Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/MhuwQoYW20TMcq1PdgNXXiGR7XU.roa
File: MhuwQoYW20TMcq1PdgNXXiGR7XU.roa (raw, json)
Hash identifier: cEjZXJsQfHnY+2fZ9qeslTeSc6LEnyffbV0K1USSZek=
Subject key identifier: 32:1B:B0:42:86:16:DB:44:CC:72:AD:4F:76:03:57:5E:21:91:ED:75
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 0199A16AEBD23E0A8C5CA282CD81E560CC0A
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/MhuwQoYW20TMcq1PdgNXXiGR7XU.roa
Signing time: Wed 01 Oct 2025 20:16:02 +0000
ROA not before: Wed 01 Oct 2025 20:16:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5588
IP address blocks: 84.2.79.0/24 maxlen: 24
91.120.0.0/16 maxlen: 16
194.88.32.0/19 maxlen: 19
194.88.37.0/24 maxlen: 24
194.149.0.0/19 maxlen: 19
195.56.202.0/23 maxlen: 23
195.56.203.0/24 maxlen: 24
195.70.32.0/19 maxlen: 19
217.20.128.0/20 maxlen: 20
217.116.32.0/20 maxlen: 20
2a00:10d0::/32 maxlen: 32
2a02:738::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a1:6a:eb:d2:3e:0a:8c:5c:a2:82:cd:81:e5:60:cc:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Oct 1 20:16:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=321bb0428616db44cc72ad4f7603575e2191ed75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c1:0f:27:5e:02:1d:ff:00:46:d5:39:1b:0f:
d0:b1:63:15:8e:49:e7:48:85:4e:bf:aa:8f:0d:5d:
bc:e8:92:df:a6:b5:43:85:4a:43:8f:c3:3b:ba:20:
87:2a:e4:d2:76:92:1f:4b:ee:3f:b5:3a:3f:8c:41:
8f:ad:f7:81:08:c8:74:9a:64:0d:00:b4:9b:66:f8:
be:7d:74:13:c4:9a:02:12:9a:eb:5a:32:ea:33:5e:
52:8c:8e:dc:be:fa:4f:1d:df:05:46:f6:1a:2b:b2:
1c:98:91:a8:0c:2b:c1:e9:0e:98:0c:e9:da:5e:c4:
df:ae:7e:0f:89:b0:56:78:c5:3c:aa:9f:53:63:88:
bb:ef:69:38:d0:28:dc:c5:e8:37:0b:11:8c:7b:69:
c9:c0:f1:1d:29:8b:6c:b6:97:35:2b:b5:11:ce:bd:
a8:08:70:95:d3:33:b2:1b:a9:18:90:60:dc:af:4b:
3d:6a:05:6f:da:91:d1:53:b4:61:79:05:f7:0e:79:
0d:90:3a:a2:2d:b0:b8:7a:ca:43:2b:6a:4f:ad:47:
29:bf:1d:e4:a7:e7:d3:4e:90:74:c2:46:d0:7c:7d:
4c:83:ea:c4:93:34:13:09:a6:e1:40:d7:62:27:1a:
91:a3:bb:3b:ca:98:bc:4d:d5:c4:24:84:c6:26:94:
17:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1B:B0:42:86:16:DB:44:CC:72:AD:4F:76:03:57:5E:21:91:ED:75
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/MhuwQoYW20TMcq1PdgNXXiGR7XU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.2.79.0/24
91.120.0.0/16
194.88.32.0/19
194.149.0.0/19
195.56.202.0/23
195.70.32.0/19
217.20.128.0/20
217.116.32.0/20
IPv6:
2a00:10d0::/32
2a02:738::/32
Signature Algorithm: sha256WithRSAEncryption
36:d6:50:23:8d:a1:7b:14:b6:8e:be:63:dd:e0:9a:40:12:f0:
d8:c0:30:80:47:c6:d8:22:39:fa:27:46:a3:41:cd:44:07:54:
2d:5d:fc:33:8a:25:1e:85:62:dc:44:37:b4:0f:35:7e:98:4e:
14:b7:d2:be:0a:10:86:94:9f:af:38:68:a6:45:e0:b3:c7:23:
a6:71:5a:97:e2:84:7e:a3:00:ce:b0:c5:61:42:78:2e:86:25:
12:64:e9:f4:80:02:29:33:a0:47:32:e7:68:96:75:da:ff:95:
6d:01:67:5b:ca:3e:7e:eb:53:c1:17:c7:6a:0b:06:89:82:b6:
2b:b2:ef:91:8b:f5:87:1a:04:f5:b6:19:75:bb:ca:9b:23:05:
39:54:97:41:bd:6e:af:be:2e:20:b9:a7:95:c4:e6:58:62:5c:
36:06:f7:7f:60:84:e5:e2:fb:8b:c3:94:dd:6a:81:29:6e:8f:
5f:a9:3d:cc:27:7a:c0:67:c5:6d:b0:65:18:5b:b1:a6:84:35:
3a:10:a0:c6:3f:c6:cd:79:13:1b:c1:30:f1:3b:e3:8b:09:22:
64:3c:12:b3:da:60:93:e7:b2:30:71:e9:83:09:71:84:15:31:
a4:ff:e2:79:45:c6:e1:38:9b:20:b9:03:62:40:72:8e:88:fd:
05:f2:6b:dd
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgISAZmhauvSPgqMXKKCzYHlYMwKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMmRhYzYwNWY0NjU5NzE4YzBhMTVlMWY3MzJjYmQ0ZjQ4
YWFlN2IwHhcNMjUxMDAxMjAxNjAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjFiYjA0Mjg2MTZkYjQ0Y2M3MmFkNGY3NjAzNTc1ZTIxOTFlZDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMEPJ14CHf8ARtU5Gw/QsWMVjknn
SIVOv6qPDV286JLfprVDhUpDj8M7uiCHKuTSdpIfS+4/tTo/jEGPrfeBCMh0mmQN
ALSbZvi+fXQTxJoCEprrWjLqM15SjI7cvvpPHd8FRvYaK7IcmJGoDCvB6Q6YDOna
XsTfrn4PibBWeMU8qp9TY4i772k40Cjcxeg3CxGMe2nJwPEdKYtstpc1K7URzr2o
CHCV0zOyG6kYkGDcr0s9agVv2pHRU7RheQX3DnkNkDqiLbC4espDK2pPrUcpvx3k
p+fTTpB0wkbQfH1Mg+rEkzQTCabhQNdiJxqRo7s7ypi8TdXEJITGJpQXrwIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFDIbsEKGFttEzHKtT3YDV14hke11MB8GA1UdIwQY
MBaAFPAtrGBfRllxjAoV4fcyy9T0iq57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYt
MjkyYWU0NmU2MzAyLzEvTWh1d1FvWVcyMFRNY3ExUGRnTlhYaUdSN1hVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYtMjkyYWU0NmU2MzAy
LzEvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA1BAIAATAvAwQAVAJPAwMA
W3gDBAXCWCADBAXClQADBAHDOMoDBAXDRiADBATZFIADBATZdCAwFAQCAAIwDgMF
ACoAENADBQAqAgc4MA0GCSqGSIb3DQEBCwUAA4IBAQA21lAjjaF7FLaOvmPd4JpA
EvDYwDCAR8bYIjn6J0ajQc1EB1QtXfwziiUehWLcRDe0DzV+mE4Ut9K+ChCGlJ+v
OGimReCzxyOmcVqX4oR+owDOsMVhQnguhiUSZOn0gAIpM6BHMudolnXa/5VtAWdb
yj5+61PBF8dqCwaJgrYrsu+Ri/WHGgT1thl1u8qbIwU5VJdBvW6vvi4guaeVxOZY
Ylw2Bvd/YITl4vuLw5TdaoEpbo9fqT3MJ3rAZ8VtsGUYW7GmhDU6EKDGP8bNeRMb
wTDxO+OLCSJkPBKz2mCT57IwcemDCXGEFTGk/+J5RcbhOJsguQNiQHKOiP0F8mvd
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:05:39 2025 by rpki-client