Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/mT8xhfyQsxzNf4D7DsjIj5p3asQ.roa
File: mT8xhfyQsxzNf4D7DsjIj5p3asQ.roa (raw, json)
Hash identifier: CJhbpw5zJmfM6+MHuDYLYi6e0TvchsFqHPNRC6uOLYs=
Subject key identifier: 99:3F:31:85:FC:90:B3:1C:CD:7F:80:FB:0E:C8:C8:8F:9A:77:6A:C4
Certificate issuer: /CN=237084712fdebb1bfc5a8c0262d919a8aa440603
Certificate serial: 01985AC04DF2A4EEC5AA1CC8FDB3F0B41173
Authority key identifier: 23:70:84:71:2F:DE:BB:1B:FC:5A:8C:02:62:D9:19:A8:AA:44:06:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/mT8xhfyQsxzNf4D7DsjIj5p3asQ.roa
Signing time: Wed 30 Jul 2025 09:53:28 +0000
ROA not before: Wed 30 Jul 2025 09:53:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41201
IP address blocks: 87.199.0.0/16 maxlen: 32
87.199.0.0/17 maxlen: 32
87.199.0.0/18 maxlen: 32
87.199.0.0/24 maxlen: 24
87.199.1.0/24 maxlen: 24
87.199.2.0/24 maxlen: 24
87.199.3.0/24 maxlen: 24
87.199.4.0/24 maxlen: 24
87.199.5.0/24 maxlen: 24
87.199.6.0/24 maxlen: 24
87.199.7.0/24 maxlen: 24
87.199.8.0/24 maxlen: 24
87.199.9.0/24 maxlen: 24
87.199.10.0/24 maxlen: 24
87.199.11.0/24 maxlen: 24
87.199.12.0/24 maxlen: 24
87.199.13.0/24 maxlen: 24
87.199.14.0/24 maxlen: 24
87.199.15.0/24 maxlen: 24
87.199.16.0/24 maxlen: 24
87.199.17.0/24 maxlen: 24
87.199.18.0/24 maxlen: 24
87.199.19.0/24 maxlen: 24
87.199.20.0/24 maxlen: 24
87.199.21.0/24 maxlen: 24
87.199.22.0/24 maxlen: 24
87.199.23.0/24 maxlen: 24
87.199.24.0/24 maxlen: 24
87.199.25.0/24 maxlen: 24
87.199.26.0/24 maxlen: 24
87.199.27.0/24 maxlen: 24
87.199.28.0/24 maxlen: 24
87.199.29.0/24 maxlen: 24
87.199.30.0/24 maxlen: 24
87.199.31.0/24 maxlen: 24
87.199.32.0/24 maxlen: 24
87.199.33.0/24 maxlen: 24
87.199.34.0/24 maxlen: 24
87.199.35.0/24 maxlen: 24
87.199.36.0/24 maxlen: 24
87.199.37.0/24 maxlen: 24
87.199.38.0/24 maxlen: 24
87.199.39.0/24 maxlen: 24
87.199.40.0/24 maxlen: 24
87.199.41.0/24 maxlen: 24
87.199.42.0/24 maxlen: 24
87.199.43.0/24 maxlen: 24
87.199.44.0/24 maxlen: 24
87.199.45.0/24 maxlen: 24
87.199.46.0/24 maxlen: 24
87.199.47.0/24 maxlen: 24
87.199.48.0/24 maxlen: 24
87.199.49.0/24 maxlen: 24
87.199.50.0/24 maxlen: 24
87.199.51.0/24 maxlen: 24
87.199.52.0/24 maxlen: 24
87.199.53.0/24 maxlen: 24
87.199.54.0/24 maxlen: 24
87.199.55.0/24 maxlen: 24
87.199.56.0/24 maxlen: 24
87.199.57.0/24 maxlen: 24
87.199.58.0/24 maxlen: 24
87.199.59.0/24 maxlen: 24
87.199.60.0/24 maxlen: 24
87.199.61.0/24 maxlen: 24
87.199.62.0/24 maxlen: 24
87.199.63.0/24 maxlen: 24
87.199.64.0/19 maxlen: 32
87.199.64.0/24 maxlen: 24
87.199.65.0/24 maxlen: 24
87.199.66.0/24 maxlen: 24
87.199.67.0/24 maxlen: 24
87.199.68.0/24 maxlen: 24
87.199.69.0/24 maxlen: 24
87.199.70.0/24 maxlen: 24
87.199.71.0/24 maxlen: 24
87.199.72.0/24 maxlen: 24
87.199.73.0/24 maxlen: 24
87.199.74.0/24 maxlen: 24
87.199.75.0/24 maxlen: 24
87.199.76.0/24 maxlen: 24
87.199.77.0/24 maxlen: 24
87.199.78.0/24 maxlen: 24
87.199.79.0/24 maxlen: 24
87.199.80.0/24 maxlen: 24
87.199.81.0/24 maxlen: 24
87.199.82.0/24 maxlen: 24
87.199.83.0/24 maxlen: 24
87.199.84.0/24 maxlen: 24
87.199.85.0/24 maxlen: 24
87.199.86.0/24 maxlen: 24
87.199.87.0/24 maxlen: 24
87.199.88.0/24 maxlen: 24
87.199.89.0/24 maxlen: 24
87.199.90.0/24 maxlen: 24
87.199.96.0/20 maxlen: 32
87.199.112.0/21 maxlen: 32
87.199.120.0/22 maxlen: 32
87.199.124.0/23 maxlen: 32
87.199.128.0/17 maxlen: 32
87.199.214.0/24 maxlen: 24
87.199.215.0/24 maxlen: 24
87.199.216.0/24 maxlen: 24
87.199.217.0/24 maxlen: 24
87.199.218.0/24 maxlen: 24
87.199.219.0/24 maxlen: 24
87.199.220.0/24 maxlen: 24
87.199.221.0/24 maxlen: 24
87.199.222.0/24 maxlen: 24
87.199.223.0/24 maxlen: 24
87.199.224.0/24 maxlen: 24
87.199.225.0/24 maxlen: 24
87.199.226.0/24 maxlen: 24
87.199.227.0/24 maxlen: 24
87.199.228.0/24 maxlen: 24
87.199.229.0/24 maxlen: 24
87.199.230.0/24 maxlen: 24
87.199.231.0/24 maxlen: 24
87.199.232.0/24 maxlen: 24
87.199.233.0/24 maxlen: 24
87.199.234.0/24 maxlen: 24
87.199.235.0/24 maxlen: 24
87.199.236.0/24 maxlen: 24
87.199.237.0/24 maxlen: 24
87.199.238.0/24 maxlen: 24
87.199.239.0/24 maxlen: 24
87.199.240.0/24 maxlen: 24
87.199.241.0/24 maxlen: 24
87.199.242.0/24 maxlen: 24
87.199.243.0/24 maxlen: 24
87.199.244.0/24 maxlen: 24
87.199.245.0/24 maxlen: 24
87.199.246.0/24 maxlen: 24
87.199.247.0/24 maxlen: 24
87.199.248.0/24 maxlen: 24
87.199.249.0/24 maxlen: 24
87.199.250.0/24 maxlen: 24
87.199.251.0/24 maxlen: 24
87.199.252.0/24 maxlen: 24
87.199.253.0/24 maxlen: 24
87.199.254.0/24 maxlen: 24
87.199.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 15:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:c0:4d:f2:a4:ee:c5:aa:1c:c8:fd:b3:f0:b4:11:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237084712fdebb1bfc5a8c0262d919a8aa440603
Validity
Not Before: Jul 30 09:53:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=993f3185fc90b31ccd7f80fb0ec8c88f9a776ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4f:e1:b1:88:96:c0:66:70:36:eb:a2:b8:db:
d2:f5:7b:ea:3b:67:71:0c:fe:44:f4:68:d0:44:af:
f4:47:b7:f2:b8:c3:d2:9c:da:61:f1:90:44:0a:5f:
e8:c0:dd:66:a7:78:4a:15:87:35:f7:2d:f5:4e:dc:
a6:71:3e:e8:7b:29:a9:85:43:0e:86:33:b0:b1:ec:
4e:49:63:52:19:73:f9:f5:e3:9e:b9:b2:4f:58:99:
b0:a7:45:06:0e:c8:d9:75:83:12:b1:2b:db:ec:71:
f8:52:c5:81:5a:93:6d:30:44:e0:10:71:52:3a:14:
39:01:40:a7:f2:4e:72:3e:34:41:c1:aa:32:6d:90:
d0:c5:84:9d:97:d0:3d:67:d3:df:5a:24:14:77:e7:
dd:50:83:e7:c0:44:b4:02:1d:17:82:98:79:51:97:
d7:00:94:5c:5c:d2:3b:0b:5a:b6:e7:2e:cd:23:0c:
4e:14:52:0a:3d:79:66:69:cd:47:4e:21:73:8d:50:
10:fe:59:af:30:e1:87:86:c4:ac:b0:e3:66:b1:ac:
8c:ce:e3:7b:48:3e:d5:0a:91:04:2b:dc:b3:9a:5f:
4a:37:e2:31:68:f8:2a:4c:c6:55:fa:0a:13:1c:9b:
9c:0d:6f:f2:4d:f1:2c:f2:39:af:28:41:1f:a6:b4:
26:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3F:31:85:FC:90:B3:1C:CD:7F:80:FB:0E:C8:C8:8F:9A:77:6A:C4
X509v3 Authority Key Identifier:
keyid:23:70:84:71:2F:DE:BB:1B:FC:5A:8C:02:62:D9:19:A8:AA:44:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/mT8xhfyQsxzNf4D7DsjIj5p3asQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.199.0.0/16
Signature Algorithm: sha256WithRSAEncryption
10:57:5e:5f:ff:27:bb:eb:ef:5e:ec:a9:07:80:47:be:c7:ea:
b8:7f:5d:76:83:2a:9b:e6:96:dc:13:5f:39:2d:cb:59:e2:d8:
69:5c:26:cd:73:87:0b:ae:43:ef:ef:6d:81:1f:0d:0a:81:22:
fe:df:40:ff:73:00:19:11:6f:77:7c:3f:20:80:a8:95:bd:b7:
9e:b4:d1:1b:0d:9d:42:96:cb:d7:bf:30:bb:4f:54:49:f6:88:
2a:38:10:e0:7c:7a:81:5e:cb:90:96:ec:49:b9:69:5e:d4:a0:
af:24:45:70:31:2c:50:48:1d:dc:b4:70:19:15:74:9a:59:f1:
44:fa:31:58:bc:9d:95:89:93:3d:c7:2d:45:d3:c4:4f:02:79:
c5:d8:bd:6a:73:cb:3b:c0:71:25:a8:9f:fe:a7:77:07:77:60:
cf:72:cf:af:05:31:e5:c1:7c:17:b6:e6:a0:20:25:30:83:71:
d9:0c:31:83:e2:04:dd:d5:6f:1a:82:b0:42:f5:09:6c:74:5a:
e1:42:97:8c:a6:73:2b:1c:38:b3:5d:ed:24:51:a1:7f:e3:4c:
26:d6:85:40:db:7d:7a:72:70:0e:3e:ab:4a:98:1a:3d:d8:06:
e9:88:68:e3:a5:1d:8c:6c:e4:75:eb:ea:f3:1e:d9:9a:b1:ad:
a1:8f:19:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:39:20 2025 by rpki-client