Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/MNBepLkXuJ8Jm9GWmTHPAdtgz5w.roa
File: MNBepLkXuJ8Jm9GWmTHPAdtgz5w.roa (raw, json)
Hash identifier: 9rKYrh4EQUFU6meq5WeGRqqsHIEgQ/Pl+NaWlQVkw24=
Subject key identifier: 30:D0:5E:A4:B9:17:B8:9F:09:9B:D1:96:99:31:CF:01:DB:60:CF:9C
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 0198388916A5550894123A21E5E6B4FB0507
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/MNBepLkXuJ8Jm9GWmTHPAdtgz5w.roa
Signing time: Wed 23 Jul 2025 18:26:05 +0000
ROA not before: Wed 23 Jul 2025 18:26:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42375
IP address blocks: 155.212.0.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:89:16:a5:55:08:94:12:3a:21:e5:e6:b4:fb:05:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Jul 23 18:26:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30d05ea4b917b89f099bd1969931cf01db60cf9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:33:2c:4c:97:5d:21:f5:4a:9c:3b:dc:a2:55:
05:80:e6:cb:4f:10:8c:72:f2:e0:be:41:7b:fb:42:
8d:a3:e3:11:62:8c:2c:d2:55:6e:29:56:b4:ab:e6:
f5:bc:f8:32:4e:53:e8:c2:15:29:81:76:0f:1e:a1:
1a:4f:78:45:ce:4c:50:32:59:76:04:cf:0d:5b:97:
79:bd:c7:a0:9f:f6:e7:58:4c:68:e8:b4:fc:f5:6d:
39:8d:c8:56:a9:3b:60:2e:ef:ae:30:1e:c3:39:36:
b6:19:47:c6:5e:54:9f:49:b8:c9:3b:79:ca:34:27:
29:39:ca:59:f3:5c:e0:3d:9e:6e:66:e6:64:ed:87:
83:87:63:cc:77:4f:c0:d6:d1:7d:79:8a:39:24:23:
9c:61:8c:d4:76:2f:b2:3c:d9:67:08:8f:b0:6a:36:
2d:bf:84:4b:58:87:97:06:bc:9d:82:84:52:14:6b:
ac:6e:e3:54:d0:e9:7f:6b:2c:65:65:24:36:a1:bd:
94:f5:29:14:0f:8b:51:e4:7e:53:c6:5e:e9:0c:16:
2b:4f:9f:dd:02:ca:cf:61:48:9d:90:34:47:39:f8:
7e:53:d7:97:7c:30:b4:88:8e:95:40:34:01:2f:38:
62:92:eb:fd:4e:c1:46:b6:22:a3:a2:30:4c:26:ce:
50:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D0:5E:A4:B9:17:B8:9F:09:9B:D1:96:99:31:CF:01:DB:60:CF:9C
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/MNBepLkXuJ8Jm9GWmTHPAdtgz5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.212.0.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:54:44:56:25:3b:dd:bd:bb:60:4f:f2:ce:bd:bd:2c:8a:40:
19:46:5a:2b:74:d5:d6:6c:3f:45:cb:2e:b6:60:77:0c:1b:1f:
02:ce:4f:df:d9:30:75:a6:98:1f:bd:d1:2d:a1:d1:10:1e:d5:
75:8a:11:6f:f3:6c:21:01:df:5d:3b:a2:a7:28:77:2c:3b:2c:
4f:8f:24:2f:c8:92:5b:8e:d6:60:d2:12:a6:ad:87:c9:d9:0e:
15:bc:b7:c2:03:b2:72:0f:37:a4:18:65:be:ef:7c:70:24:fe:
b8:70:08:cb:72:93:80:41:4e:4d:cc:8a:e3:e4:ce:f9:57:0d:
fa:0d:ef:5d:87:7a:93:a9:2f:16:b5:88:e8:0a:9a:e6:f0:79:
8c:d3:71:75:28:d4:12:06:b9:a5:7a:ab:e4:96:e6:43:bc:a8:
0d:e8:5a:ea:8d:00:e6:9a:41:73:18:f7:7e:98:0a:af:40:38:
87:1c:62:e7:db:a8:e4:11:a4:2e:91:9d:c1:26:d3:50:6d:fa:
19:b8:14:51:bf:9c:c7:a7:8a:84:8e:71:e2:2f:ff:7b:b8:0a:
6f:fb:9f:86:3a:5b:69:82:10:15:da:06:c6:49:8a:45:e8:47:
a3:9b:35:ad:bc:72:96:d1:1d:96:b7:3b:4d:2a:84:f2:54:97:
e9:c2:76:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:54:38 2025 by rpki-client