Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/MyqYBnhuQWC6jBgr6LglN2EYGOA.roa
File: MyqYBnhuQWC6jBgr6LglN2EYGOA.roa (raw, json)
Hash identifier: Di9sEIDs+wFzdjcM3rM7YUWhcIoWp5vrG4QyfmG810k=
Subject key identifier: 33:2A:98:06:78:6E:41:60:BA:8C:18:2B:E8:B8:25:37:61:18:18:E0
Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial: 01983C7F7F35A46FF34414D535D0BEC3B5D7
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/MyqYBnhuQWC6jBgr6LglN2EYGOA.roa
Signing time: Thu 24 Jul 2025 12:54:05 +0000
ROA not before: Thu 24 Jul 2025 12:54:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34661
IP address blocks: 195.123.0.0/22 maxlen: 22
195.123.12.0/22 maxlen: 22
195.123.168.0/22 maxlen: 22
195.123.180.0/22 maxlen: 22
195.123.196.0/22 maxlen: 22
195.123.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3c:7f:7f:35:a4:6f:f3:44:14:d5:35:d0:be:c3:b5:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Validity
Not Before: Jul 24 12:54:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=332a9806786e4160ba8c182be8b82537611818e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9a:21:dc:fb:44:75:ba:3d:c3:29:0a:32:0c:
7a:a5:05:5c:23:0f:ff:28:bf:90:e4:72:e6:d3:1a:
ec:40:e2:c8:be:46:0d:0d:e0:22:cb:9b:12:85:04:
88:d9:70:82:d1:f1:a0:9f:a2:23:6d:02:c2:92:7a:
c3:99:b0:c7:b2:ce:ab:ec:ed:63:94:64:3c:2b:e3:
07:88:6c:ae:85:6b:18:ef:84:b7:29:1d:40:4c:7c:
61:9b:b9:19:c0:56:3c:34:eb:d2:3f:c7:f7:09:46:
0e:32:88:e2:8d:89:c6:4e:ee:50:65:3d:1d:04:f9:
fd:13:ae:26:6e:93:9a:9f:1b:3d:a9:36:fa:d7:50:
01:7b:ed:95:9a:1e:b5:c2:a8:19:46:e6:b2:b5:6c:
45:6d:12:59:51:91:c7:48:65:c0:d9:8d:20:f0:67:
d1:d0:94:53:ee:0f:86:70:df:7b:fd:c7:43:2c:3e:
26:82:1b:58:df:0e:02:5c:76:f1:f3:76:3d:4b:3c:
e6:dc:61:b5:38:d8:c3:ac:96:13:d8:59:0b:43:00:
65:af:63:e9:72:da:ea:52:e1:61:7e:14:be:95:af:
f2:67:ad:f8:a6:8a:d2:91:44:d7:3e:3f:25:24:08:
73:e5:3d:aa:2b:63:1d:d6:0d:73:8c:d7:e5:f9:a0:
f4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2A:98:06:78:6E:41:60:BA:8C:18:2B:E8:B8:25:37:61:18:18:E0
X509v3 Authority Key Identifier:
keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/MyqYBnhuQWC6jBgr6LglN2EYGOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.123.0.0/22
195.123.12.0/22
195.123.168.0/22
195.123.180.0/22
195.123.196.0/22
195.123.252.0/22
Signature Algorithm: sha256WithRSAEncryption
08:81:d1:6a:3f:04:13:4c:4b:6a:21:89:5e:f8:85:0f:b0:94:
03:5a:e1:80:50:c3:20:75:db:e4:44:99:8b:3d:e5:7f:ce:78:
f8:5d:26:87:ba:ad:33:0a:1f:d4:74:97:ee:83:c5:d4:bb:52:
31:04:11:a2:2a:f3:8c:c8:cd:de:f1:49:26:f3:1b:08:21:1f:
ab:c8:aa:23:76:16:b6:00:99:ad:47:c2:59:9e:ce:fe:8f:e8:
6b:c4:1b:31:be:e2:b8:03:98:32:80:04:18:01:87:de:ef:cb:
ae:57:ff:ca:f6:e3:55:cd:af:13:f6:a2:17:e3:b6:70:e5:d2:
7a:ee:61:56:fb:ad:02:3b:c9:b7:7f:6d:1d:67:b9:17:93:5d:
12:9e:a3:47:31:f2:73:9c:3c:2e:d1:f8:e8:70:cd:3b:8c:20:
22:c6:d2:cb:8d:9d:da:6e:ab:d1:37:fd:97:f4:ce:c0:30:39:
7c:d5:3d:d4:87:c0:58:8d:e6:32:7a:57:1a:1c:54:81:f2:fa:
36:e3:1f:29:98:ff:43:4d:d8:e0:55:b9:39:eb:66:b2:be:de:
b6:6f:02:f9:d9:16:1b:3f:1c:58:5c:ce:b1:e8:53:3e:43:82:
7f:a0:a7:1d:c3:f3:fe:b9:ae:12:d6:51:bd:42:76:3d:17:89:
5f:c4:38:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:21:49 2025 by rpki-client