Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/mMg3E1Nb2aLQF9y3s1zWz-BTo_Q.roa
File: mMg3E1Nb2aLQF9y3s1zWz-BTo_Q.roa (raw, json)
Hash identifier: cvp5yOj8Ixek1gITTHoV35TmSlVgKcQg6j0GCNNS5mI=
Subject key identifier: 98:C8:37:13:53:5B:D9:A2:D0:17:DC:B7:B3:5C:D6:CF:E0:53:A3:F4
Certificate issuer: /CN=8a28ff310da7df8309cfab4dcf9a235842b60872
Certificate serial: 019952D0BC2672C352FBCB1E62260B92A6D4
Authority key identifier: 8A:28:FF:31:0D:A7:DF:83:09:CF:AB:4D:CF:9A:23:58:42:B6:08:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/mMg3E1Nb2aLQF9y3s1zWz-BTo_Q.roa
Signing time: Tue 16 Sep 2025 13:57:15 +0000
ROA not before: Tue 16 Sep 2025 13:57:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213367
IP address blocks: 2a06:b700:1003::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:52:d0:bc:26:72:c3:52:fb:cb:1e:62:26:0b:92:a6:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a28ff310da7df8309cfab4dcf9a235842b60872
Validity
Not Before: Sep 16 13:57:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98c83713535bd9a2d017dcb7b35cd6cfe053a3f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a8:0e:1a:7a:22:f9:d6:8e:c6:db:05:b2:4c:
6a:2b:67:5b:64:7a:f1:4c:8c:22:90:8b:4d:60:1a:
8b:04:49:0c:7c:62:1d:f0:cb:e7:2f:b1:9e:02:2f:
68:8c:ec:0d:d0:6e:30:42:a7:6d:41:b0:5c:bb:6e:
24:98:53:99:89:0b:6a:80:3e:9f:28:41:44:bd:25:
78:98:ec:fc:35:9a:3e:b6:e4:58:17:0b:25:91:9b:
4f:f3:65:bb:fb:9e:aa:51:9b:b8:8f:ac:8c:59:fe:
21:08:8c:8e:f6:4f:4d:ae:85:bb:ee:6e:cc:36:1c:
52:64:1d:70:0a:55:e4:c2:60:ca:ef:31:66:24:28:
88:68:11:ad:d4:6c:71:52:4a:72:88:41:26:2f:7a:
38:8e:77:d6:d5:15:4d:72:7d:c6:e9:8a:68:41:b9:
15:56:3c:22:52:10:83:55:b1:a9:4b:ad:05:41:ef:
16:3e:48:ca:a7:28:54:f7:a3:f1:72:7c:5b:3a:3c:
2d:bf:71:17:91:3f:7f:ff:c3:7a:d2:5c:67:ae:73:
57:ae:b6:80:15:e5:35:81:32:b3:41:4b:40:af:3d:
15:d6:02:93:8e:66:7f:96:b7:25:90:a1:3a:25:2a:
d4:86:50:a2:02:bd:9a:fc:93:f1:b6:99:23:59:82:
c9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C8:37:13:53:5B:D9:A2:D0:17:DC:B7:B3:5C:D6:CF:E0:53:A3:F4
X509v3 Authority Key Identifier:
keyid:8A:28:FF:31:0D:A7:DF:83:09:CF:AB:4D:CF:9A:23:58:42:B6:08:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/mMg3E1Nb2aLQF9y3s1zWz-BTo_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:b700:1003::/48
Signature Algorithm: sha256WithRSAEncryption
83:d4:5f:f9:9f:23:aa:8d:49:2e:8f:a8:2e:f3:c4:3f:7b:f0:
a3:2e:e9:be:ee:72:0b:51:1f:2e:a5:10:35:b8:7b:eb:68:e6:
0c:c1:30:a2:66:7d:92:dc:3d:4e:f1:ff:35:b0:03:47:cb:3e:
f3:f2:7b:43:ef:b5:74:3a:44:b9:17:d0:45:b3:30:26:6e:63:
08:60:8a:b4:94:77:6e:39:20:96:95:50:b2:34:93:d0:6c:6d:
a7:1f:cf:13:78:8e:e2:39:db:92:e3:de:fe:4c:cd:a6:3d:97:
af:1b:4e:72:b5:ce:82:43:0b:e7:d1:ce:21:94:ef:fb:43:c8:
29:ff:cf:86:95:42:43:8f:1a:e3:dd:a6:ec:f6:56:23:37:73:
15:22:10:bf:4b:ba:1b:c8:10:f6:fd:b8:19:a8:2e:00:c7:53:
75:7c:e4:e1:e9:aa:ba:f6:7a:b5:14:51:9d:f2:f8:44:6a:88:
0e:9d:1f:da:8a:db:56:33:57:bc:f8:e5:90:e3:45:81:ad:26:
d8:26:c0:e2:13:99:c8:b4:cc:bc:ba:75:a2:85:00:37:b9:07:
ef:a8:5e:e4:a1:29:fc:cf:44:be:db:91:69:4e:37:a4:99:6b:
64:88:e2:cf:99:29:5d:a7:8c:d5:84:b4:0d:fc:7f:75:cb:01:
2a:c0:78:68
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZlS0LwmcsNS+8seYiYLkqbUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMjhmZjMxMGRhN2RmODMwOWNmYWI0ZGNmOWEyMzU4NDJi
NjA4NzIwHhcNMjUwOTE2MTM1NzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGM4MzcxMzUzNWJkOWEyZDAxN2RjYjdiMzVjZDZjZmUwNTNhM2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxagOGnoi+daOxtsFskxqK2dbZHrx
TIwikItNYBqLBEkMfGId8MvnL7GeAi9ojOwN0G4wQqdtQbBcu24kmFOZiQtqgD6f
KEFEvSV4mOz8NZo+tuRYFwslkZtP82W7+56qUZu4j6yMWf4hCIyO9k9NroW77m7M
NhxSZB1wClXkwmDK7zFmJCiIaBGt1GxxUkpyiEEmL3o4jnfW1RVNcn3G6YpoQbkV
VjwiUhCDVbGpS60FQe8WPkjKpyhU96PxcnxbOjwtv3EXkT9//8N60lxnrnNXrraA
FeU1gTKzQUtArz0V1gKTjmZ/lrclkKE6JSrUhlCiAr2a/JPxtpkjWYLJXQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJjINxNTW9mi0Bfct7Nc1s/gU6P0MB8GA1UdIwQY
MBaAFIoo/zENp9+DCc+rTc+aI1hCtghyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWlqX01RMm4zNE1KejZ0Tno1b2pXRUsyQ0hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9hNWQyODYtODY3MC00N2U0LTk3YjQt
MjRjZjhhNjFkN2U4LzEvbU1nM0UxTmIyYUxRRjl5M3Mxeld6LUJUb19RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9hNWQyODYtODY3MC00N2U0LTk3YjQtMjRjZjhhNjFkN2U4
LzEvaWlqX01RMm4zNE1KejZ0Tno1b2pXRUsyQ0hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKga3ABAD
MA0GCSqGSIb3DQEBCwUAA4IBAQCD1F/5nyOqjUkuj6gu88Q/e/CjLum+7nILUR8u
pRA1uHvraOYMwTCiZn2S3D1O8f81sANHyz7z8ntD77V0OkS5F9BFszAmbmMIYIq0
lHduOSCWlVCyNJPQbG2nH88TeI7iOduS497+TM2mPZevG05ytc6CQwvn0c4hlO/7
Q8gp/8+GlUJDjxrj3abs9lYjN3MVIhC/S7obyBD2/bgZqC4Ax1N1fOTh6aq69nq1
FFGd8vhEaogOnR/aittWM1e8+OWQ40WBrSbYJsDiE5nItMy8unWihQA3uQfvqF7k
oSn8z0S+25FpTjekmWtkiOLPmSldp4zVhLQN/H91ywEqwHho
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:01 2025 by rpki-client