Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/Msw5lWLcMEnYB6JQ72VGTubuEUo.roa
File: Msw5lWLcMEnYB6JQ72VGTubuEUo.roa (raw, json)
Hash identifier: j3iVppScPPj4RkIHmOn6ItOKTBT6owq12o7XbsNpt4A=
Subject key identifier: 32:CC:39:95:62:DC:30:49:D8:07:A2:50:EF:65:46:4E:E6:EE:11:4A
Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Certificate serial: 019938C5DF00D15DC62C92DA536099EAEABA
Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/Msw5lWLcMEnYB6JQ72VGTubuEUo.roa
Signing time: Thu 11 Sep 2025 12:35:15 +0000
ROA not before: Thu 11 Sep 2025 12:35:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210976
IP address blocks: 31.130.128.0/22 maxlen: 24
77.233.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:c5:df:00:d1:5d:c6:2c:92:da:53:60:99:ea:ea:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Validity
Not Before: Sep 11 12:35:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32cc399562dc3049d807a250ef65464ee6ee114a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:34:ee:cf:02:6d:24:fc:56:30:3f:b4:da:43:
d1:e6:12:7b:12:4c:31:b7:55:7c:25:f4:82:4a:04:
a0:e7:a7:48:69:13:e3:c5:6c:27:7b:83:8a:7a:71:
fa:d5:8f:ce:41:5f:10:a1:c3:1e:5b:77:dc:5d:00:
28:4e:34:bd:c5:47:ea:46:56:c8:03:2c:79:16:77:
ae:da:92:11:e1:1c:a5:ae:3a:6f:18:f7:c5:f8:ec:
84:9c:f5:d4:ed:cb:be:d4:f1:33:25:ec:d4:d2:24:
2f:c4:dd:18:1f:93:64:b2:16:76:23:28:7f:19:ca:
5d:57:11:e8:d6:77:74:bf:13:7a:8f:ee:79:4c:14:
69:ce:82:74:1e:b1:fb:4a:b8:0f:e6:bc:7a:3b:53:
be:01:72:00:78:af:c3:21:0f:c8:ba:18:4c:3a:ef:
72:a4:93:a0:4d:2c:97:4a:42:51:d8:ed:01:08:86:
34:69:e1:fb:ac:2e:96:f7:99:7b:27:54:ac:a7:d7:
7d:cf:c9:ab:cb:6d:92:02:df:ef:78:dd:d5:a5:0e:
88:21:4b:4b:49:8a:ae:a0:6c:4e:e4:2a:f7:93:e7:
8c:4d:ba:98:f7:24:b4:8f:db:50:0d:84:8d:be:dc:
ac:1e:a1:4b:b6:82:3b:3d:b5:c4:27:a7:3c:46:ba:
12:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CC:39:95:62:DC:30:49:D8:07:A2:50:EF:65:46:4E:E6:EE:11:4A
X509v3 Authority Key Identifier:
keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/Msw5lWLcMEnYB6JQ72VGTubuEUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.128.0/22
77.233.212.0/22
Signature Algorithm: sha256WithRSAEncryption
76:31:7e:d1:67:09:ae:de:2a:0d:88:59:b2:6f:1a:aa:81:c8:
80:96:03:4b:a7:39:f3:3b:85:47:32:0a:2e:76:99:23:56:a1:
10:ec:48:b1:48:fb:e9:e8:39:78:a6:58:da:8a:64:63:43:93:
a1:e3:a7:36:4a:ff:33:40:c4:ee:9b:36:85:cd:89:45:37:58:
1f:f6:37:9a:71:d6:63:8e:56:92:6b:74:89:cd:cc:76:ab:92:
80:f6:97:59:13:60:60:45:7e:c3:35:28:bb:3c:71:9d:a3:40:
26:f1:3f:d2:e0:6f:06:36:7b:c4:fc:13:2c:5a:80:dc:a8:30:
f9:4a:a4:32:ce:5d:1d:2c:4c:c5:aa:8f:c2:0e:a1:34:e2:ea:
54:08:4f:6e:52:d4:9f:b6:a1:e2:86:5b:1c:89:d9:9f:28:b9:
94:51:3f:d4:ed:3e:ea:03:d9:4b:90:c4:a7:58:c4:57:1a:d6:
31:0c:be:65:79:83:7d:aa:8e:68:cf:00:3a:9e:f1:ab:7a:b8:
b3:58:b3:f5:5f:ce:d9:86:7f:20:23:a9:a9:cf:5d:4b:b6:6a:
4d:88:bb:3c:cb:75:48:c9:dd:8a:05:ca:24:31:18:b7:14:52:
4a:01:bb:e4:be:9a:d9:1b:b3:20:96:08:ae:19:fd:c2:07:40:
8d:cb:fa:0b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZk4xd8A0V3GLJLaU2CZ6uq6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjNzFjOTYwMDVlMTNhODRhM2YzMWVmMWQ5OTE3NzdmNGI2
ZTMxYTcwHhcNMjUwOTExMTIzNTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmNjMzk5NTYyZGMzMDQ5ZDgwN2EyNTBlZjY1NDY0ZWU2ZWUxMTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jTuzwJtJPxWMD+02kPR5hJ7Ekwx
t1V8JfSCSgSg56dIaRPjxWwne4OKenH61Y/OQV8QocMeW3fcXQAoTjS9xUfqRlbI
Ayx5Fneu2pIR4RylrjpvGPfF+OyEnPXU7cu+1PEzJezU0iQvxN0YH5NkshZ2Iyh/
GcpdVxHo1nd0vxN6j+55TBRpzoJ0HrH7SrgP5rx6O1O+AXIAeK/DIQ/IuhhMOu9y
pJOgTSyXSkJR2O0BCIY0aeH7rC6W95l7J1Ssp9d9z8mry22SAt/veN3VpQ6IIUtL
SYquoGxO5Cr3k+eMTbqY9yS0j9tQDYSNvtysHqFLtoI7PbXEJ6c8RroS8wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDLMOZVi3DBJ2AeiUO9lRk7m7hFKMB8GA1UdIwQY
MBaAFCxxyWAF4TqEo/Me8dmRd39LbjGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUt
N2EyOGFmMjljZGMyLzEvTXN3NWxXTGNNRW5ZQjZKUTcyVkdUdWJ1RVVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUtN2EyOGFmMjljZGMy
LzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCH4KAAwQC
TenUMA0GCSqGSIb3DQEBCwUAA4IBAQB2MX7RZwmu3ioNiFmybxqqgciAlgNLpznz
O4VHMgoudpkjVqEQ7EixSPvp6Dl4pljaimRjQ5Oh46c2Sv8zQMTumzaFzYlFN1gf
9jeacdZjjlaSa3SJzcx2q5KA9pdZE2BgRX7DNSi7PHGdo0Am8T/S4G8GNnvE/BMs
WoDcqDD5SqQyzl0dLEzFqo/CDqE04upUCE9uUtSftqHihlscidmfKLmUUT/U7T7q
A9lLkMSnWMRXGtYxDL5leYN9qo5ozwA6nvGrerizWLP1X87Zhn8gI6mpz11LtmpN
iLs8y3VIyd2KBcokMRi3FFJKAbvkvprZG7MglgiuGf3CB0CNy/oL
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:42 2025 by rpki-client