Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/mVQlHhnVYgof6PbGg47IlXbHufE.roa
File: mVQlHhnVYgof6PbGg47IlXbHufE.roa (raw, json)
Hash identifier: EuWc5XhS83Rt6mxNh7vCwfoYl/yRKN36oWWE3rRVLmQ=
Subject key identifier: 99:54:25:1E:19:D5:62:0A:1F:E8:F6:C6:83:8E:C8:95:76:C7:B9:F1
Certificate issuer: /CN=4e69b402b67d75936f45dc8bc54b86814e0636ba
Certificate serial: 0196C4653AAC624915E02F8D9CC34EB4E660
Authority key identifier: 4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/mVQlHhnVYgof6PbGg47IlXbHufE.roa
Signing time: Mon 12 May 2025 12:08:10 +0000
ROA not before: Mon 12 May 2025 12:08:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206013
IP address blocks: 80.89.160.0/20 maxlen: 20
80.94.208.0/20 maxlen: 20
88.83.128.0/19 maxlen: 19
2a00:6e80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:65:3a:ac:62:49:15:e0:2f:8d:9c:c3:4e:b4:e6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e69b402b67d75936f45dc8bc54b86814e0636ba
Validity
Not Before: May 12 12:08:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9954251e19d5620a1fe8f6c6838ec89576c7b9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d9:ff:af:63:28:15:af:c2:00:93:60:12:d0:
60:18:1a:c0:8c:b4:70:ca:f8:cf:7e:31:95:e1:78:
57:b4:8c:29:e6:bd:ec:d0:d8:36:47:52:89:1b:a4:
e8:0a:be:40:ec:da:c5:44:e0:37:22:2d:8c:b4:ee:
11:4a:ff:7e:25:73:60:28:cd:5a:c9:d6:ab:fe:2f:
db:86:4b:3e:80:e6:f5:cd:04:84:82:7d:5f:51:4c:
d3:9c:73:ca:16:c9:dd:33:3d:20:13:c7:5b:e3:73:
ac:60:da:ad:a9:71:58:73:20:ab:b2:6f:29:f0:54:
17:c2:08:ad:3a:13:6d:7f:52:f1:94:db:30:d8:52:
47:48:b6:20:7f:23:cc:0a:3d:1b:bb:aa:7b:d7:75:
3e:38:7c:76:1d:c1:15:97:e4:a8:0b:13:6b:65:a4:
75:0b:f8:dc:3e:24:7a:85:70:d3:fb:c7:c0:24:77:
6b:f1:7d:dd:97:2d:61:ef:2f:74:1c:8c:a8:42:f0:
18:6e:ef:7f:79:1e:81:3b:5f:00:4a:8b:32:be:26:
12:11:4a:c9:58:06:95:1b:13:99:f1:46:65:f2:9b:
61:d4:0c:20:be:31:5e:57:ba:e4:da:62:98:ab:f1:
cb:11:08:9a:3a:1a:94:d8:e6:05:0d:8e:a4:dc:12:
8c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:54:25:1E:19:D5:62:0A:1F:E8:F6:C6:83:8E:C8:95:76:C7:B9:F1
X509v3 Authority Key Identifier:
keyid:4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/mVQlHhnVYgof6PbGg47IlXbHufE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.89.160.0/20
80.94.208.0/20
88.83.128.0/19
IPv6:
2a00:6e80::/32
Signature Algorithm: sha256WithRSAEncryption
46:1d:19:69:9c:c2:3b:ce:22:b5:80:61:98:77:61:96:be:ed:
1f:ff:16:3e:24:a2:1e:1f:05:20:f6:9d:42:3f:bf:21:6e:14:
75:7b:e0:7e:ea:a1:4b:f4:2e:c5:a7:66:e1:4b:fe:20:d9:7b:
49:3b:75:5f:1a:f6:16:a1:28:62:38:f9:21:3a:0d:84:39:21:
f2:4d:73:11:e6:94:f5:c9:af:fb:69:d7:49:9d:24:b8:e5:49:
ac:6c:65:1f:ef:d1:e7:ca:2c:94:a7:f3:51:70:fb:61:7f:05:
0a:1f:6a:41:43:f5:ff:54:e7:83:eb:c3:af:86:b9:e2:9b:09:
64:d8:1d:ad:95:8d:60:c5:d9:2c:ab:2a:38:0e:13:e9:eb:6d:
f7:4b:ad:d8:21:42:16:df:b7:17:ea:a0:54:38:fb:95:71:5f:
2a:c9:8d:e7:59:77:02:52:7f:3e:c1:6a:a5:df:7a:8b:1c:cc:
c0:7c:a8:0d:35:a5:55:52:99:5f:77:a8:ac:7f:cb:42:57:18:
1c:c2:20:29:00:97:05:7f:d5:17:11:15:96:49:50:ff:33:9c:
63:36:62:81:52:c3:94:24:1f:6d:e2:18:e6:79:8f:79:b1:d3:
bb:1d:50:73:cf:d5:56:24:ab:b4:e9:b0:ee:19:50:2a:be:86:
73:a4:b2:e3
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZbEZTqsYkkV4C+NnMNOtOZgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNjliNDAyYjY3ZDc1OTM2ZjQ1ZGM4YmM1NGI4NjgxNGUw
NjM2YmEwHhcNMjUwNTEyMTIwODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTU0MjUxZTE5ZDU2MjBhMWZlOGY2YzY4MzhlYzg5NTc2YzdiOWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9n/r2MoFa/CAJNgEtBgGBrAjLRw
yvjPfjGV4XhXtIwp5r3s0Ng2R1KJG6ToCr5A7NrFROA3Ii2MtO4RSv9+JXNgKM1a
ydar/i/bhks+gOb1zQSEgn1fUUzTnHPKFsndMz0gE8db43OsYNqtqXFYcyCrsm8p
8FQXwgitOhNtf1LxlNsw2FJHSLYgfyPMCj0bu6p713U+OHx2HcEVl+SoCxNrZaR1
C/jcPiR6hXDT+8fAJHdr8X3dly1h7y90HIyoQvAYbu9/eR6BO18ASosyviYSEUrJ
WAaVGxOZ8UZl8pth1AwgvjFeV7rk2mKYq/HLEQiaOhqU2OYFDY6k3BKMuQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFJlUJR4Z1WIKH+j2xoOOyJV2x7nxMB8GA1UdIwQY
MBaAFE5ptAK2fXWTb0Xci8VLhoFOBja6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG1tMEFyWjlkWk52UmR5THhVdUdnVTRHTnJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82ODlhYjUtMzBkMi00NmEzLThjNTQt
MTZiNDE5NmZhMjk0LzEvbVZRbEhoblZZZ29mNlBiR2c0N0lsWGJIdWZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82ODlhYjUtMzBkMi00NmEzLThjNTQtMTZiNDE5NmZhMjk0
LzEvVG1tMEFyWjlkWk52UmR5THhVdUdnVTRHTnJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEUFmgAwQE
UF7QAwQFWFOAMA0EAgACMAcDBQAqAG6AMA0GCSqGSIb3DQEBCwUAA4IBAQBGHRlp
nMI7ziK1gGGYd2GWvu0f/xY+JKIeHwUg9p1CP78hbhR1e+B+6qFL9C7Fp2bhS/4g
2XtJO3VfGvYWoShiOPkhOg2EOSHyTXMR5pT1ya/7addJnSS45UmsbGUf79HnyiyU
p/NRcPthfwUKH2pBQ/X/VOeD68Ovhrnimwlk2B2tlY1gxdksqyo4DhPp6233S63Y
IUIW37cX6qBUOPuVcV8qyY3nWXcCUn8+wWql33qLHMzAfKgNNaVVUplfd6isf8tC
VxgcwiApAJcFf9UXERWWSVD/M5xjNmKBUsOUJB9t4hjmeY95sdO7HVBzz9VWJKu0
6bDuGVAqvoZzpLLj
-----END CERTIFICATE-----
Generated at Wed Jun 18 01:49:37 2025 by rpki-client