Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/MIQC9ZD_P27TC0A1Aj-BTxrMmvQ.roa
File: MIQC9ZD_P27TC0A1Aj-BTxrMmvQ.roa (raw, json)
Hash identifier: pdhAQ+GY9EFxMBEZhjT+H8yQuuL2URMM5wJvFDCIk1s=
Subject key identifier: 30:84:02:F5:90:FF:3F:6E:D3:0B:40:35:02:3F:81:4F:1A:CC:9A:F4
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0197E95320CA2DD33977EB6FCE954931323F
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/MIQC9ZD_P27TC0A1Aj-BTxrMmvQ.roa
Signing time: Tue 08 Jul 2025 09:17:08 +0000
ROA not before: Tue 08 Jul 2025 09:17:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58061
IP address blocks: 95.81.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e9:53:20:ca:2d:d3:39:77:eb:6f:ce:95:49:31:32:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Jul 8 09:17:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=308402f590ff3f6ed30b4035023f814f1acc9af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:54:09:08:10:0f:db:a4:e8:4b:70:2f:d5:d7:
e8:7f:cb:df:41:9e:89:99:3f:48:f3:45:99:c6:4c:
de:24:bc:b8:e7:98:5d:e7:c2:5e:02:6b:a3:80:56:
45:25:f3:43:a9:e5:f3:88:f9:28:9e:a5:3d:98:33:
5e:29:ec:d6:b6:15:2e:91:6e:59:fe:67:02:44:27:
e6:2c:0d:15:b4:49:df:07:f4:6b:84:a5:f8:d4:22:
00:12:87:8b:20:fa:e7:21:88:0a:d5:81:0a:fd:de:
9b:eb:62:7f:a8:f7:e9:39:d5:e6:d8:d4:3f:6b:d2:
be:43:c1:26:30:2b:71:17:c9:d9:19:7e:44:a1:98:
aa:1a:7e:a2:f9:7c:45:2b:63:c7:7a:fe:4c:12:ce:
50:aa:c2:f6:5b:fa:73:c5:83:4e:2b:40:ff:7a:26:
91:db:5e:84:8d:a4:a4:1f:7a:0c:4b:69:f7:ef:57:
9e:dd:70:46:09:14:78:4e:15:78:b5:d2:a3:99:17:
5c:f8:5c:c2:7e:9e:b2:69:61:ce:5c:47:f2:0e:5b:
f8:b0:2c:ff:49:9b:61:82:66:13:ef:76:de:f7:04:
4d:23:05:4d:06:81:e0:11:5e:69:46:48:b9:ef:9f:
b9:02:f4:92:66:aa:d0:58:b6:37:a6:30:8e:2e:6d:
0c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:84:02:F5:90:FF:3F:6E:D3:0B:40:35:02:3F:81:4F:1A:CC:9A:F4
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/MIQC9ZD_P27TC0A1Aj-BTxrMmvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.81.117.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:dc:d7:91:b8:ec:4b:15:e0:8d:82:6d:c4:04:87:a5:23:3f:
54:14:97:d6:d4:a9:0f:d6:14:d6:e4:6e:00:b4:5e:50:14:29:
14:0b:a4:d1:6c:0b:72:ab:f0:68:d4:e7:5a:c3:4e:42:67:cd:
b9:d1:cf:7d:23:45:82:f3:d8:2c:72:00:f2:26:02:60:f1:a7:
f6:eb:dc:36:84:f6:d1:3b:8f:cd:4a:cc:cc:1e:91:50:f9:9f:
67:53:61:d3:00:0f:c5:ee:46:66:00:61:ad:70:23:67:b0:59:
9c:0f:d3:43:d4:10:ba:27:f1:cd:57:1a:f8:ba:71:b4:d8:14:
ef:28:bc:b3:86:5c:67:ce:ea:00:8e:29:a0:8f:77:8f:a1:80:
51:b3:ce:89:31:61:74:46:20:e9:32:94:9d:70:f3:5a:49:52:
31:c3:4e:79:e7:14:d9:6c:4a:06:0d:3b:fa:5a:b5:77:7b:37:
fb:ee:3a:dd:bc:a1:fe:9b:ed:f2:f9:ea:d6:56:ca:07:8d:82:
b9:78:fb:fb:97:b4:61:e4:c3:6d:66:a3:77:3b:97:b7:f1:b0:
5f:f7:26:f8:39:01:85:29:4b:8f:28:6c:85:07:6f:6c:5d:06:
19:a3:b8:05:08:1c:a5:05:44:02:eb:be:14:f5:34:fa:9c:bb:
8a:c9:2a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:40:08 2025 by rpki-client