Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/MqlpmDhYAub2bu3DE_adNxU2zB4.roa
File: MqlpmDhYAub2bu3DE_adNxU2zB4.roa (raw, json)
Hash identifier: gwjgbm4J/KmnCuxBa3i4/WnmlRnKiQOkFcPgwudjAHk=
Subject key identifier: 32:A9:69:98:38:58:02:E6:F6:6E:ED:C3:13:F6:9D:37:15:36:CC:1E
Certificate issuer: /CN=d0040765e474600e1bc7622a43663dd8d9fadc87
Certificate serial: 019A4E4087AFB06E1A41F8D02770CBF46092
Authority key identifier: D0:04:07:65:E4:74:60:0E:1B:C7:62:2A:43:66:3D:D8:D9:FA:DC:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/MqlpmDhYAub2bu3DE_adNxU2zB4.roa
Signing time: Tue 04 Nov 2025 09:44:03 +0000
ROA not before: Tue 04 Nov 2025 09:44:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 45.139.98.0/23 maxlen: 24
80.88.236.0/22 maxlen: 24
2a12:5141::/32 maxlen: 48
2a12:5142::/32 maxlen: 48
2a12:5143::/32 maxlen: 48
2a12:5144::/32 maxlen: 48
2a12:5145::/32 maxlen: 48
2a12:5146::/32 maxlen: 48
2a12:5147::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:40:87:af:b0:6e:1a:41:f8:d0:27:70:cb:f4:60:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0040765e474600e1bc7622a43663dd8d9fadc87
Validity
Not Before: Nov 4 09:44:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32a96998385802e6f66eedc313f69d371536cc1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:01:76:92:6f:cc:6f:f8:e4:a5:05:fb:40:f0:
ca:88:5c:e6:11:09:dd:c9:a7:0e:91:77:df:2d:fa:
89:08:ce:d0:e2:1c:89:f1:6f:12:c8:ae:05:de:73:
5f:16:02:5c:09:c6:36:fd:aa:67:4c:93:8f:31:d1:
c4:56:85:ae:66:c4:4b:ae:6f:c0:6c:96:fb:69:a7:
4e:f5:76:1d:10:f8:98:57:b8:e1:a0:74:96:1c:9e:
ac:f2:60:96:c7:58:1d:e4:6f:9e:c4:07:b4:22:15:
c1:01:48:81:06:ac:f7:9b:77:d6:6a:e1:62:20:c9:
9f:a4:e0:9f:54:e1:84:24:80:68:bc:95:38:02:ec:
78:f8:ea:ad:98:a7:f8:d6:88:9b:43:b9:82:33:13:
d7:03:27:8c:fc:26:d6:2a:da:db:a7:86:3b:d0:79:
e9:57:fb:a8:0f:a3:78:58:37:73:3b:7e:3d:1c:f6:
23:11:9c:e4:5c:38:e8:78:9d:6f:a7:e8:38:97:6f:
0d:be:bc:a5:10:24:27:a7:f6:f5:0a:8d:89:97:d5:
ea:b0:c7:8d:fc:7c:8b:67:7e:ff:4c:2d:d2:08:2e:
91:27:2b:69:73:d3:24:56:3f:ec:d0:d9:87:a2:03:
8e:4d:a0:77:0c:76:f1:97:8b:fe:0d:a4:5c:27:bd:
ce:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A9:69:98:38:58:02:E6:F6:6E:ED:C3:13:F6:9D:37:15:36:CC:1E
X509v3 Authority Key Identifier:
keyid:D0:04:07:65:E4:74:60:0E:1B:C7:62:2A:43:66:3D:D8:D9:FA:DC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/MqlpmDhYAub2bu3DE_adNxU2zB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.98.0/23
80.88.236.0/22
IPv6:
2a12:5141::-2a12:5147:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
73:3b:17:5c:01:e8:64:6b:5c:52:3f:1d:ba:f8:fb:74:9a:42:
5a:8f:8c:d8:ec:ee:e6:20:5a:46:d0:4d:7f:ac:64:1d:e4:40:
cd:42:52:15:6c:eb:59:2f:50:f4:1c:72:6e:be:2a:d1:35:30:
85:1a:ee:76:85:f2:49:28:b3:e9:a2:07:b3:60:99:c1:68:c4:
57:66:c4:dd:be:8c:03:23:aa:4b:c0:61:e3:59:36:d7:26:a2:
cb:09:82:bf:62:68:96:e6:97:44:a9:b5:e8:8d:6c:d7:46:3e:
da:e0:b2:d0:a3:1b:93:6f:ef:d4:c9:1c:3b:f4:eb:d4:5d:56:
99:77:ff:a2:d1:f6:08:3e:a3:8b:25:01:ad:97:22:f5:e8:01:
5a:67:8a:a5:fc:8f:ed:70:27:45:4c:3c:7d:94:f0:4d:9a:50:
fb:28:27:0e:32:11:fa:05:da:a2:70:82:10:a2:e4:cd:bc:7d:
ff:82:26:ff:bc:0d:e4:84:4c:10:c5:74:a2:6b:ae:9a:0a:8e:
71:2f:02:02:23:48:10:9d:a1:2d:bb:12:06:10:3c:91:8d:fa:
00:fe:d1:9e:21:f9:43:30:11:f5:dd:e0:43:60:71:62:70:aa:
d4:c9:00:c2:67:5b:be:6f:8e:4b:c1:d4:53:42:37:a6:6c:6c:
c8:fe:c1:eb
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZpOQIevsG4aQfjQJ3DL9GCSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMDQwNzY1ZTQ3NDYwMGUxYmM3NjIyYTQzNjYzZGQ4ZDlm
YWRjODcwHhcNMjUxMTA0MDk0NDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmE5Njk5ODM4NTgwMmU2ZjY2ZWVkYzMxM2Y2OWQzNzE1MzZjYzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QF2km/Mb/jkpQX7QPDKiFzmEQnd
yacOkXffLfqJCM7Q4hyJ8W8SyK4F3nNfFgJcCcY2/apnTJOPMdHEVoWuZsRLrm/A
bJb7aadO9XYdEPiYV7jhoHSWHJ6s8mCWx1gd5G+exAe0IhXBAUiBBqz3m3fWauFi
IMmfpOCfVOGEJIBovJU4Aux4+OqtmKf41oibQ7mCMxPXAyeM/CbWKtrbp4Y70Hnp
V/uoD6N4WDdzO349HPYjEZzkXDjoeJ1vp+g4l28NvrylECQnp/b1Co2Jl9XqsMeN
/HyLZ37/TC3SCC6RJytpc9MkVj/s0NmHogOOTaB3DHbxl4v+DaRcJ73OpwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFDKpaZg4WALm9m7twxP2nTcVNsweMB8GA1UdIwQY
MBaAFNAEB2XkdGAOG8diKkNmPdjZ+tyHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEFRSFplUjBZQTRieDJJcVEyWTkyTm42M0ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yMmZjZGUtNzIwYi00ZjYzLTljMDIt
NDdkMzA4NzEzN2Y0LzEvTXFscG1EaFlBdWIyYnUzREVfYWROeFUyekI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8yMmZjZGUtNzIwYi00ZjYzLTljMDItNDdkMzA4NzEzN2Y0
LzEvMEFRSFplUjBZQTRieDJJcVEyWTkyTm42M0ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQBLYtiAwQC
UFjsMBYEAgACMBAwDgMFACoSUUEDBQMqElFAMA0GCSqGSIb3DQEBCwUAA4IBAQBz
OxdcAehka1xSPx26+Pt0mkJaj4zY7O7mIFpG0E1/rGQd5EDNQlIVbOtZL1D0HHJu
virRNTCFGu52hfJJKLPpogezYJnBaMRXZsTdvowDI6pLwGHjWTbXJqLLCYK/YmiW
5pdEqbXojWzXRj7a4LLQoxuTb+/UyRw79OvUXVaZd/+i0fYIPqOLJQGtlyL16AFa
Z4ql/I/tcCdFTDx9lPBNmlD7KCcOMhH6BdqicIIQouTNvH3/gib/vA3khEwQxXSi
a66aCo5xLwICI0gQnaEtuxIGEDyRjfoA/tGeIflDMBH13eBDYHFicKrUyQDCZ1u+
b45LwdRTQjembGzI/sHr
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:24:36 2025 by rpki-client