Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/Mb-LmcxVL1VtsH8hRS7hr7XbD0M.roa
File: Mb-LmcxVL1VtsH8hRS7hr7XbD0M.roa (raw, json)
Hash identifier: KME4a3jYpOqtZ1MxibFa+qtZYD833WMiiPbSgGuC5dk=
Subject key identifier: 31:BF:8B:99:CC:55:2F:55:6D:B0:7F:21:45:2E:E1:AF:B5:DB:0F:43
Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Certificate serial: 019871BE3AC7704C5CA6B984AC28DBE62A29
Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/Mb-LmcxVL1VtsH8hRS7hr7XbD0M.roa
Signing time: Sun 03 Aug 2025 21:02:28 +0000
ROA not before: Sun 03 Aug 2025 21:02:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205949
IP address blocks: 95.170.20.0/24 maxlen: 24
95.170.26.0/24 maxlen: 24
95.170.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:43:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:71:be:3a:c7:70:4c:5c:a6:b9:84:ac:28:db:e6:2a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Validity
Not Before: Aug 3 21:02:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31bf8b99cc552f556db07f21452ee1afb5db0f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c9:71:70:4e:64:2c:1f:df:1e:a6:8c:db:bb:
22:c8:8a:cf:d0:81:49:34:47:ee:4e:90:40:61:46:
81:a3:e6:8e:71:b4:e4:e7:a0:95:06:42:10:57:0f:
29:ae:b3:f3:89:19:8f:88:ca:88:29:5e:e7:51:a0:
2a:81:b2:e0:13:96:75:ef:b6:68:a6:c3:f1:62:e7:
12:d5:ac:f8:6c:d2:d5:a3:e9:f9:c7:ad:64:0f:85:
ff:4d:3e:a3:1b:b5:93:7d:1a:55:76:c0:91:d4:89:
86:42:34:dd:95:51:e6:b4:b1:d9:5d:f6:2a:52:2e:
8f:4a:d2:b9:91:7b:e7:05:8b:52:5b:22:89:58:4e:
ef:2a:e7:33:03:df:9b:10:d7:30:73:4f:40:32:a1:
ba:4f:d3:c0:b6:1e:7e:11:01:f7:7f:2b:d8:8d:33:
9a:df:9d:1c:f6:37:32:0b:e5:14:e9:f9:7c:0e:a5:
4b:ca:20:b3:c9:85:dd:a4:82:b0:54:a7:9d:94:83:
d4:93:ac:84:b5:bb:16:31:38:ef:93:ec:d4:d4:c6:
33:ba:14:56:65:4e:4d:a5:de:29:fc:ba:0c:d4:39:
63:d7:66:1d:0b:88:a4:5a:e6:cc:7d:1a:9a:99:7f:
ed:6b:4e:c9:28:a9:16:00:73:ab:2c:17:9f:50:33:
ec:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BF:8B:99:CC:55:2F:55:6D:B0:7F:21:45:2E:E1:AF:B5:DB:0F:43
X509v3 Authority Key Identifier:
keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/Mb-LmcxVL1VtsH8hRS7hr7XbD0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.170.20.0/24
95.170.26.0/24
95.170.30.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:77:19:44:b0:f8:ee:0b:d1:6f:8e:ee:de:ca:2b:2b:53:cc:
ff:a5:7e:84:ea:9f:7a:40:45:73:9f:43:46:3a:1a:d8:c8:95:
31:74:5c:38:16:c8:e5:5e:b0:58:b0:2b:2c:20:01:21:ad:62:
9a:df:b3:be:e9:20:2c:f3:f4:8c:b8:5e:22:75:55:5c:43:65:
b5:b9:d6:d6:99:b4:2e:d3:d3:19:d9:66:da:c5:16:0f:67:01:
ec:ec:09:5b:a1:bb:28:84:00:60:11:f7:1d:95:74:20:f3:9f:
f5:8c:f2:30:15:4a:5b:4d:a3:45:b9:c8:a0:62:1f:14:df:3a:
31:9b:f8:ca:80:f6:85:15:f5:62:b3:19:51:65:75:25:ec:a1:
6b:67:7a:e3:1d:3f:1e:6b:4b:be:04:c0:39:13:06:35:bc:be:
3a:56:8b:c6:a3:19:ac:63:9f:90:ae:e9:30:b0:82:99:80:49:
a8:05:82:2c:7e:5b:72:7a:4f:c1:01:3b:a2:23:7d:96:ca:ea:
6d:7b:a4:5b:00:bf:4f:61:67:32:b5:71:38:4f:d5:8a:8f:e2:
49:24:0b:1e:ff:3a:6c:79:8e:f4:b5:18:dd:88:c3:8d:9e:9d:
4b:61:2d:25:fb:f2:47:9b:3c:c0:1d:d1:53:7e:26:05:67:3c:
99:ba:f1:37
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZhxvjrHcExcprmErCjb5iopMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZTQyNWEzMmI2MmQzOTgxOGM0Y2JiMDA4MTA3NTY4NmZj
NGM4ZTgwHhcNMjUwODAzMjEwMjI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMWJmOGI5OWNjNTUyZjU1NmRiMDdmMjE0NTJlZTFhZmI1ZGIwZjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8lxcE5kLB/fHqaM27siyIrP0IFJ
NEfuTpBAYUaBo+aOcbTk56CVBkIQVw8prrPziRmPiMqIKV7nUaAqgbLgE5Z177Zo
psPxYucS1az4bNLVo+n5x61kD4X/TT6jG7WTfRpVdsCR1ImGQjTdlVHmtLHZXfYq
Ui6PStK5kXvnBYtSWyKJWE7vKuczA9+bENcwc09AMqG6T9PAth5+EQH3fyvYjTOa
350c9jcyC+UU6fl8DqVLyiCzyYXdpIKwVKedlIPUk6yEtbsWMTjvk+zU1MYzuhRW
ZU5Npd4p/LoM1Dlj12YdC4ikWubMfRqamX/ta07JKKkWAHOrLBefUDPsxwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDG/i5nMVS9VbbB/IUUu4a+12w9DMB8GA1UdIwQY
MBaAFCDkJaMrYtOYGMTLsAgQdWhvxMjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGIt
ZWNkMjk2NWNiN2U3LzEvTWItTG1jeFZMMVZ0c0g4aFJTN2hyN1hiRDBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGItZWNkMjk2NWNiN2U3
LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAX6oUAwQA
X6oaAwQAX6oeMA0GCSqGSIb3DQEBCwUAA4IBAQA+dxlEsPjuC9Fvju7eyisrU8z/
pX6E6p96QEVzn0NGOhrYyJUxdFw4FsjlXrBYsCssIAEhrWKa37O+6SAs8/SMuF4i
dVVcQ2W1udbWmbQu09MZ2WbaxRYPZwHs7AlbobsohABgEfcdlXQg85/1jPIwFUpb
TaNFucigYh8U3zoxm/jKgPaFFfVisxlRZXUl7KFrZ3rjHT8ea0u+BMA5EwY1vL46
VovGoxmsY5+QrukwsIKZgEmoBYIsfltyek/BATuiI32Wyupte6RbAL9PYWcytXE4
T9WKj+JJJAse/zpseY70tRjdiMONnp1LYS0l+/JHmzzAHdFTfiYFZzyZuvE3
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:21:40 2025 by rpki-client