Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/MTIEPm-UTrRJO5GkIDAlc0UbzLQ.roa
File: MTIEPm-UTrRJO5GkIDAlc0UbzLQ.roa (raw, json)
Hash identifier: nVeKeAW6vJuUEVgfnDWMk7tY9g53T2JINJDassyHDH8=
Subject key identifier: 31:32:04:3E:6F:94:4E:B4:49:3B:91:A4:20:30:25:73:45:1B:CC:B4
Certificate issuer: /CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Certificate serial: 0199947B74B54535E15870C3ED7E994FDB94
Authority key identifier: 87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/MTIEPm-UTrRJO5GkIDAlc0UbzLQ.roa
Signing time: Mon 29 Sep 2025 07:59:02 +0000
ROA not before: Mon 29 Sep 2025 07:59:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210666
IP address blocks: 185.133.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:94:7b:74:b5:45:35:e1:58:70:c3:ed:7e:99:4f:db:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Validity
Not Before: Sep 29 07:59:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3132043e6f944eb4493b91a420302573451bccb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cc:8c:1c:37:ac:44:cb:de:51:03:af:9b:7e:
12:2d:07:72:88:af:2c:14:5c:40:06:54:f1:d4:6b:
8a:95:91:be:09:42:23:1e:62:9d:f8:85:c2:2f:a2:
2b:d5:eb:8e:dc:a7:4f:fb:31:6e:be:98:83:17:13:
53:92:dc:6b:1e:a9:d1:36:07:b1:48:e3:d7:ae:64:
2c:cb:a8:16:e3:4b:eb:a3:f6:09:bc:7d:6d:ec:a4:
60:fd:39:e0:ce:c9:c8:55:36:25:63:d5:4a:a2:bd:
81:6d:23:ac:3a:cd:56:61:9d:37:48:32:9e:a2:d3:
eb:04:81:60:35:ed:72:86:3a:e9:41:d3:49:3c:22:
05:ea:17:92:06:2f:c2:ea:bc:44:8a:6e:f7:36:cd:
0f:ec:c5:b7:cf:a4:9f:da:ef:bc:60:e0:65:58:f5:
be:03:9d:29:02:03:c0:85:c8:87:9d:72:48:c6:49:
6b:03:ac:f6:6b:72:4a:fd:eb:d8:5e:3f:fb:3a:15:
35:b6:39:f8:da:c5:e0:77:90:38:19:72:e7:00:0e:
53:0d:24:4a:4d:ac:b7:a2:a1:ff:a2:ab:ff:82:60:
ac:95:c6:d8:39:b7:3a:ce:0a:72:da:2e:b6:56:e5:
b5:bd:d7:d7:7e:32:03:0f:53:41:74:31:75:44:76:
e2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:32:04:3E:6F:94:4E:B4:49:3B:91:A4:20:30:25:73:45:1B:CC:B4
X509v3 Authority Key Identifier:
keyid:87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/MTIEPm-UTrRJO5GkIDAlc0UbzLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.83.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:b1:77:32:c2:52:7c:1a:a6:bd:08:05:1d:b5:d9:eb:2b:a6:
da:83:48:a9:0e:b6:bf:ce:f2:82:86:c2:d3:a2:af:33:1f:fa:
0c:47:e2:f9:37:29:ec:e5:9b:14:03:5b:c9:c9:b5:e2:6d:b1:
42:fa:b1:79:98:7f:39:7f:7f:62:72:c8:ab:6c:18:ef:89:00:
8e:42:06:6a:20:87:28:8f:20:3a:c7:03:75:31:f7:0e:bf:3f:
de:2e:e5:7c:74:15:e5:78:df:e2:96:19:35:44:5a:14:ff:e6:
1b:dc:b2:23:fb:04:81:3d:17:1a:9b:1b:3a:f5:5a:31:f3:8f:
ae:e0:27:ea:b4:5d:ad:0e:cc:69:c9:59:d5:2c:84:33:a2:e6:
34:c6:b3:7f:64:f7:92:ba:fa:6f:39:63:17:fe:fb:0c:92:8c:
0e:59:b0:0d:44:fb:73:89:a6:db:35:5e:e8:a0:94:cd:82:21:
b2:37:de:d1:7e:25:f3:e9:66:64:25:75:cf:9e:b4:2c:cb:27:
7d:a3:b8:06:39:7f:ee:4d:b9:84:39:f4:7c:a0:e8:c7:ed:ce:
53:d2:5b:71:5f:0f:d8:31:c6:0a:6a:e7:a8:5f:0d:82:19:0f:
0e:df:58:43:83:85:20:cd:6d:44:d5:a4:26:f9:5f:8a:ff:ba:
1d:a3:5f:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZmUe3S1RTXhWHDD7X6ZT9uUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZDk5MDEzMTQ2N2I3N2QxMTE2MmI3OWZiZTNiMDZjYThh
YjJkMzkwHhcNMjUwOTI5MDc1OTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTMyMDQzZTZmOTQ0ZWI0NDkzYjkxYTQyMDMwMjU3MzQ1MWJjY2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8yMHDesRMveUQOvm34SLQdyiK8s
FFxABlTx1GuKlZG+CUIjHmKd+IXCL6Ir1euO3KdP+zFuvpiDFxNTktxrHqnRNgex
SOPXrmQsy6gW40vro/YJvH1t7KRg/TngzsnIVTYlY9VKor2BbSOsOs1WYZ03SDKe
otPrBIFgNe1yhjrpQdNJPCIF6heSBi/C6rxEim73Ns0P7MW3z6Sf2u+8YOBlWPW+
A50pAgPAhciHnXJIxklrA6z2a3JK/evYXj/7OhU1tjn42sXgd5A4GXLnAA5TDSRK
Tay3oqH/oqv/gmCslcbYObc6zgpy2i62VuW1vdfXfjIDD1NBdDF1RHbisQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDEyBD5vlE60STuRpCAwJXNFG8y0MB8GA1UdIwQY
MBaAFIfZkBMUZ7d9ERYrefvjsGyoqy05MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDltUUV4Um50MzBSRml0NS0tT3diS2lyTFRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni81ZGVhOTctN2VmNy00ZGIwLTk0YmMt
YjhlOGIzNGRiMjkwLzEvTVRJRVBtLVVUclJKTzVHa0lEQWxjMFViekxRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni81ZGVhOTctN2VmNy00ZGIwLTk0YmMtYjhlOGIzNGRiMjkw
LzEvaDltUUV4Um50MzBSRml0NS0tT3diS2lyTFRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYVTMA0G
CSqGSIb3DQEBCwUAA4IBAQBesXcywlJ8Gqa9CAUdtdnrK6bag0ipDra/zvKChsLT
oq8zH/oMR+L5Nyns5ZsUA1vJybXibbFC+rF5mH85f39icsirbBjviQCOQgZqIIco
jyA6xwN1MfcOvz/eLuV8dBXleN/ilhk1RFoU/+Yb3LIj+wSBPRcamxs69Vox84+u
4CfqtF2tDsxpyVnVLIQzouY0xrN/ZPeSuvpvOWMX/vsMkowOWbANRPtziabbNV7o
oJTNgiGyN97RfiXz6WZkJXXPnrQsyyd9o7gGOX/uTbmEOfR8oOjH7c5T0ltxXw/Y
McYKaueoXw2CGQ8O31hDg4UgzW1E1aQm+V+K/7odo19p
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:08:27 2025 by rpki-client