Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/mQ93FWl0JXAb-9Lp-jmTTauisbg.roa
File: mQ93FWl0JXAb-9Lp-jmTTauisbg.roa (raw, json)
Hash identifier: P0vbg934s11GmSHztDn7aebQEu/H59GnrnlIx7I1KFA=
Subject key identifier: 99:0F:77:15:69:74:25:70:1B:FB:D2:E9:FA:39:93:4D:AB:A2:B1:B8
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 0198D181D7A4510809DCAEB71F0210C92994
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/mQ93FWl0JXAb-9Lp-jmTTauisbg.roa
Signing time: Fri 22 Aug 2025 11:20:04 +0000
ROA not before: Fri 22 Aug 2025 11:20:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.43.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d1:81:d7:a4:51:08:09:dc:ae:b7:1f:02:10:c9:29:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Aug 22 11:20:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=990f7715697425701bfbd2e9fa39934daba2b1b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7c:d7:ae:9b:56:df:00:82:d3:05:5a:e4:94:
7d:2b:0b:d5:c1:6f:d3:5b:c5:e8:21:94:c5:85:ae:
7b:61:d3:f9:db:29:8c:18:06:21:39:76:3d:dc:2e:
66:b8:54:3c:5d:27:55:86:ba:76:13:9b:94:dc:a8:
24:b0:40:35:1e:9b:79:51:b0:8c:12:d5:f4:bd:82:
e8:92:bc:cb:3b:1a:ba:e3:10:83:6a:0b:bc:ca:a7:
df:24:3b:93:6d:14:7f:4d:85:bd:58:4b:e6:9a:6f:
6a:64:4f:b6:72:61:31:e9:c4:fa:fd:af:95:dc:65:
7f:2a:42:6c:9b:30:74:42:98:a9:c4:04:a8:88:6e:
cd:f8:9d:55:cb:1e:3f:e4:da:b2:36:e3:75:1f:b3:
11:44:5c:ec:f3:53:e8:93:b0:ea:00:6f:4d:8e:f3:
9c:f0:52:de:03:35:01:2d:4a:bc:16:c8:48:61:51:
a3:6c:eb:ad:d7:3e:2c:3f:90:6a:1c:62:e6:29:1f:
55:98:cb:93:a1:88:7a:77:25:84:0e:55:44:3c:f3:
b2:78:c1:dc:5b:cf:a7:b6:64:3e:2b:c1:84:8d:62:
52:fd:fe:b6:79:ae:e2:d4:82:64:60:c2:fe:26:3e:
7a:0b:2b:55:ce:ed:f5:7c:9a:b0:12:96:05:c4:4c:
ad:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0F:77:15:69:74:25:70:1B:FB:D2:E9:FA:39:93:4D:AB:A2:B1:B8
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/mQ93FWl0JXAb-9Lp-jmTTauisbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.167.0/24
Signature Algorithm: sha256WithRSAEncryption
37:b9:c5:88:a1:b2:23:f0:e1:dc:dd:d9:18:57:58:4d:fc:72:
0a:4f:03:8f:80:2b:f8:dd:51:67:c3:17:7a:c4:01:69:b4:db:
46:ac:3e:db:d3:41:a0:52:3e:d6:3c:8b:ed:c4:99:3a:c5:78:
0b:c6:08:1a:15:6c:56:40:3c:99:51:a8:c8:85:16:1f:69:ba:
0b:29:7e:d8:64:09:88:56:03:df:f1:05:1d:5e:08:07:86:4a:
2e:44:24:c2:c8:17:55:ea:2e:4c:41:15:0e:cd:36:25:78:ab:
22:d1:98:dc:0e:b8:8c:c0:34:d3:69:80:f6:83:e1:7f:f1:46:
19:bf:8c:03:c4:e3:7c:8e:ec:9d:f0:5e:38:6a:54:3a:12:60:
19:b0:c3:b3:e6:96:81:3e:c8:d0:d2:db:6a:8c:7a:6c:46:2d:
90:55:f5:fd:ce:29:d1:58:ef:3b:ac:24:35:aa:a0:8a:dc:89:
73:b8:ba:2b:f1:f3:73:bb:06:18:cd:d7:95:42:b8:26:fa:5b:
f1:46:67:e4:ee:af:19:00:c6:75:57:1a:90:5b:03:2c:71:be:
58:83:9e:4d:b3:de:56:14:2f:05:58:cf:6b:24:b2:fc:86:47:
51:85:ad:d3:93:2f:7d:10:43:5c:87:7b:8c:d8:74:9d:a8:04:
0a:95:48:fe
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZjRgdekUQgJ3K63HwIQySmUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZjI0NzI2ZGYzZTc3ZjZmNGM4ZTA0MzY2MTNiMzUxMTBl
ZWFmMzgwHhcNMjUwODIyMTEyMDA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTBmNzcxNTY5NzQyNTcwMWJmYmQyZTlmYTM5OTM0ZGFiYTJiMWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXzXrptW3wCC0wVa5JR9KwvVwW/T
W8XoIZTFha57YdP52ymMGAYhOXY93C5muFQ8XSdVhrp2E5uU3KgksEA1Hpt5UbCM
EtX0vYLokrzLOxq64xCDagu8yqffJDuTbRR/TYW9WEvmmm9qZE+2cmEx6cT6/a+V
3GV/KkJsmzB0QpipxASoiG7N+J1Vyx4/5NqyNuN1H7MRRFzs81Pok7DqAG9NjvOc
8FLeAzUBLUq8FshIYVGjbOut1z4sP5BqHGLmKR9VmMuToYh6dyWEDlVEPPOyeMHc
W8+ntmQ+K8GEjWJS/f62ea7i1IJkYML+Jj56CytVzu31fJqwEpYFxEytZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJkPdxVpdCVwG/vS6fo5k02rorG4MB8GA1UdIwQY
MBaAFN/yRybfPnf29MjgQ2YTs1EQ7q84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzct
NjJiYjZkNjNlNTlkLzEvbVE5M0ZXbDBKWEFiLTlMcC1qbVRUYXVpc2JnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzctNjJiYjZkNjNlNTlk
LzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHyunMA0G
CSqGSIb3DQEBCwUAA4IBAQA3ucWIobIj8OHc3dkYV1hN/HIKTwOPgCv43VFnwxd6
xAFptNtGrD7b00GgUj7WPIvtxJk6xXgLxggaFWxWQDyZUajIhRYfaboLKX7YZAmI
VgPf8QUdXggHhkouRCTCyBdV6i5MQRUOzTYleKsi0ZjcDriMwDTTaYD2g+F/8UYZ
v4wDxON8juyd8F44alQ6EmAZsMOz5paBPsjQ0ttqjHpsRi2QVfX9zinRWO87rCQ1
qqCK3IlzuLor8fNzuwYYzdeVQrgm+lvxRmfk7q8ZAMZ1VxqQWwMscb5Yg55Ns95W
FC8FWM9rJLL8hkdRha3Tky99EENch3uM2HSdqAQKlUj+
-----END CERTIFICATE-----
Generated at Sat Aug 23 07:00:00 2025 by rpki-client