Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/mx4mEjcUAqOj7-yzqqHmPAfoCTw.roa
File: mx4mEjcUAqOj7-yzqqHmPAfoCTw.roa (raw, json)
Hash identifier: TADBUKVvbfWL8WOCN7ye3V2kF6YpMBXr/Ao/gRMpF0w=
Subject key identifier: 9B:1E:26:12:37:14:02:A3:A3:EF:EC:B3:AA:A1:E6:3C:07:E8:09:3C
Certificate issuer: /CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
Certificate serial: 01982CD2227453A9A079644E51B66568C825
Authority key identifier: E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/mx4mEjcUAqOj7-yzqqHmPAfoCTw.roa
Signing time: Mon 21 Jul 2025 11:50:25 +0000
ROA not before: Mon 21 Jul 2025 11:50:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208885
IP address blocks: 86.54.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2c:d2:22:74:53:a9:a0:79:64:4e:51:b6:65:68:c8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
Validity
Not Before: Jul 21 11:50:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b1e2612371402a3a3efecb3aaa1e63c07e8093c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3d:dc:ce:e9:03:db:35:a3:9c:b9:e4:0b:f8:
e8:2a:c2:0a:a1:5a:70:2e:27:75:ea:5e:3d:36:be:
6a:a1:c9:32:4c:93:cd:67:1e:70:49:7f:7c:6d:06:
93:8c:d7:fd:90:b1:a3:1d:0f:0e:cb:ae:27:ed:c0:
da:40:f9:4e:d3:18:dc:04:97:8c:84:64:65:c4:f6:
c7:b5:7c:ea:8b:3b:46:23:2e:4b:90:da:44:a4:12:
b7:26:2f:75:c9:b3:a6:71:b2:82:a3:98:3a:eb:ac:
d3:d1:cc:fa:5f:94:17:5d:a9:60:a8:bd:be:08:4d:
2d:c1:a5:51:bb:d1:a7:9f:92:2c:df:71:3b:06:3b:
2e:0f:ad:40:99:be:66:87:26:8e:23:e5:eb:3f:9a:
c0:b0:04:4e:b3:4f:81:6e:85:0d:d8:c6:b7:26:f5:
49:a7:fb:7c:ab:a8:b6:7d:94:a5:fd:2e:36:7d:cd:
63:93:d3:eb:e3:e8:70:13:7a:64:24:cd:5c:28:01:
7f:7e:b6:cd:af:47:56:84:56:62:64:15:46:c1:e7:
f2:c1:72:5d:05:0f:00:46:27:01:1b:88:ee:95:a9:
75:ef:11:79:bf:36:3f:53:b0:db:9b:4d:05:20:52:
c6:48:4c:f9:3a:83:c2:5e:10:92:6d:2f:dc:11:ff:
15:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1E:26:12:37:14:02:A3:A3:EF:EC:B3:AA:A1:E6:3C:07:E8:09:3C
X509v3 Authority Key Identifier:
keyid:E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/mx4mEjcUAqOj7-yzqqHmPAfoCTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.54.24.0/24
Signature Algorithm: sha256WithRSAEncryption
96:9b:68:e2:a2:c3:5e:5b:22:59:98:4c:33:bd:1f:86:5f:df:
17:b4:52:c7:8e:3a:16:d3:4e:12:80:df:37:e3:8e:91:fa:94:
a4:6f:80:0d:dd:38:3e:39:35:a7:fd:6f:ca:2a:e8:af:d4:56:
64:d9:ff:f7:ff:66:7f:a8:05:97:8a:1d:5d:af:b8:85:d5:c4:
dd:ae:d6:7d:e1:29:bd:9a:19:d7:8a:b1:9b:06:70:7e:0a:50:
0c:52:16:5d:4a:e7:14:a0:ff:74:c0:d2:20:ad:92:ff:96:7e:
da:d7:11:1b:3a:0d:b1:d6:ae:01:f8:70:23:c4:70:70:56:1c:
7c:cf:98:9f:52:8e:c6:f7:a0:28:df:26:1e:f7:9d:d2:a8:e7:
a3:cb:fa:e3:6a:5c:73:5a:3d:fc:4f:24:8e:38:0c:f9:36:2b:
7d:76:52:47:81:dd:da:36:0e:15:0a:5c:44:33:ae:7d:62:73:
20:2b:58:a9:10:35:89:97:f5:bf:28:b7:5f:07:95:d7:6a:3d:
af:e5:19:ce:15:1d:33:9d:35:d4:0e:72:03:ac:82:50:64:fa:
bd:fe:2b:06:b4:12:23:af:e0:b0:d3:2c:93:84:a7:0d:76:b5:
6f:16:10:1c:d0:e0:42:06:98:19:e7:81:f0:ea:8d:01:16:9b:
3f:d5:3b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:04:22 2025 by rpki-client