Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/m-adg_9YsQ3HGuQFZeqrGVntkMI.roa
File: m-adg_9YsQ3HGuQFZeqrGVntkMI.roa (raw, json)
Hash identifier: yHzJmeLGd5zHIGS2/IUFvk52jy2fhKMxRllwSKNzpsU=
Subject key identifier: 9B:E6:9D:83:FF:58:B1:0D:C7:1A:E4:05:65:EA:AB:19:59:ED:90:C2
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019A515A4AC0950B6E6BDDA81BB992A6C1FE
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/m-adg_9YsQ3HGuQFZeqrGVntkMI.roa
Signing time: Wed 05 Nov 2025 00:11:03 +0000
ROA not before: Wed 05 Nov 2025 00:11:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49418
IP address blocks: 64.188.72.0/24 maxlen: 24
64.188.114.0/23 maxlen: 24
185.184.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:5a:4a:c0:95:0b:6e:6b:dd:a8:1b:b9:92:a6:c1:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Nov 5 00:11:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9be69d83ff58b10dc71ae40565eaab1959ed90c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1d:19:37:92:41:2c:93:62:c1:e6:2b:3a:37:
d0:8f:00:3e:89:60:fb:c2:f1:a1:8a:92:f2:7c:1c:
20:f1:a8:e4:0c:a1:2c:25:bd:f0:1c:f1:79:75:9d:
19:b7:f9:a8:90:5d:35:d1:d9:cf:af:3e:1f:2d:e0:
22:1d:19:e5:36:8a:80:3c:6b:db:9a:c4:83:80:f2:
f4:ce:0b:0e:1d:45:9a:80:05:df:92:83:3e:6a:8b:
74:d5:a8:63:2d:5f:07:04:5a:42:6a:7d:81:97:5b:
aa:7f:fb:39:f8:a0:a4:bd:9a:37:9f:1d:2e:ba:6b:
02:95:ae:f6:e4:8c:50:81:78:ee:77:be:06:47:3b:
9e:c9:79:24:ac:b2:5e:f3:98:da:93:79:a1:f5:e7:
71:23:26:cc:40:da:d0:9c:90:d0:89:6f:c5:31:8b:
d0:82:26:73:b2:4c:06:97:70:5b:b0:cc:57:d2:91:
f4:eb:46:d6:d8:87:31:47:19:94:be:75:48:98:15:
9f:12:57:b0:11:aa:4c:1b:9b:35:6d:fc:72:da:cf:
06:94:df:13:e7:e4:d6:77:ee:31:6d:9e:5f:30:9f:
f3:a8:96:5c:58:7f:9d:2e:5b:09:ad:4b:74:68:15:
14:3f:e9:c3:2e:2f:20:75:a5:c9:74:a9:93:05:36:
c4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E6:9D:83:FF:58:B1:0D:C7:1A:E4:05:65:EA:AB:19:59:ED:90:C2
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/m-adg_9YsQ3HGuQFZeqrGVntkMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.188.72.0/24
64.188.114.0/23
185.184.120.0/22
Signature Algorithm: sha256WithRSAEncryption
07:cb:e5:91:a5:b2:04:07:e3:ea:9a:4e:27:fe:82:26:d8:3f:
dc:09:28:62:0d:94:ac:b2:cb:05:9a:5d:0c:4f:66:5a:b2:6f:
3a:8c:0d:39:39:2e:97:79:3b:6d:6b:c6:83:0e:84:21:28:1a:
a1:ad:2e:d3:a7:34:e8:75:26:d6:54:3b:c9:ae:03:de:24:b4:
59:71:e5:51:9c:c7:2b:00:99:f8:fc:9d:6c:9a:79:7a:1e:47:
a5:db:61:67:4d:65:75:fe:de:ce:7c:4f:3c:47:1e:bf:c9:5a:
5d:bc:3e:5a:6e:db:44:4a:a6:08:65:6b:20:09:3d:a5:ef:da:
ca:0e:dd:db:7c:ea:d2:45:31:eb:14:91:a1:97:77:3e:f9:03:
fa:eb:75:fe:7c:05:11:8f:83:5e:a1:f0:58:9a:dd:83:db:e0:
68:4a:38:98:34:7d:b9:05:a9:da:02:1d:17:f6:a8:0e:ab:6f:
82:68:53:ed:c8:85:ea:51:a2:16:a3:e2:b7:46:dd:61:16:14:
55:d4:07:a5:3a:f8:f2:b1:eb:3b:d4:f0:85:64:0a:98:34:4f:
cd:7e:d2:64:eb:ab:2d:a0:d7:fb:67:18:78:75:b8:7b:db:67:
90:6c:60:d7:08:a9:3b:4f:32:e8:c9:ae:55:a6:ff:6c:05:1d:
da:e0:3a:a4
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZpRWkrAlQtua92oG7mSpsH+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjUxMTA1MDAxMTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmU2OWQ4M2ZmNThiMTBkYzcxYWU0MDU2NWVhYWIxOTU5ZWQ5MGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuR0ZN5JBLJNiweYrOjfQjwA+iWD7
wvGhipLyfBwg8ajkDKEsJb3wHPF5dZ0Zt/mokF010dnPrz4fLeAiHRnlNoqAPGvb
msSDgPL0zgsOHUWagAXfkoM+aot01ahjLV8HBFpCan2Bl1uqf/s5+KCkvZo3nx0u
umsCla725IxQgXjud74GRzueyXkkrLJe85jak3mh9edxIybMQNrQnJDQiW/FMYvQ
giZzskwGl3BbsMxX0pH060bW2IcxRxmUvnVImBWfElewEapMG5s1bfxy2s8GlN8T
5+TWd+4xbZ5fMJ/zqJZcWH+dLlsJrUt0aBUUP+nDLi8gdaXJdKmTBTbE4wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJvmnYP/WLENxxrkBWXqqxlZ7ZDCMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvbS1hZGdfOVlzUTNIR3VRRlplcXJHVm50a01JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAQLxIAwQB
QLxyAwQCubh4MA0GCSqGSIb3DQEBCwUAA4IBAQAHy+WRpbIEB+Pqmk4n/oIm2D/c
CShiDZSssssFml0MT2Zasm86jA05OS6XeTtta8aDDoQhKBqhrS7TpzTodSbWVDvJ
rgPeJLRZceVRnMcrAJn4/J1smnl6Hkel22FnTWV1/t7OfE88Rx6/yVpdvD5abttE
SqYIZWsgCT2l79rKDt3bfOrSRTHrFJGhl3c++QP663X+fAURj4NeofBYmt2D2+Bo
SjiYNH25BanaAh0X9qgOq2+CaFPtyIXqUaIWo+K3Rt1hFhRV1AelOvjyses71PCF
ZAqYNE/NftJk66stoNf7Zxh4dbh722eQbGDXCKk7TzLoya5Vpv9sBR3a4Dqk
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:41:19 2025 by rpki-client