Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/mNSZJOUVeZicld4QAL_-bUUCGDI.roa
File: mNSZJOUVeZicld4QAL_-bUUCGDI.roa (raw, json)
Hash identifier: nBD9zjll4ut7eXUVf0/WxLdu+1b2MWKBGI9qLKkr07w=
Subject key identifier: 98:D4:99:24:E5:15:79:98:9C:95:DE:10:00:BF:FE:6D:45:02:18:32
Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Certificate serial: 0197D0C4BE25CE816E93EA2CEFA5BA81BE12
Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/mNSZJOUVeZicld4QAL_-bUUCGDI.roa
Signing time: Thu 03 Jul 2025 14:50:44 +0000
ROA not before: Thu 03 Jul 2025 14:50:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211993
IP address blocks: 2.57.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d0:c4:be:25:ce:81:6e:93:ea:2c:ef:a5:ba:81:be:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Validity
Not Before: Jul 3 14:50:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98d49924e51579989c95de1000bffe6d45021832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9a:fc:76:a3:91:a8:de:d3:81:b1:57:63:01:
29:3f:34:bf:7e:3f:36:a4:7d:24:28:cb:4b:cd:90:
3c:2d:3b:d9:16:76:5b:a7:c6:0e:94:a4:0b:7e:4a:
fe:28:ab:76:82:15:ca:28:83:76:1e:77:2a:5a:a5:
93:d1:4b:98:9c:4e:58:d3:25:a2:d5:e8:23:fe:bc:
80:bb:b6:35:4d:1c:b3:a5:74:ba:f4:dd:bc:85:68:
02:41:85:ef:ad:93:35:cf:3f:bf:57:8e:36:37:a3:
29:20:2a:a6:5f:45:00:60:58:58:dc:af:30:cf:0e:
28:78:5e:ac:de:89:a3:02:5f:52:07:b1:d6:e6:46:
4e:5e:d8:54:8c:58:bc:36:15:fb:69:24:ea:4e:00:
a0:e7:ce:ac:9d:e5:20:8e:26:70:de:d3:e3:44:17:
ff:12:d9:b2:04:c9:fc:f8:b7:04:7e:64:8b:66:95:
b6:3e:78:16:29:20:e0:c9:00:3e:85:9e:50:d9:55:
29:82:6c:5d:92:c7:b3:80:07:7b:5f:21:24:f2:7f:
6b:0f:83:73:26:e5:b2:5a:68:2a:4b:0a:5e:86:32:
8e:ae:98:a8:f5:21:d9:af:34:25:84:45:d5:16:6f:
14:6b:38:66:8d:81:a1:f8:1b:65:56:dd:4c:05:2b:
1d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D4:99:24:E5:15:79:98:9C:95:DE:10:00:BF:FE:6D:45:02:18:32
X509v3 Authority Key Identifier:
keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/mNSZJOUVeZicld4QAL_-bUUCGDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.58.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:b0:a4:9c:86:68:45:86:86:67:ac:b1:01:af:de:34:34:b8:
cd:93:a3:8e:ee:9e:16:36:ee:00:18:ba:f5:35:27:bc:bb:06:
f3:87:d0:ed:72:a0:db:ac:99:fb:dc:c7:80:43:36:81:70:d2:
9a:68:54:06:c7:56:61:34:df:51:60:57:50:28:c1:37:f5:b7:
c1:ff:46:9b:91:cb:c1:44:03:0a:7e:67:d1:64:2d:6b:f9:a2:
52:aa:03:a1:7e:e1:5d:2e:eb:7b:5b:1e:e1:10:b1:24:a0:cc:
60:36:b5:eb:49:16:0e:61:14:6b:17:c4:25:88:af:dd:1b:dc:
a4:d8:c5:fd:86:e1:3a:df:ad:15:ca:55:70:6d:58:e5:5a:08:
8f:40:77:e5:c1:5f:43:cf:9f:9c:65:1d:97:4a:aa:cc:97:88:
c7:41:50:e0:92:8e:be:f9:c4:9f:63:97:06:57:ff:fd:47:c8:
65:62:6d:78:6b:82:64:48:08:78:29:a9:ab:f3:fe:6d:43:7d:
8b:d5:4a:56:7b:89:00:e3:72:d5:ce:1c:3f:d8:70:97:1b:ff:
f7:9a:a2:e9:18:55:27:13:1f:0d:1e:3b:2c:27:25:68:b6:c9:
f8:58:6a:0c:06:a8:ae:60:b2:af:6b:84:2a:a7:84:63:de:95:
30:f6:bc:62
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZfQxL4lzoFuk+os76W6gb4SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4OGM2NWRjMzU5YjU4Y2E2YmE1ZDNkYWViODc0ZjA1ODY4
NGU4YzYwHhcNMjUwNzAzMTQ1MDQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGQ0OTkyNGU1MTU3OTk4OWM5NWRlMTAwMGJmZmU2ZDQ1MDIxODMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5r8dqORqN7TgbFXYwEpPzS/fj82
pH0kKMtLzZA8LTvZFnZbp8YOlKQLfkr+KKt2ghXKKIN2HncqWqWT0UuYnE5Y0yWi
1egj/ryAu7Y1TRyzpXS69N28hWgCQYXvrZM1zz+/V442N6MpICqmX0UAYFhY3K8w
zw4oeF6s3omjAl9SB7HW5kZOXthUjFi8NhX7aSTqTgCg586sneUgjiZw3tPjRBf/
EtmyBMn8+LcEfmSLZpW2PngWKSDgyQA+hZ5Q2VUpgmxdksezgAd7XyEk8n9rD4Nz
JuWyWmgqSwpehjKOrpio9SHZrzQlhEXVFm8UazhmjYGh+BtlVt1MBSsdHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJjUmSTlFXmYnJXeEAC//m1FAhgyMB8GA1UdIwQY
MBaAFEiMZdw1m1jKa6XT2uuHTwWGhOjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQt
YjBkNzJlOTEwZWZlLzEvbU5TWkpPVVZlWmljbGQ0UUFMXy1iVVVDR0RJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQtYjBkNzJlOTEwZWZl
LzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjk6MA0G
CSqGSIb3DQEBCwUAA4IBAQB9sKSchmhFhoZnrLEBr940NLjNk6OO7p4WNu4AGLr1
NSe8uwbzh9DtcqDbrJn73MeAQzaBcNKaaFQGx1ZhNN9RYFdQKME39bfB/0abkcvB
RAMKfmfRZC1r+aJSqgOhfuFdLut7Wx7hELEkoMxgNrXrSRYOYRRrF8QliK/dG9yk
2MX9huE6360VylVwbVjlWgiPQHflwV9Dz5+cZR2XSqrMl4jHQVDgko6++cSfY5cG
V//9R8hlYm14a4JkSAh4Kamr8/5tQ32L1UpWe4kA43LVzhw/2HCXG//3mqLpGFUn
Ex8NHjssJyVotsn4WGoMBqiuYLKva4Qqp4Rj3pUw9rxi
-----END CERTIFICATE-----
Generated at Fri Jul 25 14:38:35 2025 by rpki-client