Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/cMJQUSleUM51mYxMlJZ6wmqTDN8.roa
File: cMJQUSleUM51mYxMlJZ6wmqTDN8.roa (raw, json)
Hash identifier: VE3rc72XyUhuGq5YyRSy/j6lxi5FR6vJJnIY40TwbP0=
Subject key identifier: 70:C2:50:51:29:5E:50:CE:75:99:8C:4C:94:96:7A:C2:6A:93:0C:DF
Certificate issuer: /CN=b817162877da9f4030bbcb9fe8ac143e6ab2871b
Certificate serial: 019836414CA9F507F7A9F736FA92DD7B39A7
Authority key identifier: B8:17:16:28:77:DA:9F:40:30:BB:CB:9F:E8:AC:14:3E:6A:B2:87:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/cMJQUSleUM51mYxMlJZ6wmqTDN8.roa
Signing time: Wed 23 Jul 2025 07:48:25 +0000
ROA not before: Wed 23 Jul 2025 07:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 193.3.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:41:4c:a9:f5:07:f7:a9:f7:36:fa:92:dd:7b:39:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b817162877da9f4030bbcb9fe8ac143e6ab2871b
Validity
Not Before: Jul 23 07:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70c25051295e50ce75998c4c94967ac26a930cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:78:a1:a2:7f:ca:70:cb:9a:02:fc:0f:23:8b:
11:1b:a5:dd:79:54:09:ef:19:ea:bc:09:38:e7:88:
50:76:6d:b4:6a:0e:6c:7b:19:dc:5b:9a:ae:98:52:
f4:03:9c:8e:c7:df:84:53:d4:fb:7e:c5:ea:b9:f2:
16:f6:e5:ff:af:46:bc:1a:dd:b2:e7:ab:45:b6:0f:
2b:00:bd:79:9c:d6:02:34:fd:83:f9:d0:07:c7:e0:
20:b2:51:35:ae:8d:a5:9d:5c:e5:a0:86:1f:dc:24:
d6:6f:af:01:b1:78:a5:a7:99:4a:ad:e9:d9:71:51:
92:4f:75:d6:ce:3e:ef:fc:1b:17:eb:c2:d4:c9:c2:
92:96:e6:aa:ae:8e:aa:f2:e4:6b:f3:61:ff:eb:90:
24:7a:17:00:b8:ae:43:0d:b2:23:89:1f:1d:0c:fe:
77:82:d1:ff:82:3e:9c:80:da:fe:11:3b:c6:b9:c6:
55:69:df:93:ff:f1:b6:ab:3e:9d:01:8f:95:fd:5c:
16:e3:93:1a:04:ce:72:d6:ac:1f:07:e1:a3:e6:cb:
07:20:cb:9c:21:e0:82:fb:f9:91:c8:fa:b4:63:80:
c5:47:0d:d1:98:af:a0:89:45:3c:5f:f7:71:4b:9a:
a2:56:89:0e:ab:af:59:a7:b2:87:68:57:eb:49:00:
4a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C2:50:51:29:5E:50:CE:75:99:8C:4C:94:96:7A:C2:6A:93:0C:DF
X509v3 Authority Key Identifier:
keyid:B8:17:16:28:77:DA:9F:40:30:BB:CB:9F:E8:AC:14:3E:6A:B2:87:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/cMJQUSleUM51mYxMlJZ6wmqTDN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.190.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:21:7c:60:0f:bc:7a:54:39:f7:42:48:83:01:1a:b4:ee:45:
10:b5:33:f7:f1:70:b2:81:b8:b5:bd:fe:18:43:99:39:6c:92:
3b:fb:86:78:f9:ca:6e:23:cc:49:e7:ce:47:8b:5e:05:8e:7f:
90:98:4e:9e:99:d6:db:84:cd:53:c1:7a:e8:58:bc:a6:92:87:
3e:23:ff:e7:50:07:2a:be:61:b2:04:76:6c:be:b3:da:43:0a:
65:dd:6a:b5:01:7a:b5:97:03:a9:c1:89:b8:0e:31:9b:5f:1f:
87:42:19:82:db:9f:87:58:c5:31:e6:28:1a:50:68:25:59:4b:
53:fb:97:8b:60:c1:a4:67:bb:66:12:99:8d:46:b5:17:89:a0:
d2:66:4a:5e:fa:6c:b5:cf:74:1f:fc:49:ef:a0:63:1a:df:ac:
c7:7a:11:98:ed:6a:cd:d4:04:5b:7e:52:b8:64:77:a3:f1:06:
43:c5:10:a7:88:cc:94:91:56:2c:aa:48:4f:32:2d:30:1a:6a:
f6:bd:89:3b:d5:94:e0:24:86:e6:03:eb:ff:75:c2:3a:81:ad:
9f:07:af:a6:e6:af:4d:2c:81:a0:65:17:c1:9e:61:63:b0:0f:
e6:75:9d:4c:3f:cb:4b:63:05:b1:3d:1c:dd:e0:36:5d:90:a0:
c3:a9:b4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 16:28:29 2025 by rpki-client