Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/Ml6MKIuGs5X6FYCoibWIrDM8sZw.roa
File: Ml6MKIuGs5X6FYCoibWIrDM8sZw.roa (raw, json)
Hash identifier: sr8ii208yixvZe4Nt1vf4FirRpNYMo5v1lAxQmPyK4E=
Subject key identifier: 32:5E:8C:28:8B:86:B3:95:FA:15:80:A8:89:B5:88:AC:33:3C:B1:9C
Certificate issuer: /CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Certificate serial: 0198184EAB9905E3089F0A41F6E67774A4B8
Authority key identifier: FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/Ml6MKIuGs5X6FYCoibWIrDM8sZw.roa
Signing time: Thu 17 Jul 2025 12:14:25 +0000
ROA not before: Thu 17 Jul 2025 12:14:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20936
IP address blocks: 81.28.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:18:4e:ab:99:05:e3:08:9f:0a:41:f6:e6:77:74:a4:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Validity
Not Before: Jul 17 12:14:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=325e8c288b86b395fa1580a889b588ac333cb19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:88:9f:93:61:6b:5d:81:0d:bb:c2:61:57:84:
a1:ac:9f:9c:2d:f6:e3:0a:48:4e:b0:fc:72:13:7f:
37:67:65:a8:6c:4d:71:23:99:46:1a:6e:09:c6:96:
ad:8c:83:a2:58:5c:b6:0d:b5:32:63:67:b6:47:fc:
0f:5a:cd:b0:0f:58:3c:fe:35:04:69:05:86:c3:fa:
99:36:25:06:9a:4b:88:ac:43:f6:40:22:4e:15:28:
5d:df:99:08:8b:25:4b:69:c8:50:23:bb:00:69:b7:
77:2d:a6:bb:0f:61:f7:ab:ee:33:61:a0:81:64:75:
36:97:bd:ab:f2:f5:75:e2:7d:dc:af:a9:2a:8a:4a:
57:f3:cf:37:fd:09:0b:2c:12:41:6e:1f:5b:19:6e:
e1:8e:87:b0:58:96:9f:c4:b3:ba:da:6d:d6:c4:60:
8c:98:b1:9d:9f:7e:9a:c4:f0:3d:de:bf:75:fe:ac:
71:b1:49:1f:05:24:7f:e6:be:24:d0:17:b2:94:7e:
e6:b4:46:6c:bf:5d:31:a9:fb:04:fd:fe:c0:f2:79:
09:1c:e5:4c:fa:b4:a5:2e:1d:f0:ba:3a:b8:66:1d:
4e:8d:87:bc:40:43:a4:4e:83:5c:0a:65:59:25:9d:
77:53:aa:06:9f:7b:6c:95:13:93:5a:97:87:4b:94:
1d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5E:8C:28:8B:86:B3:95:FA:15:80:A8:89:B5:88:AC:33:3C:B1:9C
X509v3 Authority Key Identifier:
keyid:FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/Ml6MKIuGs5X6FYCoibWIrDM8sZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.28.64.0/20
Signature Algorithm: sha256WithRSAEncryption
8b:3a:7f:f6:43:af:e2:f6:42:48:7e:c1:a1:d1:a5:58:be:17:
00:4d:9f:a0:e8:65:1a:23:3c:4e:b3:ac:a0:2f:8a:c8:46:64:
26:cb:50:9d:40:fd:8a:ee:8c:b7:54:ac:b1:76:89:00:93:1c:
74:26:bc:01:fc:e9:b1:23:02:c3:89:d3:e2:3b:49:71:45:52:
07:bb:fb:c4:a0:6b:9d:93:29:6d:4b:26:ae:55:61:5f:50:0d:
5c:88:95:3d:7f:b3:c8:b5:c7:1a:db:0f:8a:07:cf:73:86:e0:
23:c6:42:01:a8:8d:56:7a:ad:54:a8:34:75:91:ee:72:ce:8e:
1e:08:39:03:88:1f:60:f8:91:63:0e:7e:9e:5a:d5:d4:4d:8a:
06:84:23:c1:db:1b:b2:3d:09:a2:3d:5b:15:62:3f:41:15:9a:
9a:d6:06:d5:38:7c:46:85:dc:d8:60:5d:78:04:a9:b0:96:04:
9d:5b:de:71:b2:ea:ea:e5:88:68:18:4c:21:ca:de:bf:d9:5c:
35:fe:6e:bf:ab:1d:63:a7:57:8d:2f:1e:ca:60:93:f2:e2:6b:
dd:93:27:f3:83:61:0a:2c:0b:13:7f:b4:42:51:44:2e:7b:13:
24:58:f1:90:49:55:98:4f:dc:32:de:50:8d:1e:e2:d2:ac:33:
25:13:9a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:56:06 2025 by rpki-client