Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/mP-S5aKpzjHPTMYUwxCB2-7CEhQ.roa
File: mP-S5aKpzjHPTMYUwxCB2-7CEhQ.roa (raw, json)
Hash identifier: dQhgFgYjkT0BJ2PwJgliD78SQQKKnPd6jZtPJn6Gwe4=
Subject key identifier: 98:FF:92:E5:A2:A9:CE:31:CF:4C:C6:14:C3:10:81:DB:EE:C2:12:14
Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46
Certificate serial: 01995769307AE893D67FC2566911D9C3EB3A
Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/mP-S5aKpzjHPTMYUwxCB2-7CEhQ.roa
Signing time: Wed 17 Sep 2025 11:22:15 +0000
ROA not before: Wed 17 Sep 2025 11:22:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205250
IP address blocks: 192.103.86.0/24 maxlen: 24
192.103.91.0/24 maxlen: 24
192.103.92.0/24 maxlen: 24
192.103.105.0/24 maxlen: 24
192.103.106.0/24 maxlen: 24
192.103.110.0/24 maxlen: 24
192.103.111.0/24 maxlen: 24
192.103.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:57:69:30:7a:e8:93:d6:7f:c2:56:69:11:d9:c3:eb:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46
Validity
Not Before: Sep 17 11:22:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98ff92e5a2a9ce31cf4cc614c31081dbeec21214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:33:90:93:6a:c0:30:1f:ae:e5:ac:48:95:ef:
76:a1:7b:86:b8:91:17:81:90:86:c6:31:63:63:85:
32:8c:7c:a2:ee:59:3f:18:bf:02:5f:c5:53:af:24:
10:df:cf:e2:57:82:d0:e9:4a:50:45:37:30:54:e0:
43:f7:ac:3f:ba:62:97:3f:a3:f9:c8:cc:32:a5:dd:
38:9a:90:0d:9b:4c:97:6a:de:a5:e5:51:79:59:08:
24:ac:5f:44:1f:76:24:9f:50:3e:df:51:e5:a5:d2:
6b:f3:ee:6d:dc:bd:c4:1e:00:f1:1e:fa:40:cd:60:
8b:af:1b:d9:c2:69:21:21:75:96:2f:57:b3:7e:3e:
4e:bf:01:da:6e:b7:b3:66:b5:21:54:61:86:9c:b3:
9a:df:79:34:0b:dd:5d:c9:83:e2:cc:0e:0f:cc:7c:
32:47:fa:de:aa:5f:22:cd:f6:df:1d:88:c5:45:0b:
09:33:39:f4:a5:2e:8c:18:56:d4:12:8c:4b:c1:c8:
0b:a9:c7:65:0f:4a:bf:9e:ea:3a:f4:9e:2f:a3:37:
8e:68:6d:b4:e6:42:db:c4:cc:a0:f8:1a:2a:de:c5:
ca:72:d3:02:5e:14:2c:b9:0a:f3:ed:3a:cf:44:01:
b6:09:a7:88:9d:40:72:9e:3c:3c:b3:90:a1:7d:73:
ee:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FF:92:E5:A2:A9:CE:31:CF:4C:C6:14:C3:10:81:DB:EE:C2:12:14
X509v3 Authority Key Identifier:
keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/mP-S5aKpzjHPTMYUwxCB2-7CEhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.103.86.0/24
192.103.91.0-192.103.92.255
192.103.105.0-192.103.106.255
192.103.110.0/23
192.103.116.0/24
Signature Algorithm: sha256WithRSAEncryption
19:21:60:54:5f:6d:04:2c:26:a9:b3:4d:ee:37:fe:de:af:9c:
b5:6e:29:2b:e7:c1:c3:56:cb:10:d0:af:ea:76:76:0f:e0:ab:
fd:83:ec:9a:a7:93:11:47:04:76:99:ff:7b:52:ef:33:8a:98:
9c:92:70:25:66:a3:c5:8a:10:f5:1f:f3:28:ea:e2:7e:fd:cb:
6b:2c:9a:3d:91:b1:e7:e8:5e:e1:51:e7:db:16:27:97:98:c1:
76:c8:f4:8f:75:ea:2b:c4:39:d6:71:8d:97:88:6e:8d:2c:5e:
2e:99:97:d4:3d:7a:2c:de:29:54:b4:6c:da:74:1a:75:23:c6:
fc:81:ff:2c:4c:f0:d8:9a:06:ca:3b:b9:c1:df:39:46:ea:77:
e2:f4:2c:b0:02:c3:e7:07:43:58:c3:8a:2a:85:c5:64:c1:22:
ba:f1:b3:e6:aa:32:23:e6:2d:06:f6:44:4d:e8:b7:10:5d:12:
98:82:98:3b:de:dd:2e:96:1d:d9:a9:60:d3:36:74:75:7d:54:
5b:80:c3:a3:d0:a0:16:80:f9:b1:71:b2:d0:91:ee:a5:4f:76:
92:80:46:ea:e9:79:19:d6:9f:68:1f:f8:c6:50:5d:64:63:ed:
a4:a4:97:f0:f4:07:b6:61:8d:3f:92:c1:c5:18:15:d6:9c:15:
24:9d:4c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:49:24 2025 by rpki-client