Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/mvr6Sx-kefKCpXlcln92-1hH0Lo.roa
File: mvr6Sx-kefKCpXlcln92-1hH0Lo.roa (raw, json)
Hash identifier: vsMvOuxaqDBNY9/MmXzM5g56Ed4NT5bYde2HUqpznrI=
Subject key identifier: 9A:FA:FA:4B:1F:A4:79:F2:82:A5:79:5C:96:7F:76:FB:58:47:D0:BA
Certificate issuer: /CN=83f8fd7493a2fe056222db41ed693083b50eccfb
Certificate serial: 0199ED9A56BB8A8EF4F1A7E435B2972AF4BD
Authority key identifier: 83:F8:FD:74:93:A2:FE:05:62:22:DB:41:ED:69:30:83:B5:0E:CC:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/mvr6Sx-kefKCpXlcln92-1hH0Lo.roa
Signing time: Thu 16 Oct 2025 15:18:58 +0000
ROA not before: Thu 16 Oct 2025 15:18:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205111
IP address blocks: 144.89.64.0/23 maxlen: 23
144.89.66.0/23 maxlen: 23
199.67.88.0/23 maxlen: 23
199.67.90.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ed:9a:56:bb:8a:8e:f4:f1:a7:e4:35:b2:97:2a:f4:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83f8fd7493a2fe056222db41ed693083b50eccfb
Validity
Not Before: Oct 16 15:18:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9afafa4b1fa479f282a5795c967f76fb5847d0ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:45:36:16:da:d1:22:1e:fd:69:cd:a8:e9:a6:
70:e0:0f:b5:81:f3:64:7e:f6:8b:4a:88:62:4c:35:
b1:12:54:39:0b:e8:fc:3b:cc:f4:45:b1:78:11:33:
1b:fe:7e:d4:f5:5f:f6:0c:7d:dc:31:63:b7:4a:23:
e1:c7:80:94:ec:07:a2:8b:b2:a3:33:66:70:93:a0:
eb:54:f5:d5:4e:8a:d9:15:18:4d:a0:99:48:7b:45:
bd:fe:39:40:46:f3:d1:97:0d:f3:bb:65:e7:1e:a8:
08:d4:78:a8:dc:57:de:bf:48:5e:fd:0c:93:b8:8e:
72:df:8d:0e:15:b3:42:cb:15:c0:1c:12:43:82:87:
11:dc:07:28:02:79:c4:dc:2e:a0:d0:aa:8d:fb:9d:
4b:35:ec:cc:b9:b7:57:e6:84:4c:f1:77:e9:4a:38:
42:19:37:33:fe:8c:ec:26:b7:dc:35:f6:e0:13:65:
06:4b:bb:f1:0e:66:a1:63:18:9e:dd:38:5b:2a:0c:
3e:15:4a:a5:90:f2:b9:2f:c3:2a:0c:47:6f:f7:c2:
ce:c8:2b:eb:93:5d:fe:28:d5:03:39:69:88:7d:3e:
f9:1d:d1:18:84:03:8b:99:85:1f:c2:22:9f:1b:36:
33:b1:fd:a4:9d:e2:b0:6c:48:3b:b5:45:83:c6:4a:
50:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FA:FA:4B:1F:A4:79:F2:82:A5:79:5C:96:7F:76:FB:58:47:D0:BA
X509v3 Authority Key Identifier:
keyid:83:F8:FD:74:93:A2:FE:05:62:22:DB:41:ED:69:30:83:B5:0E:CC:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/mvr6Sx-kefKCpXlcln92-1hH0Lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.89.64.0/22
199.67.88.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:6b:68:cd:85:0b:bb:e7:e8:23:af:50:35:12:40:7a:7d:60:
02:45:81:22:61:b0:b7:05:a3:c8:21:59:c4:8c:a5:2e:94:cb:
ac:a7:c7:ca:dc:7a:2e:c9:b0:95:f3:cb:f1:cd:a3:14:0a:19:
03:2a:33:ea:39:9d:5c:f8:e8:d4:3b:57:4f:cd:00:5d:b7:a0:
38:f5:15:0b:1b:46:3b:6a:6d:6f:49:c9:8b:15:99:57:9f:7b:
e1:71:63:97:98:1e:85:10:a3:72:0f:e1:af:be:59:c7:7b:77:
61:54:28:60:a2:eb:9c:2a:24:df:e8:7b:1c:21:d0:70:31:b4:
a0:7a:89:66:fc:d8:49:58:67:d5:aa:3c:dd:bb:d8:1c:ac:7b:
7e:9e:79:ec:b6:de:40:2e:45:73:25:fe:a3:72:b2:5c:3c:4c:
3b:0f:0b:cf:f8:13:12:9e:e6:d4:67:83:c7:23:bf:e3:23:f8:
f3:09:98:42:29:8f:2e:5e:b5:e8:1b:78:9b:3a:09:c2:9f:76:
5e:9d:93:e2:b5:67:93:9c:87:6e:59:b9:27:a0:68:1e:ba:21:
7d:91:8f:a6:98:bf:6b:84:ff:13:8a:81:36:92:33:60:86:86:
da:1d:4b:93:2d:c0:5f:d4:77:d8:0f:e9:75:39:64:a7:cb:cb:
b3:1e:1a:da
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZntmla7io708afkNbKXKvS9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZjhmZDc0OTNhMmZlMDU2MjIyZGI0MWVkNjkzMDgzYjUw
ZWNjZmIwHhcNMjUxMDE2MTUxODU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YWZhZmE0YjFmYTQ3OWYyODJhNTc5NWM5NjdmNzZmYjU4NDdkMGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEU2FtrRIh79ac2o6aZw4A+1gfNk
fvaLSohiTDWxElQ5C+j8O8z0RbF4ETMb/n7U9V/2DH3cMWO3SiPhx4CU7Aeii7Kj
M2Zwk6DrVPXVTorZFRhNoJlIe0W9/jlARvPRlw3zu2XnHqgI1Hio3Ffev0he/QyT
uI5y340OFbNCyxXAHBJDgocR3AcoAnnE3C6g0KqN+51LNezMubdX5oRM8XfpSjhC
GTcz/ozsJrfcNfbgE2UGS7vxDmahYxie3ThbKgw+FUqlkPK5L8MqDEdv98LOyCvr
k13+KNUDOWmIfT75HdEYhAOLmYUfwiKfGzYzsf2kneKwbEg7tUWDxkpQ7QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJr6+ksfpHnygqV5XJZ/dvtYR9C6MB8GA1UdIwQY
MBaAFIP4/XSTov4FYiLbQe1pMIO1Dsz7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ19qOWRKT2lfZ1ZpSXR0QjdXa3dnN1VPelBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8xMmQ2ZjItZjQ4MS00OWZkLThmMjAt
YTA0M2MyMzBmMzBkLzEvbXZyNlN4LWtlZktDcFhsY2xuOTItMWhIMExvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8xMmQ2ZjItZjQ4MS00OWZkLThmMjAtYTA0M2MyMzBmMzBk
LzEvZ19qOWRKT2lfZ1ZpSXR0QjdXa3dnN1VPelBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCkFlAAwQC
x0NYMA0GCSqGSIb3DQEBCwUAA4IBAQB6a2jNhQu75+gjr1A1EkB6fWACRYEiYbC3
BaPIIVnEjKUulMusp8fK3HouybCV88vxzaMUChkDKjPqOZ1c+OjUO1dPzQBdt6A4
9RULG0Y7am1vScmLFZlXn3vhcWOXmB6FEKNyD+GvvlnHe3dhVChgouucKiTf6Hsc
IdBwMbSgeolm/NhJWGfVqjzdu9gcrHt+nnnstt5ALkVzJf6jcrJcPEw7DwvP+BMS
nubUZ4PHI7/jI/jzCZhCKY8uXrXoG3ibOgnCn3ZenZPitWeTnIduWbknoGgeuiF9
kY+mmL9rhP8TioE2kjNghobaHUuTLcBf1HfYD+l1OWSny8uzHhra
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:09:07 2025 by rpki-client