Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/MNEt8VrSmpVV6QQFZEtFkOb964o.roa
File: MNEt8VrSmpVV6QQFZEtFkOb964o.roa (raw, json)
Hash identifier: Qp6oqipOgd4f6BqRbUAiNDAjU+YosYUxQPAPrWVqcBE=
Subject key identifier: 30:D1:2D:F1:5A:D2:9A:95:55:E9:04:05:64:4B:45:90:E6:FD:EB:8A
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 0199C8AFF2DB89B667542E17A841FE7D895C
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/MNEt8VrSmpVV6QQFZEtFkOb964o.roa
Signing time: Thu 09 Oct 2025 11:16:38 +0000
ROA not before: Thu 09 Oct 2025 11:16:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210906
IP address blocks: 82.140.129.0/24 maxlen: 24
84.46.204.0/24 maxlen: 24
84.46.207.0/24 maxlen: 24
86.38.26.0/24 maxlen: 24
86.38.36.0/24 maxlen: 24
86.38.154.0/24 maxlen: 24
86.38.222.0/24 maxlen: 24
86.38.234.0/24 maxlen: 24
86.38.236.0/24 maxlen: 24
89.116.14.0/24 maxlen: 24
89.116.71.0/24 maxlen: 24
89.116.77.0/24 maxlen: 24
89.116.78.0/24 maxlen: 24
89.116.90.0/24 maxlen: 24
89.116.93.0/24 maxlen: 24
89.116.97.0/24 maxlen: 24
89.117.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c8:af:f2:db:89:b6:67:54:2e:17:a8:41:fe:7d:89:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Oct 9 11:16:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30d12df15ad29a9555e90405644b4590e6fdeb8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dd:75:6d:a0:2c:3f:56:56:f0:b2:c0:e5:c9:
a3:fb:83:b1:00:e5:f2:dd:ec:fe:6c:60:54:c1:e6:
c5:29:ca:e9:e0:ec:87:bd:4c:91:ee:d1:42:42:c5:
dc:c8:6a:92:5b:4a:91:e5:79:6a:4e:56:31:1f:5c:
c5:c6:18:5f:9b:8b:0a:04:f1:70:32:2f:90:db:0b:
87:14:2a:3b:53:32:d5:19:a1:22:ea:2c:f3:83:0b:
fa:b6:2b:05:51:ad:f7:34:aa:d4:b3:7f:ec:ee:43:
9d:1e:24:aa:89:d3:49:2c:2d:e3:e3:c0:e6:7d:66:
a6:4a:c4:f3:e2:5f:ce:79:cf:3b:5d:3a:96:a5:1a:
87:23:24:67:78:fc:51:b9:7a:1f:9c:36:04:65:8f:
18:2e:77:1f:92:2f:c6:b5:66:e9:24:59:c4:fb:2f:
d7:19:ae:1b:9a:a3:2b:bb:a9:36:11:52:28:1b:5b:
ac:e5:9b:02:11:86:20:ae:28:f3:02:08:b0:48:d6:
a3:27:44:a1:b9:cb:c8:4b:0b:d9:36:65:31:44:01:
e6:e5:8a:d6:22:1a:fb:ab:9a:09:e6:50:15:e0:1d:
c7:91:0b:cf:a1:87:a1:2a:9a:6a:ba:92:12:09:59:
d9:ef:ac:21:5c:9d:cb:11:7a:d1:c3:40:bc:ec:40:
7a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D1:2D:F1:5A:D2:9A:95:55:E9:04:05:64:4B:45:90:E6:FD:EB:8A
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/MNEt8VrSmpVV6QQFZEtFkOb964o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.129.0/24
84.46.204.0/24
84.46.207.0/24
86.38.26.0/24
86.38.36.0/24
86.38.154.0/24
86.38.222.0/24
86.38.234.0/24
86.38.236.0/24
89.116.14.0/24
89.116.71.0/24
89.116.77.0-89.116.78.255
89.116.90.0/24
89.116.93.0/24
89.116.97.0/24
89.117.243.0/24
Signature Algorithm: sha256WithRSAEncryption
74:28:ff:2f:ef:32:7f:46:d5:48:90:2f:34:56:8d:ea:96:2d:
a8:cb:85:b5:fc:8b:f7:78:80:f9:e7:69:f6:0e:bc:23:8a:a9:
91:6f:e2:75:a4:b9:7f:2d:86:e1:67:7b:e2:de:0b:68:88:2d:
6b:f8:3b:6f:a9:ab:10:f0:01:26:0c:0d:0d:93:0b:26:5c:32:
8d:dd:ed:7a:e2:cb:bc:e6:c3:06:6f:93:7f:c1:c5:a3:ee:56:
0b:25:97:f7:fc:5f:59:6b:c9:3e:e4:c5:7e:33:5c:25:e1:46:
39:f7:c0:7c:dd:44:85:04:f5:ff:4d:9a:ad:42:cf:df:3c:45:
ad:81:b6:3e:0a:47:e6:34:d2:88:03:0f:a9:07:b3:d3:4e:1f:
e7:2b:be:f0:49:36:f0:44:b6:de:a8:39:b2:e7:58:9d:ef:71:
87:25:37:81:7e:8f:ac:a2:65:05:30:12:8f:ac:6d:a2:dd:b3:
29:9c:84:29:36:77:0e:29:51:f1:3d:1e:b5:71:ad:42:ce:45:
25:ad:19:92:09:07:de:51:ae:f1:de:3a:76:93:53:a2:83:fd:
d9:c9:a1:80:f9:b7:20:29:b4:2b:78:d5:09:8e:93:21:62:03:
b1:49:31:92:72:d2:70:2a:2d:13:2e:87:84:4f:d0:8a:bd:c5:
d5:05:13:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:58 2025 by rpki-client