Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fe83cb-2acd-464b-9667-0ab96163c471/1/R8dDOPWAWF4Nf2RYr-ub9zM-8cI.roa
File: R8dDOPWAWF4Nf2RYr-ub9zM-8cI.roa (raw, json)
Hash identifier: Vcu+MbNMM/yJaD82Silul6HdyQc+gF8UimqpbdwDqq8=
Subject key identifier: 47:C7:43:38:F5:80:58:5E:0D:7F:64:58:AF:EB:9B:F7:33:3E:F1:C2
Certificate issuer: /CN=3247bef9537de164bfbaba5166be02acf7ed82da
Certificate serial: 0199E1B40FE5B8352E1849C2BE6FE351D6CB
Authority key identifier: 32:47:BE:F9:53:7D:E1:64:BF:BA:BA:51:66:BE:02:AC:F7:ED:82:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mke--VN94WS_urpRZr4CrPftgto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fe83cb-2acd-464b-9667-0ab96163c471/1/R8dDOPWAWF4Nf2RYr-ub9zM-8cI.roa
Signing time: Tue 14 Oct 2025 07:51:38 +0000
ROA not before: Tue 14 Oct 2025 07:51:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201172
IP address blocks: 45.156.92.0/22 maxlen: 24
109.204.160.0/21 maxlen: 24
185.83.116.0/22 maxlen: 24
193.104.188.0/24 maxlen: 24
194.8.226.0/23 maxlen: 24
2a05:8c40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fe83cb-2acd-464b-9667-0ab96163c471/1/Mke--VN94WS_urpRZr4CrPftgto.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fe83cb-2acd-464b-9667-0ab96163c471/1/Mke--VN94WS_urpRZr4CrPftgto.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mke--VN94WS_urpRZr4CrPftgto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e1:b4:0f:e5:b8:35:2e:18:49:c2:be:6f:e3:51:d6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3247bef9537de164bfbaba5166be02acf7ed82da
Validity
Not Before: Oct 14 07:51:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47c74338f580585e0d7f6458afeb9bf7333ef1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cd:b3:af:e4:9f:b6:73:7c:a2:d3:2f:77:00:
d0:43:de:4a:06:56:26:06:30:a0:3a:3f:02:06:8f:
4b:3b:11:1e:c8:52:7f:6e:9f:ce:dc:17:68:21:a0:
cb:d8:a9:17:c4:e0:9e:c8:36:05:f5:66:d7:bd:23:
bc:57:f0:9e:9d:da:88:f9:b3:32:3e:6f:cc:b0:14:
8c:d7:da:9b:b9:72:fd:f4:a6:55:67:23:89:d5:7d:
99:94:9f:1b:d6:da:d3:53:b2:8a:b2:20:59:7d:e9:
db:29:b4:da:2a:c4:bd:c2:37:42:aa:92:3a:a1:c1:
7b:af:33:26:9a:08:14:21:70:7f:f7:5b:3f:80:2d:
3a:67:52:37:c0:07:94:7c:1a:23:61:e3:3e:a9:ea:
98:a8:89:85:03:c9:57:7c:e0:0a:b3:8d:3c:c7:c6:
52:b9:22:da:9c:84:03:6a:91:66:1a:30:01:fe:3b:
e2:f0:e3:42:5e:5a:3d:2e:06:1f:41:8c:6b:1b:48:
0d:27:fe:dc:08:41:76:5e:92:20:1b:d7:a7:0d:ad:
fe:e2:61:f2:67:ab:9f:2a:3c:50:97:22:ba:fe:2d:
4b:f3:b6:cd:ad:c1:9e:56:06:61:62:c0:c3:8c:83:
d8:c6:78:93:cd:46:5f:b3:58:af:bd:ba:1f:1f:74:
16:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C7:43:38:F5:80:58:5E:0D:7F:64:58:AF:EB:9B:F7:33:3E:F1:C2
X509v3 Authority Key Identifier:
keyid:32:47:BE:F9:53:7D:E1:64:BF:BA:BA:51:66:BE:02:AC:F7:ED:82:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mke--VN94WS_urpRZr4CrPftgto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe83cb-2acd-464b-9667-0ab96163c471/1/R8dDOPWAWF4Nf2RYr-ub9zM-8cI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe83cb-2acd-464b-9667-0ab96163c471/1/Mke--VN94WS_urpRZr4CrPftgto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.92.0/22
109.204.160.0/21
185.83.116.0/22
193.104.188.0/24
194.8.226.0/23
IPv6:
2a05:8c40::/29
Signature Algorithm: sha256WithRSAEncryption
ce:18:1b:eb:7e:b5:d8:5a:88:d8:33:87:ad:8d:70:e6:19:47:
d4:c0:91:cb:83:aa:f8:16:2e:9d:97:20:cb:94:c3:e7:ec:a5:
9b:c9:f9:4a:0d:8e:0b:e4:6f:93:c2:9a:c6:25:6d:0d:5e:42:
aa:42:06:1c:d2:66:fd:19:4e:e2:71:b6:c8:a4:cd:5f:20:ad:
28:e7:e9:11:dd:b2:65:cb:6b:26:ee:ff:59:e8:f0:95:83:e8:
e3:c8:e6:74:da:b7:a1:f9:e2:ef:f2:14:3d:62:e6:7f:cb:a2:
5f:1c:de:68:63:10:41:ec:5d:1e:a1:84:ae:9c:7e:da:fa:90:
11:09:99:46:27:88:b5:cb:a2:9a:92:63:89:a7:b9:c3:2a:d1:
91:17:8d:8f:48:db:ca:64:87:e5:32:4a:da:d0:ad:e2:73:e3:
9c:fd:7e:15:5a:48:9f:26:a5:ff:d4:7c:6c:e5:e5:59:d8:eb:
9a:0e:91:a1:84:19:f6:38:d1:60:2e:4b:fc:e4:4e:e3:5a:9a:
8c:84:2d:98:0b:c9:db:76:82:50:40:e8:0b:57:ad:7e:f0:41:
31:4f:8b:11:b4:bb:e5:e5:2d:91:d5:23:97:94:93:61:d5:45:
a7:2b:06:d3:84:f5:da:bd:b4:1b:f3:56:ae:60:38:04:38:e0:
c5:5e:a9:88
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAZnhtA/luDUuGEnCvm/jUdbLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNDdiZWY5NTM3ZGUxNjRiZmJhYmE1MTY2YmUwMmFjZjdl
ZDgyZGEwHhcNMjUxMDE0MDc1MTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2M3NDMzOGY1ODA1ODVlMGQ3ZjY0NThhZmViOWJmNzMzM2VmMWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss2zr+SftnN8otMvdwDQQ95KBlYm
BjCgOj8CBo9LOxEeyFJ/bp/O3BdoIaDL2KkXxOCeyDYF9WbXvSO8V/CendqI+bMy
Pm/MsBSM19qbuXL99KZVZyOJ1X2ZlJ8b1trTU7KKsiBZfenbKbTaKsS9wjdCqpI6
ocF7rzMmmggUIXB/91s/gC06Z1I3wAeUfBojYeM+qeqYqImFA8lXfOAKs408x8ZS
uSLanIQDapFmGjAB/jvi8ONCXlo9LgYfQYxrG0gNJ/7cCEF2XpIgG9enDa3+4mHy
Z6ufKjxQlyK6/i1L87bNrcGeVgZhYsDDjIPYxniTzUZfs1ivvbofH3QWrwIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFEfHQzj1gFheDX9kWK/rm/czPvHCMB8GA1UdIwQY
MBaAFDJHvvlTfeFkv7q6UWa+Aqz37YLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWtlLS1WTjk0V1NfdXJwUlpyNENyUGZ0Z3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9mZTgzY2ItMmFjZC00NjRiLTk2Njct
MGFiOTYxNjNjNDcxLzEvUjhkRE9QV0FXRjROZjJSWXItdWI5ek0tOGNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9mZTgzY2ItMmFjZC00NjRiLTk2NjctMGFiOTYxNjNjNDcx
LzEvTWtlLS1WTjk0V1NfdXJwUlpyNENyUGZ0Z3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCLZxcAwQD
bcygAwQCuVN0AwQAwWi8AwQBwgjiMA0EAgACMAcDBQMqBYxAMA0GCSqGSIb3DQEB
CwUAA4IBAQDOGBvrfrXYWojYM4etjXDmGUfUwJHLg6r4Fi6dlyDLlMPn7KWbyflK
DY4L5G+TwprGJW0NXkKqQgYc0mb9GU7icbbIpM1fIK0o5+kR3bJly2sm7v9Z6PCV
g+jjyOZ02reh+eLv8hQ9YuZ/y6JfHN5oYxBB7F0eoYSunH7a+pARCZlGJ4i1y6Ka
kmOJp7nDKtGRF42PSNvKZIflMkra0K3ic+Oc/X4VWkifJqX/1Hxs5eVZ2OuaDpGh
hBn2ONFgLkv85E7jWpqMhC2YC8nbdoJQQOgLV61+8EExT4sRtLvl5S2R1SOXlJNh
1UWnKwbThPXavbQb81auYDgEOODFXqmI
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:46:42 2025 by rpki-client