFeD3wWeSu9L0MXkYG7t7RA43seFpAWbEoj+ds6X
S+jqZi4NQFvG3GOC78c1UIvCgLQWa1Ja5IuwPdrsDB7GMf2FmhqHcoQ79sxPzKmP
vxAVD6eqdC8NqHmJ83bKv3RZvQLE99iUcurdUmydtGBIObvrF/TwsHfhCqmKdREF
i5dfFW7jWnRVKikhAjExNdarNyURPOWjZUo5QrSZTHqr5qSLqRP7I2kq0QIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFDK0ZXRYWjYVaHgpsPMZG/EzoQAmMB8GA1UdIwQY
MBaAFGT6ZvuEp4GgWE/Q0cLfOb2kdgUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQt
NzQwOGViOGJjNTg2LzEvTXJSbGRGaGFOaFZvZUNtdzh4a2I4VE9oQUNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQtNzQwOGViOGJjNTg2
LzEvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQBXXM4AwQB
XrEKAwQAXrEVAwQBXrFgAwQBvPFCAwQBvPGKAwQAvPGPAwQAvPHVMA0GCSqGSIb3
DQEBCwUAA4IBAQCQluvV1uAtQlHHrrb6YJB7EJh2fJDpjpHMZcEEAc/0CRNt8AS6
kSGBoKEdcdM0LrbT7s0rOuXKEpT5Vy8SPxYm8C32h5kCUyI7niv51LHqfLe0ZoSU
eEf5yn410eK7UTljfXCxQ758U4cBsjMVtUh7yKcDKezBWe84xIr8hpkytOFdhok+
Ht+AK8wt7PI4AMW2Hf86wbCEPJa61LQf50aKLn7INQ6Vj/rKMi/QbAEu3OvJBEUM
ic0uVjk0enD9vRvwUoA9dMMi73IYEBUDzrYqbVurdNteZPM+60kveFJc1r7E3Cqv
qjbuibnMsxt64hZQhlS+SSTBWU+IEaCKWHol
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:57:59 2025 by rpki-client