Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/mFkzzd-6tEl4xWmenZux4A_50l4.roa
File: mFkzzd-6tEl4xWmenZux4A_50l4.roa (raw, json)
Hash identifier: xx4Hj/W51xpC8I6Vqy3+k0QPBw4JsZ0OsF12aOP2hF8=
Subject key identifier: 98:59:33:CD:DF:BA:B4:49:78:C5:69:9E:9D:9B:B1:E0:0F:F9:D2:5E
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0199E81DECD014E6722910EE2B3CFD417112
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/mFkzzd-6tEl4xWmenZux4A_50l4.roa
Signing time: Wed 15 Oct 2025 13:44:59 +0000
ROA not before: Wed 15 Oct 2025 13:44:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200740
IP address blocks: 89.44.84.0/23 maxlen: 23
95.81.77.0/24 maxlen: 24
95.81.94.0/23 maxlen: 23
95.81.112.0/24 maxlen: 24
95.81.113.0/24 maxlen: 24
95.81.119.0/24 maxlen: 24
95.81.120.0/24 maxlen: 24
103.85.112.0/24 maxlen: 24
103.85.113.0/24 maxlen: 24
109.69.56.0/23 maxlen: 23
109.69.58.0/23 maxlen: 23
185.103.252.0/23 maxlen: 23
185.103.254.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e8:1d:ec:d0:14:e6:72:29:10:ee:2b:3c:fd:41:71:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Oct 15 13:44:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=985933cddfbab44978c5699e9d9bb1e00ff9d25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:16:67:99:b5:54:18:3c:5b:d1:42:9c:40:96:
c3:c0:54:80:e1:f8:77:57:09:b7:6a:4a:c3:7c:6b:
81:48:b4:42:93:fc:fd:29:a9:80:0b:60:0f:71:0f:
80:50:65:80:5a:41:30:6e:56:f9:90:57:ce:68:12:
cf:ab:e2:5c:98:17:fc:3d:78:99:a5:84:2d:d4:55:
72:9b:a6:ea:29:ff:27:7b:a9:ac:cf:f4:29:56:cb:
f1:cd:0e:c3:41:c9:19:8f:a2:0d:f3:f8:d9:73:ac:
d7:dd:52:88:90:24:03:39:ba:bc:18:6e:9e:89:86:
5d:4f:9a:c8:d8:56:f6:49:8f:c4:f4:06:21:c9:ab:
92:eb:5f:df:81:46:28:09:d2:ba:c9:e8:3d:12:79:
00:08:de:cc:37:49:e9:1a:72:05:45:2b:2a:50:b7:
cf:b4:ac:85:fa:28:43:47:70:7f:49:36:fa:6c:52:
48:86:b9:1c:70:46:94:32:dc:38:ca:3b:52:61:40:
de:e0:99:04:a6:01:2b:6f:54:07:62:49:17:bf:e0:
1c:28:84:90:c7:9e:88:31:54:26:b9:77:3e:05:32:
73:26:4e:88:82:2d:c6:81:7f:be:9b:7c:a4:6c:c5:
ac:e6:cc:28:61:17:93:30:09:ab:60:c4:57:96:10:
92:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:59:33:CD:DF:BA:B4:49:78:C5:69:9E:9D:9B:B1:E0:0F:F9:D2:5E
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/mFkzzd-6tEl4xWmenZux4A_50l4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.84.0/23
95.81.77.0/24
95.81.94.0/23
95.81.112.0/23
95.81.119.0-95.81.120.255
103.85.112.0/23
109.69.56.0/22
185.103.252.0/22
Signature Algorithm: sha256WithRSAEncryption
46:b2:20:cb:95:82:16:c7:0a:df:6c:20:25:f3:6d:2f:da:12:
44:df:7a:6b:4a:91:a3:c2:c0:c2:91:39:32:3f:10:29:eb:c0:
f5:af:9c:54:50:4b:cb:76:aa:34:e4:c6:5d:6d:79:ec:53:15:
07:68:4a:39:0c:77:1b:42:95:42:0d:ae:13:ab:68:93:1b:a4:
b5:9f:99:3f:00:93:64:06:3b:1e:a6:04:90:97:8e:fe:86:a6:
b9:6f:4d:c2:0f:3b:d5:33:9b:0d:32:ed:dc:52:25:5f:c7:d6:
ac:bf:aa:e1:75:be:00:97:c6:33:50:49:28:84:f8:c4:fa:16:
3e:08:ef:a2:28:85:06:4b:af:ef:69:72:46:32:0f:fa:e0:ac:
54:80:b5:a6:92:46:c6:ff:89:1f:0c:82:26:01:79:93:22:f1:
d6:22:12:cc:a4:2f:9c:67:fe:8c:d8:27:68:9b:10:eb:3a:87:
ac:d0:58:a5:c1:05:b4:e4:c2:ab:b0:da:29:87:d8:9b:9a:15:
96:ce:41:15:ae:43:44:7f:83:b7:12:cc:f2:9b:3e:3b:a7:56:
43:be:12:e6:3c:3c:7c:f7:eb:b3:ed:43:1c:97:64:83:c4:10:
15:fc:fa:0f:f4:71:e0:69:25:24:bc:b2:90:ae:eb:dc:f7:05:
f6:2a:ac:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:47:56 2025 by rpki-client