Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/016bcc-ea5b-4e29-81c6-6f07a07d2769/1/MTamWzlF--uNDyRMLTXJk1Mx0Fs.roa
File: MTamWzlF--uNDyRMLTXJk1Mx0Fs.roa (raw, json)
Hash identifier: JMBYVhl1br5C36w4dCy9ILJG/1PRS8u33zsXvftn/Yw=
Subject key identifier: 31:36:A6:5B:39:45:FB:EB:8D:0F:24:4C:2D:35:C9:93:53:31:D0:5B
Certificate issuer: /CN=33f46ab17aef239a96bde7b6ccb706f7e0b62b6e
Certificate serial: 01980D1EA42D25F51D561564D0C19031B73B
Authority key identifier: 33:F4:6A:B1:7A:EF:23:9A:96:BD:E7:B6:CC:B7:06:F7:E0:B6:2B:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_RqsXrvI5qWvee2zLcG9-C2K24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/016bcc-ea5b-4e29-81c6-6f07a07d2769/1/MTamWzlF--uNDyRMLTXJk1Mx0Fs.roa
Signing time: Tue 15 Jul 2025 08:06:08 +0000
ROA not before: Tue 15 Jul 2025 08:06:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61990
IP address blocks: 193.143.230.0/24 maxlen: 24
2001:67c:408::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/016bcc-ea5b-4e29-81c6-6f07a07d2769/1/M_RqsXrvI5qWvee2zLcG9-C2K24.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/016bcc-ea5b-4e29-81c6-6f07a07d2769/1/M_RqsXrvI5qWvee2zLcG9-C2K24.mft
rsync://rpki.ripe.net/repository/DEFAULT/M_RqsXrvI5qWvee2zLcG9-C2K24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0d:1e:a4:2d:25:f5:1d:56:15:64:d0:c1:90:31:b7:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33f46ab17aef239a96bde7b6ccb706f7e0b62b6e
Validity
Not Before: Jul 15 08:06:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3136a65b3945fbeb8d0f244c2d35c9935331d05b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ae:cc:26:45:8d:2d:2b:37:a7:65:bd:3b:d0:
7d:6a:64:92:2b:4d:7f:39:d7:6e:d2:45:d9:e4:9e:
13:98:57:7d:d6:45:fd:b4:64:ef:b3:ae:e6:bf:f8:
e5:22:d4:0c:e1:de:be:0b:96:4c:79:11:47:7f:3a:
b3:d2:0f:4b:83:3f:94:bc:d1:06:e8:ab:3f:ca:5f:
46:07:f4:4f:a9:64:1b:40:3b:1a:eb:a4:d3:66:68:
0b:56:8d:76:be:99:09:e7:d9:52:0c:cc:94:ab:61:
40:5b:4d:28:4c:2f:c1:91:48:8e:69:1e:b7:18:7a:
3c:b0:e4:b1:e7:58:7f:86:8b:5a:53:fe:00:e7:3f:
9e:b4:3f:f4:87:e4:33:53:1e:92:b7:8a:cd:eb:0f:
e8:57:7e:fe:8b:d4:01:a8:21:c1:a4:6a:d8:c5:03:
86:d1:8a:fb:68:3c:ab:21:48:da:17:80:05:5b:41:
97:5c:fb:55:8b:cf:25:64:b4:07:65:a2:0c:29:da:
57:55:72:98:d7:de:19:26:23:c5:c5:d2:ce:d6:4c:
16:a9:24:9b:c1:71:27:a0:7a:04:e0:f9:11:dc:22:
2d:d2:bd:ad:c0:f6:19:56:6b:f5:bf:ae:2a:bb:1d:
b9:25:79:7b:74:be:11:04:a1:42:75:96:0f:31:9e:
c7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:36:A6:5B:39:45:FB:EB:8D:0F:24:4C:2D:35:C9:93:53:31:D0:5B
X509v3 Authority Key Identifier:
keyid:33:F4:6A:B1:7A:EF:23:9A:96:BD:E7:B6:CC:B7:06:F7:E0:B6:2B:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_RqsXrvI5qWvee2zLcG9-C2K24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/016bcc-ea5b-4e29-81c6-6f07a07d2769/1/MTamWzlF--uNDyRMLTXJk1Mx0Fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/016bcc-ea5b-4e29-81c6-6f07a07d2769/1/M_RqsXrvI5qWvee2zLcG9-C2K24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.143.230.0/24
IPv6:
2001:67c:408::/48
Signature Algorithm: sha256WithRSAEncryption
aa:31:c9:3a:7c:ce:f8:64:11:c5:fd:e5:8f:fa:fe:50:9d:da:
a8:77:cd:a5:b1:4f:9b:dc:b3:e3:09:bb:1f:af:44:04:31:d8:
b6:fb:6a:37:9f:fc:f3:08:3a:bf:41:5e:38:61:f2:47:3c:86:
f0:e9:28:f4:fe:3e:87:55:58:66:c3:7f:6c:14:1b:1a:bc:2c:
40:a2:8b:c5:80:7d:70:c2:18:64:a1:c9:be:de:da:d3:7c:9a:
b3:20:5f:81:2e:fd:0b:84:da:3f:24:0d:0c:7d:cf:d2:41:8a:
53:cb:7c:b7:b5:81:b3:5e:fe:d6:30:db:67:b2:b5:72:c1:11:
82:4c:c4:f6:82:3b:35:ac:17:ab:4c:e6:19:42:2d:6b:3f:44:
76:04:a8:0c:5c:4e:3b:01:5e:69:24:0e:cb:27:e2:d2:45:1c:
56:9b:c3:9a:e8:3f:fd:e2:7f:44:33:15:c1:88:e7:0d:e4:59:
c5:80:92:66:f0:6d:fa:1b:34:f2:4d:6f:19:75:bd:db:e1:33:
7e:ce:12:17:1b:07:d8:b1:32:75:39:2e:9e:65:4f:87:f2:8d:
e2:7e:83:25:a9:73:d6:4e:f0:51:6a:95:42:ff:99:ff:99:7d:
9c:9b:23:e4:8a:e0:1a:f2:e0:fe:6e:36:5e:4e:fb:85:a4:2e:
29:f2:84:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:20:07 2025 by rpki-client