Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/M1T3Lq0Zfvr5VzRme2qyi-eGhtA.roa
File: M1T3Lq0Zfvr5VzRme2qyi-eGhtA.roa (raw, json)
Hash identifier: gy6FwOKBXTaLdVYVnEAs4hHwzg7SeC5YExBV8UoGhlY=
Subject key identifier: 33:54:F7:2E:AD:19:7E:FA:F9:57:34:66:7B:6A:B2:8B:E7:86:86:D0
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 019A16B663B35C4D3F8BF881DD81937DF58B
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/M1T3Lq0Zfvr5VzRme2qyi-eGhtA.roa
Signing time: Fri 24 Oct 2025 14:54:03 +0000
ROA not before: Fri 24 Oct 2025 14:54:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 45.85.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:16:b6:63:b3:5c:4d:3f:8b:f8:81:dd:81:93:7d:f5:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Oct 24 14:54:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3354f72ead197efaf95734667b6ab28be78686d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e2:cd:36:0a:7a:15:7b:da:c0:7c:79:4b:dc:
21:fa:5a:1c:e2:5d:f1:a4:67:dc:d5:e6:c0:9c:2f:
3a:b6:ba:4c:9a:b0:7e:d8:c1:66:79:76:16:f4:8b:
e1:0e:91:10:23:94:1a:fc:90:07:8a:06:a3:57:46:
be:ae:c4:54:e0:4d:27:5e:b8:a4:c2:f6:8b:8e:05:
4b:3a:04:13:7b:08:82:1b:1d:e6:60:9f:3b:5f:8a:
a1:ef:85:3d:f1:e2:12:75:98:19:b6:24:78:50:75:
a3:f9:29:5c:79:de:be:12:89:2d:86:7f:ba:2c:e1:
ca:e6:e1:2d:7d:b7:55:0c:3f:66:d4:0d:ef:7f:3a:
7c:7e:72:e2:ff:69:20:38:b8:08:af:b1:07:56:65:
06:0b:69:d6:9f:12:8b:23:58:f1:77:8d:f8:b3:5b:
cb:14:d3:30:fc:f6:1d:96:75:1d:9f:7e:90:1d:43:
ec:02:e0:8d:f1:ec:2d:ea:24:cb:18:53:89:ae:dd:
d3:6f:27:85:ef:91:a0:d2:c5:01:a9:5a:7b:98:68:
81:15:c0:df:69:fe:7e:0a:86:0f:73:fd:11:45:c9:
f5:9e:84:57:2b:09:d8:ec:0f:08:07:45:81:94:6c:
f8:1f:45:6c:c2:82:c3:30:5c:a5:00:5c:de:c5:5a:
31:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:54:F7:2E:AD:19:7E:FA:F9:57:34:66:7B:6A:B2:8B:E7:86:86:D0
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/M1T3Lq0Zfvr5VzRme2qyi-eGhtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.14.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:8e:3f:41:cc:f8:28:e2:b6:39:a9:ae:ef:46:10:0d:68:29:
34:a2:a8:42:94:79:e1:5f:a1:9f:be:65:23:78:2d:b6:bf:78:
e0:2f:5b:36:6a:4d:61:5d:d3:13:b8:b3:76:01:0f:41:0a:9a:
81:59:8e:36:1b:71:7a:cb:be:4f:43:81:03:e5:a1:22:31:6b:
0d:2c:77:4d:a5:5b:20:0a:ce:b1:b8:e4:e1:e3:e3:81:63:37:
99:8c:2a:8c:80:9c:ef:2b:9c:64:30:c4:69:3c:5a:eb:1d:29:
95:fc:c7:53:f8:ce:d9:0c:a2:50:f0:a2:78:33:8e:6e:84:df:
f7:29:75:4e:3e:74:06:c3:3f:2d:3e:1c:e1:58:37:71:a6:47:
0b:f6:f9:3d:69:d9:96:3b:df:a8:de:cb:b5:f4:87:93:d7:72:
ee:f9:73:6c:f2:d9:86:b8:6f:02:ea:c1:2a:5d:ae:d2:fb:8f:
b8:61:06:5e:75:22:53:e9:4d:5a:6c:18:7d:b3:f5:b7:1a:1a:
2b:81:e4:f2:ec:fc:20:9d:d7:67:7f:b1:ed:e0:10:e1:7f:69:
75:62:85:2c:fb:59:73:d0:f6:62:73:0f:2e:3b:38:e7:3a:e3:
b1:71:50:30:cc:56:f8:cc:29:34:90:5c:4b:58:ae:66:5e:1b:
9b:d6:ef:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZoWtmOzXE0/i/iB3YGTffWLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZmM4ODdjOTc3MzkzNTc1ZGU2MjU3ZTc1ZmE5OWNkZTIw
MzdjNmMwHhcNMjUxMDI0MTQ1NDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzU0ZjcyZWFkMTk3ZWZhZjk1NzM0NjY3YjZhYjI4YmU3ODY4NmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOLNNgp6FXvawHx5S9wh+loc4l3x
pGfc1ebAnC86trpMmrB+2MFmeXYW9IvhDpEQI5Qa/JAHigajV0a+rsRU4E0nXrik
wvaLjgVLOgQTewiCGx3mYJ87X4qh74U98eISdZgZtiR4UHWj+Slced6+Eokthn+6
LOHK5uEtfbdVDD9m1A3vfzp8fnLi/2kgOLgIr7EHVmUGC2nWnxKLI1jxd434s1vL
FNMw/PYdlnUdn36QHUPsAuCN8ewt6iTLGFOJrt3TbyeF75Gg0sUBqVp7mGiBFcDf
af5+CoYPc/0RRcn1noRXKwnY7A8IB0WBlGz4H0VswoLDMFylAFzexVox7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDNU9y6tGX76+Vc0ZntqsovnhobQMB8GA1UdIwQY
MBaAFET8iHyXc5NXXeYlfnX6mc3iA3xsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mMDdjNjYtNDczZC00MzVhLWI2OTMt
YzM2OWMxZDRjMzM3LzEvTTFUM0xxMFpmdnI1VnpSbWUycXlpLWVHaHRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9mMDdjNjYtNDczZC00MzVhLWI2OTMtYzM2OWMxZDRjMzM3
LzEvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVUOMA0G
CSqGSIb3DQEBCwUAA4IBAQCPjj9BzPgo4rY5qa7vRhANaCk0oqhClHnhX6GfvmUj
eC22v3jgL1s2ak1hXdMTuLN2AQ9BCpqBWY42G3F6y75PQ4ED5aEiMWsNLHdNpVsg
Cs6xuOTh4+OBYzeZjCqMgJzvK5xkMMRpPFrrHSmV/MdT+M7ZDKJQ8KJ4M45uhN/3
KXVOPnQGwz8tPhzhWDdxpkcL9vk9admWO9+o3su19IeT13Lu+XNs8tmGuG8C6sEq
Xa7S+4+4YQZedSJT6U1abBh9s/W3GhorgeTy7Pwgnddnf7Ht4BDhf2l1YoUs+1lz
0PZicw8uOzjnOuOxcVAwzFb4zCk0kFxLWK5mXhub1u/M
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:57:00 2025 by rpki-client