Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/M-IfQdJ5pbgcbSVbmMmO8aaPrAY.roa
File: M-IfQdJ5pbgcbSVbmMmO8aaPrAY.roa (raw, json)
Hash identifier: XwGRnAxf2Tdx5V01T06WDZvLLVmv2uRnErY5moi+5Gs=
Subject key identifier: 33:E2:1F:41:D2:79:A5:B8:1C:6D:25:5B:98:C9:8E:F1:A6:8F:AC:06
Certificate issuer: /CN=d1d23e24119cba9337e83466485bfb106b2e24b6
Certificate serial: 0197C0F475CE2B3F99B86285D4CAD13AC98E
Authority key identifier: D1:D2:3E:24:11:9C:BA:93:37:E8:34:66:48:5B:FB:10:6B:2E:24:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dI-JBGcupM36DRmSFv7EGsuJLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/M-IfQdJ5pbgcbSVbmMmO8aaPrAY.roa
Signing time: Mon 30 Jun 2025 13:08:55 +0000
ROA not before: Mon 30 Jun 2025 13:08:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59956
IP address blocks: 194.50.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/0dI-JBGcupM36DRmSFv7EGsuJLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/0dI-JBGcupM36DRmSFv7EGsuJLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dI-JBGcupM36DRmSFv7EGsuJLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:f4:75:ce:2b:3f:99:b8:62:85:d4:ca:d1:3a:c9:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1d23e24119cba9337e83466485bfb106b2e24b6
Validity
Not Before: Jun 30 13:08:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33e21f41d279a5b81c6d255b98c98ef1a68fac06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ac:d5:82:02:1b:bb:88:ae:38:66:af:11:cf:
60:b6:a7:c1:46:1b:50:06:59:c5:38:a0:27:9d:54:
ee:b2:b8:34:43:75:b0:5e:69:39:5d:8a:34:15:b4:
d3:bc:96:65:d2:d7:bd:90:fa:94:54:9e:ac:3c:34:
2e:40:87:a2:11:60:41:17:85:bc:60:26:41:16:9d:
92:9e:5d:79:cc:b2:4a:e1:e1:f0:31:a8:64:bf:cb:
03:82:73:f1:0e:5e:a0:90:e4:f0:b7:2b:66:40:41:
66:e3:a0:87:12:47:2a:19:d8:c8:3e:cd:a0:09:52:
78:99:91:75:53:b8:3e:fe:25:6c:cc:af:65:de:5c:
e5:63:d3:3e:17:ad:b2:15:b0:12:13:30:da:e5:f5:
7d:59:13:ea:38:44:88:1d:cc:c2:fe:0e:2d:96:46:
25:3d:e8:6d:6f:bd:fa:f2:c7:b2:66:df:3d:ef:79:
e6:b2:5d:5b:bc:4c:40:71:06:dc:2e:7a:c2:6a:60:
77:2d:80:61:a4:3e:0c:90:44:34:02:b5:ea:4f:a9:
60:73:47:85:18:97:d6:18:e0:d0:e4:af:e4:72:3e:
4a:f8:1f:87:e5:84:7e:dc:47:8a:0e:a6:04:50:49:
95:cb:e4:b9:35:d8:73:43:72:6c:bc:a5:4a:3d:43:
41:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E2:1F:41:D2:79:A5:B8:1C:6D:25:5B:98:C9:8E:F1:A6:8F:AC:06
X509v3 Authority Key Identifier:
keyid:D1:D2:3E:24:11:9C:BA:93:37:E8:34:66:48:5B:FB:10:6B:2E:24:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dI-JBGcupM36DRmSFv7EGsuJLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/M-IfQdJ5pbgcbSVbmMmO8aaPrAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/0dI-JBGcupM36DRmSFv7EGsuJLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.167.0/24
Signature Algorithm: sha256WithRSAEncryption
69:8c:f7:b9:7d:d7:3c:22:72:9b:e5:33:76:e0:32:0d:64:fc:
ec:af:7c:d8:b1:2e:01:fe:e5:df:15:fa:cc:5e:9a:e6:1b:3d:
37:e5:fb:66:13:88:f2:ec:f7:f4:ba:b9:a0:7f:e0:1b:e1:d6:
e4:fa:69:d7:3d:eb:b2:22:9c:8a:1c:a0:a9:17:6d:2b:00:f0:
e1:51:b0:32:2f:e8:df:16:6f:54:b9:91:c2:47:80:29:5a:61:
2f:bc:dd:53:76:19:f4:26:c5:a9:78:fc:31:87:13:ec:48:40:
d9:f6:ff:e2:3a:3a:31:77:fa:5e:88:ef:2f:d1:c3:35:d8:7a:
1f:76:2c:e7:ad:7b:46:4c:19:e9:63:6f:d3:19:dd:ef:e1:a2:
39:fe:a6:fc:a3:47:55:9a:72:21:a0:3a:2d:53:ec:4a:58:34:
ed:db:8b:99:74:f9:24:f2:7d:1e:ee:41:5d:67:2b:78:f3:bf:
e1:d1:17:86:2c:90:65:8b:bd:b4:a0:15:f1:52:46:78:87:ca:
02:87:4e:3c:33:06:b9:0d:af:9a:cf:b5:96:e2:6c:27:be:e9:
9a:b3:1f:65:81:33:f6:3c:d2:ad:ee:a2:5c:5a:32:e1:f5:1c:
b1:a4:59:35:70:5a:28:e8:36:c2:a1:7b:6c:dc:83:e2:b6:4a:
a1:90:96:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:44:29 2025 by rpki-client