Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Mt_VNn0wmc81hsecIMu3jqoMOsg.roa
File: Mt_VNn0wmc81hsecIMu3jqoMOsg.roa (raw, json)
Hash identifier: /qV7E1eaQO7DWdG03O+XJ/c74Qjz8Q2sixe0Z3MOhVo=
Subject key identifier: 32:DF:D5:36:7D:30:99:CF:35:86:C7:9C:20:CB:B7:8E:AA:0C:3A:C8
Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial: 01987FDFA6917963E50E08E085DDA565BD04
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Mt_VNn0wmc81hsecIMu3jqoMOsg.roa
Signing time: Wed 06 Aug 2025 14:53:40 +0000
ROA not before: Wed 06 Aug 2025 14:53:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58061
IP address blocks: 5.45.64.0/21 maxlen: 21
5.45.72.0/22 maxlen: 22
5.45.76.0/22 maxlen: 22
5.45.84.0/22 maxlen: 22
5.45.88.0/22 maxlen: 22
5.45.92.0/22 maxlen: 22
5.61.48.0/22 maxlen: 22
5.61.52.0/22 maxlen: 22
5.61.56.0/22 maxlen: 22
37.1.200.0/21 maxlen: 21
37.1.216.0/21 maxlen: 21
37.252.3.0/24 maxlen: 24
37.252.13.0/24 maxlen: 24
37.252.14.0/23 maxlen: 23
45.136.48.0/22 maxlen: 22
62.197.48.0/23 maxlen: 23
176.97.79.0/24 maxlen: 24
185.238.168.0/23 maxlen: 23
185.238.170.0/23 maxlen: 23
188.116.20.0/24 maxlen: 24
188.116.21.0/24 maxlen: 24
188.116.23.0/24 maxlen: 24
188.116.24.0/24 maxlen: 24
188.116.25.0/24 maxlen: 24
188.116.26.0/24 maxlen: 24
188.116.27.0/24 maxlen: 24
195.54.174.0/23 maxlen: 23
213.142.146.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:df:a6:91:79:63:e5:0e:08:e0:85:dd:a5:65:bd:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Validity
Not Before: Aug 6 14:53:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32dfd5367d3099cf3586c79c20cbb78eaa0c3ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:20:67:5e:c3:5f:59:e8:f2:04:fb:3c:a8:92:
9e:5f:5e:77:ad:5b:85:d6:44:9b:ce:97:33:6e:4b:
84:99:09:c2:cb:e9:52:4a:f9:dd:39:06:b0:58:be:
e9:2c:fc:8a:ab:c7:6d:e4:32:0d:09:72:32:a8:80:
f9:89:0b:63:31:14:4c:93:c6:20:bf:3a:08:7d:17:
e1:8e:c9:8b:2d:d2:80:87:c6:c0:79:e1:7c:6a:ca:
60:9c:22:b4:5b:c9:1c:cd:85:28:f0:0a:48:bf:8d:
9d:90:0b:46:f0:8a:df:c6:59:a6:9a:79:37:f3:41:
29:cc:45:f5:51:f9:72:64:93:a4:6c:26:b6:f2:61:
18:70:40:dd:e3:4f:2f:68:15:a4:17:9b:ad:f2:5f:
ae:4c:36:2b:48:31:fb:df:da:0f:d4:3c:0c:ef:ed:
32:1b:d7:fb:82:1c:60:b1:db:b0:53:19:8b:ae:7d:
f6:3c:49:6f:8b:7a:fd:75:27:33:52:e1:0a:81:b1:
c3:06:02:0d:cc:54:ed:de:00:9c:f9:5d:62:cc:79:
b2:93:69:d4:73:de:9f:ca:47:2a:22:46:f0:b4:6e:
82:28:9d:ec:51:98:9a:f3:2e:e5:79:18:22:37:5c:
f5:b6:e2:30:a1:b9:ce:98:d0:f5:4a:75:0f:b1:15:
70:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DF:D5:36:7D:30:99:CF:35:86:C7:9C:20:CB:B7:8E:AA:0C:3A:C8
X509v3 Authority Key Identifier:
keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Mt_VNn0wmc81hsecIMu3jqoMOsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.64.0/20
5.45.84.0-5.45.95.255
5.61.48.0-5.61.59.255
37.1.200.0/21
37.1.216.0/21
37.252.3.0/24
37.252.13.0-37.252.15.255
45.136.48.0/22
62.197.48.0/23
176.97.79.0/24
185.238.168.0/22
188.116.20.0/23
188.116.23.0-188.116.27.255
195.54.174.0/23
213.142.146.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:86:b2:45:f5:ef:0f:c5:df:26:76:47:0f:70:4b:4a:dd:34:
fb:e0:69:d4:2e:ce:fa:1c:30:d6:4f:2c:24:3b:ae:49:35:c8:
75:70:b8:e0:0d:b9:7d:b3:55:bc:07:6e:50:6e:8a:52:4b:2e:
eb:ee:d5:9a:6a:26:56:9b:49:a1:24:c5:43:37:66:3c:1e:02:
ba:e6:18:6e:0d:be:fc:a3:a5:51:12:32:c9:30:61:0b:e9:56:
d8:34:79:41:bf:20:30:3a:5a:72:a4:06:ea:82:d9:a8:8c:a6:
d5:0c:87:5b:bf:40:0d:8f:58:c2:da:63:8c:4b:27:7d:e0:7c:
be:03:31:65:60:a1:0d:53:83:02:3b:ba:25:a5:ec:77:73:00:
d1:6f:4c:40:de:82:cc:05:db:da:7c:f7:41:b3:e1:07:3d:cf:
1e:23:7d:8a:c0:4b:f3:5c:0e:05:97:6b:69:5a:b1:05:cb:3a:
52:9b:b4:c1:60:69:b3:ca:f6:b8:1e:35:d6:04:d4:ba:50:49:
76:67:9b:1f:d9:3f:f7:b5:a5:9c:89:b7:07:ba:9a:cf:8f:66:
cd:d5:4f:31:81:e6:b2:49:27:91:3c:9a:81:8b:11:3e:80:91:
6f:86:df:fb:2f:7d:31:91:a6:85:92:75:ac:ca:7d:a4:52:4f:
0e:e8:54:b7
-----BEGIN CERTIFICATE-----
MIIFdTCCBF2gAwIBAgISAZh/36aReWPlDgjghd2lZb0EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNGRjMjI1OTVmYzFmNTg4ZmJjNGRkZTA3YzFjMzk0OTk4
ZjMzYTcwHhcNMjUwODA2MTQ1MzQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmRmZDUzNjdkMzA5OWNmMzU4NmM3OWMyMGNiYjc4ZWFhMGMzYWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSBnXsNfWejyBPs8qJKeX153rVuF
1kSbzpczbkuEmQnCy+lSSvndOQawWL7pLPyKq8dt5DINCXIyqID5iQtjMRRMk8Yg
vzoIfRfhjsmLLdKAh8bAeeF8aspgnCK0W8kczYUo8ApIv42dkAtG8Irfxlmmmnk3
80EpzEX1UflyZJOkbCa28mEYcEDd408vaBWkF5ut8l+uTDYrSDH739oP1DwM7+0y
G9f7ghxgsduwUxmLrn32PElvi3r9dSczUuEKgbHDBgINzFTt3gCc+V1izHmyk2nU
c96fykcqIkbwtG6CKJ3sUZia8y7leRgiN1z1tuIwobnOmND1SnUPsRVw5wIDAQAB
o4ICgTCCAn0wHQYDVR0OBBYEFDLf1TZ9MJnPNYbHnCDLt46qDDrIMB8GA1UdIwQY
MBaAFBpNwiWV/B9Yj7xN3gfBw5SZjzOnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYt
MmI3OGIxOWI1YTg3LzEvTXRfVk5uMHdtYzgxaHNlY0lNdTNqcW9NT3NnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYtMmI3OGIxOWI1YTg3
LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGWBggrBgEFBQcBBwEB/wSBhjCBgzCBgAQCAAEwegMEBAUt
QDAMAwQCBS1UAwQFBS1AMAwDBAQFPTADBAIFPTgDBAMlAcgDBAMlAdgDBAAl/AMw
DAMEACX8DQMEBCX8AAMEAi2IMAMEAT7FMAMEALBhTwMEArnuqAMEAbx0FDAMAwQA
vHQXAwQCvHQYAwQBwzauAwQB1Y6SMA0GCSqGSIb3DQEBCwUAA4IBAQCMhrJF9e8P
xd8mdkcPcEtK3TT74GnULs76HDDWTywkO65JNch1cLjgDbl9s1W8B25QbopSSy7r
7tWaaiZWm0mhJMVDN2Y8HgK65hhuDb78o6VREjLJMGEL6VbYNHlBvyAwOlpypAbq
gtmojKbVDIdbv0ANj1jC2mOMSyd94Hy+AzFlYKENU4MCO7olpex3cwDRb0xA3oLM
BdvafPdBs+EHPc8eI32KwEvzXA4Fl2tpWrEFyzpSm7TBYGmzyva4HjXWBNS6UEl2
Z5sf2T/3taWcibcHuprPj2bN1U8xgeaySSeRPJqBixE+gJFvht/7L30xkaaFknWs
yn2kUk8O6FS3
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:18:08 2025 by rpki-client