Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/mO0be8bDbmiYSh_iKVixTT5SzHA.roa
File: mO0be8bDbmiYSh_iKVixTT5SzHA.roa (raw, json)
Hash identifier: lIkXoLyk/hMEyc076/9zdceKJAYDU0c31VY+iGKjKOI=
Subject key identifier: 98:ED:1B:7B:C6:C3:6E:68:98:4A:1F:E2:29:58:B1:4D:3E:52:CC:70
Certificate issuer: /CN=3691d2950145dceac00c0ca4eb536d92867b38d3
Certificate serial: 019A2645D9BDF864A9327ABA349F08091D6C
Authority key identifier: 36:91:D2:95:01:45:DC:EA:C0:0C:0C:A4:EB:53:6D:92:86:7B:38:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/mO0be8bDbmiYSh_iKVixTT5SzHA.roa
Signing time: Mon 27 Oct 2025 15:25:03 +0000
ROA not before: Mon 27 Oct 2025 15:25:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206924
IP address blocks: 91.198.241.0/24 maxlen: 24
185.230.223.0/24 maxlen: 24
2a0c:2f05:3512::/48 maxlen: 48
2a0c:2f07:d::/48 maxlen: 48
2a0c:2f07:f::/48 maxlen: 48
2a0c:2f07:29::/48 maxlen: 48
2a0c:2f07:c1::/48 maxlen: 48
2a0c:2f07:384::/48 maxlen: 48
2a0c:2f07:666::/48 maxlen: 48
2a0c:2f07:ac1::/48 maxlen: 48
2a0c:2f07:4663::/48 maxlen: 48
2a0c:2f07:4896::/48 maxlen: 48
2a0c:2f07:9459::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:45:d9:bd:f8:64:a9:32:7a:ba:34:9f:08:09:1d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3691d2950145dceac00c0ca4eb536d92867b38d3
Validity
Not Before: Oct 27 15:25:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98ed1b7bc6c36e68984a1fe22958b14d3e52cc70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:54:07:45:af:58:ac:ef:20:1e:c4:f1:8b:27:
6e:14:5b:8c:83:1b:19:af:35:56:71:b0:97:4a:a0:
42:24:43:0a:7a:11:76:06:69:95:da:dc:88:39:7e:
7f:08:32:ff:6c:5b:9e:eb:29:d1:0b:0f:34:f4:a7:
70:d2:2d:1e:cb:97:20:98:ed:21:16:96:4b:fe:7f:
db:95:bc:0a:ba:9b:ec:aa:f0:54:5c:74:6b:07:cf:
ff:1f:71:02:f7:ac:65:b2:7e:fa:38:bb:30:f1:a5:
56:3c:9c:20:05:02:4b:ff:4b:6b:4f:e7:e0:5a:1e:
69:ba:ee:7e:14:8c:27:f3:78:88:7a:7b:5c:e1:08:
e0:37:c9:6b:8e:00:68:70:71:7b:ec:f6:bb:9b:c9:
9e:9f:9c:83:e9:ff:ec:5b:26:f3:d3:b9:67:da:9a:
6c:06:98:92:ed:5d:df:ac:9d:7e:af:c6:ae:96:b7:
7f:62:05:07:2a:8e:46:a0:78:b9:41:cb:4c:2f:78:
c6:4a:aa:12:2d:8c:63:fb:a5:79:74:a2:37:86:f5:
4e:23:3e:7b:25:1d:a2:8f:81:46:5f:03:1a:63:9f:
a9:cb:95:ea:48:1e:30:c1:40:34:9c:f8:18:fe:d6:
62:4b:34:b3:0d:33:20:b7:9e:1b:80:15:e3:95:ed:
d0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:ED:1B:7B:C6:C3:6E:68:98:4A:1F:E2:29:58:B1:4D:3E:52:CC:70
X509v3 Authority Key Identifier:
keyid:36:91:D2:95:01:45:DC:EA:C0:0C:0C:A4:EB:53:6D:92:86:7B:38:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/mO0be8bDbmiYSh_iKVixTT5SzHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.241.0/24
185.230.223.0/24
IPv6:
2a0c:2f05:3512::/48
2a0c:2f07:d::/48
2a0c:2f07:f::/48
2a0c:2f07:29::/48
2a0c:2f07:c1::/48
2a0c:2f07:384::/48
2a0c:2f07:666::/48
2a0c:2f07:ac1::/48
2a0c:2f07:4663::/48
2a0c:2f07:4896::/48
2a0c:2f07:9459::/48
Signature Algorithm: sha256WithRSAEncryption
9f:24:71:8d:e0:d4:5c:86:c5:e6:47:95:5f:67:03:47:67:76:
bc:9e:ed:29:01:48:41:c2:1c:e3:30:b8:c9:fa:25:d8:31:7e:
38:15:e1:8e:08:69:52:6b:e7:01:2a:ab:da:85:dd:8e:e9:3b:
d4:57:91:00:d7:a6:2f:32:05:97:9a:9b:a0:e7:d0:ca:4f:a8:
cb:71:a3:39:d2:93:91:f3:4b:ae:a8:18:a3:35:a8:51:5b:2a:
1f:b6:ea:74:44:15:43:33:e4:8b:8f:60:fc:03:e7:f1:0b:52:
cf:84:db:d7:e2:bd:f0:34:73:74:1d:2d:a3:20:51:e4:c7:93:
85:e8:ba:80:88:c4:4b:ff:a4:8f:f2:19:85:41:04:5b:6c:d8:
6a:52:e1:12:f7:da:e0:ae:c4:e7:c9:cb:ba:7c:69:1d:55:ed:
ef:fc:a0:15:3c:be:21:5a:d2:6e:17:0a:6f:48:9b:25:ff:ea:
e9:ae:8f:12:47:f4:19:c6:c4:d5:8b:8a:a2:b9:2b:32:12:01:
58:17:b6:d5:1f:26:84:da:26:ff:5d:f8:93:e2:2c:e1:12:f0:
48:f9:45:06:67:17:3b:95:d0:ed:25:de:d7:e5:0e:12:f0:d8:
fa:14:9a:99:e3:ec:39:7c:96:da:32:0e:45:3a:e9:20:e9:5c:
62:ac:a1:13
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgISAZomRdm9+GSpMnq6NJ8ICR1sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OTFkMjk1MDE0NWRjZWFjMDBjMGNhNGViNTM2ZDkyODY3
YjM4ZDMwHhcNMjUxMDI3MTUyNTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGVkMWI3YmM2YzM2ZTY4OTg0YTFmZTIyOTU4YjE0ZDNlNTJjYzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1QHRa9YrO8gHsTxiyduFFuMgxsZ
rzVWcbCXSqBCJEMKehF2BmmV2tyIOX5/CDL/bFue6ynRCw809Kdw0i0ey5cgmO0h
FpZL/n/blbwKupvsqvBUXHRrB8//H3EC96xlsn76OLsw8aVWPJwgBQJL/0trT+fg
Wh5puu5+FIwn83iIentc4QjgN8lrjgBocHF77Pa7m8men5yD6f/sWybz07ln2pps
BpiS7V3frJ1+r8aulrd/YgUHKo5GoHi5QctML3jGSqoSLYxj+6V5dKI3hvVOIz57
JR2ij4FGXwMaY5+py5XqSB4wwUA0nPgY/tZiSzSzDTMgt54bgBXjle3QPwIDAQAB
o4ICfDCCAngwHQYDVR0OBBYEFJjtG3vGw25omEof4ilYsU0+UsxwMB8GA1UdIwQY
MBaAFDaR0pUBRdzqwAwMpOtTbZKGezjTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnBIU2xRRkYzT3JBREF5azYxTnRrb1o3T05NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yYTk0MmEtZjFiZi00M2UyLWI5MmEt
MWRlYzQwNTg0ODA2LzEvbU8wYmU4YkRibWlZU2hfaUtWaXhUVDVTekhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8yYTk0MmEtZjFiZi00M2UyLWI5MmEtMWRlYzQwNTg0ODA2
LzEvTnBIU2xRRkYzT3JBREF5azYxTnRrb1o3T05NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGRBggrBgEFBQcBBwEB/wSBgTB/MBIEAgABMAwDBABbxvED
BAC55t8waQQCAAIwYwMHACoMLwU1EgMHACoMLwcADQMHACoMLwcADwMHACoMLwcA
KQMHACoMLwcAwQMHACoMLwcDhAMHACoMLwcGZgMHACoMLwcKwQMHACoMLwdGYwMH
ACoMLwdIlgMHACoMLweUWTANBgkqhkiG9w0BAQsFAAOCAQEAnyRxjeDUXIbF5keV
X2cDR2d2vJ7tKQFIQcIc4zC4yfol2DF+OBXhjghpUmvnASqr2oXdjuk71FeRANem
LzIFl5qboOfQyk+oy3GjOdKTkfNLrqgYozWoUVsqH7bqdEQVQzPki49g/APn8QtS
z4Tb1+K98DRzdB0toyBR5MeThei6gIjES/+kj/IZhUEEW2zYalLhEvfa4K7E58nL
unxpHVXt7/ygFTy+IVrSbhcKb0ibJf/q6a6PEkf0GcbE1YuKorkrMhIBWBe21R8m
hNom/134k+Is4RLwSPlFBmcXO5XQ7SXe1+UOEvDY+hSamePsOXyW2jIORTrpIOlc
YqyhEw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:26:06 2025 by rpki-client