Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/MfgxEOGAfVTGEvhRZTV_fR1-qXk.roa
File: MfgxEOGAfVTGEvhRZTV_fR1-qXk.roa (raw, json)
Hash identifier: k0aQBEKvm4oillc+UIihjgdIum6WVpAkoV036ebhwvc=
Subject key identifier: 31:F8:31:10:E1:80:7D:54:C6:12:F8:51:65:35:7F:7D:1D:7E:A9:79
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 0199D3205FB8B59550810F58F53FF013000E
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/MfgxEOGAfVTGEvhRZTV_fR1-qXk.roa
Signing time: Sat 11 Oct 2025 11:55:38 +0000
ROA not before: Sat 11 Oct 2025 11:55:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 984
IP address blocks: 178.239.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d3:20:5f:b8:b5:95:50:81:0f:58:f5:3f:f0:13:00:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Oct 11 11:55:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31f83110e1807d54c612f85165357f7d1d7ea979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:02:1c:7e:01:7d:3e:44:cf:56:ad:9c:98:26:
a3:5a:e7:bd:e3:f2:c3:c5:51:fe:1b:39:27:20:3e:
5c:9f:ab:ea:1f:dc:df:4c:40:12:e5:f5:db:d4:2f:
8b:58:a0:9c:20:1d:4e:67:51:30:23:40:fc:14:b0:
68:ef:ae:3a:42:63:31:fa:48:a3:0c:82:54:95:f7:
c4:de:23:a5:13:9c:ff:55:ac:a6:67:90:e6:67:a7:
ab:0f:f9:60:aa:05:5f:d5:5f:3a:d6:c4:04:b2:1f:
41:da:f7:39:3d:1a:a0:8d:11:80:06:e1:29:89:fb:
60:54:32:8b:4f:67:fc:0c:c9:97:53:a9:03:de:2c:
b0:f6:0e:23:8e:58:f7:4d:97:48:bb:1c:74:63:7a:
ac:3d:40:0a:59:89:a8:d3:92:73:e2:e3:1f:0e:08:
16:c7:1b:2f:6a:9c:c6:07:04:c7:99:1b:e9:f1:23:
ef:e3:7e:09:da:0f:a8:e3:5a:b2:27:ea:a8:83:14:
ca:b8:f6:cd:27:d5:d7:f7:b9:93:9d:c5:5e:fb:92:
6e:ac:db:02:d1:69:33:b7:7e:f7:5d:d3:5d:80:41:
5d:f4:1f:f2:ba:f9:81:4c:4d:86:6f:76:f7:2e:61:
b3:51:7e:29:cd:78:7f:5f:69:fc:b6:15:1c:be:64:
df:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F8:31:10:E1:80:7D:54:C6:12:F8:51:65:35:7F:7D:1D:7E:A9:79
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/MfgxEOGAfVTGEvhRZTV_fR1-qXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.112.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:c0:0d:16:d6:8f:e9:ec:6a:c8:77:f3:9b:db:d0:4c:0b:50:
42:f1:20:07:7f:22:0c:54:2e:b4:b5:93:dc:4b:8e:9a:16:8f:
a4:a0:be:1a:f0:3a:0c:82:2b:47:89:ac:82:2e:14:2e:3c:fc:
ea:94:32:85:78:d8:c8:4c:75:fc:13:af:64:1f:58:c9:c5:17:
51:09:85:f4:29:18:41:e2:6d:c2:95:eb:fb:8d:3c:51:f8:9c:
09:a7:09:c1:04:08:c1:44:ac:60:57:90:fb:35:ac:2b:d3:f4:
6f:f8:8f:ed:ee:63:3b:1d:c2:37:88:bc:6c:be:5c:3f:74:11:
40:f7:65:fd:02:84:da:82:3c:84:3c:a9:14:3b:ad:84:cf:17:
cb:80:fc:ec:9b:e9:1f:c9:94:83:7c:59:b3:b6:c5:e5:86:5c:
40:df:b3:2d:7d:60:28:0c:90:83:8f:8e:82:03:b3:63:1f:9f:
58:c7:fb:b5:77:69:69:1a:ac:26:e1:6c:4a:22:c9:88:5b:14:
55:30:7d:83:5a:36:91:41:5e:67:08:82:9a:0e:39:56:38:c1:
56:de:36:35:1a:ca:c7:f4:e4:41:19:9a:fa:88:a8:50:e8:f4:
c1:c2:7d:75:38:3e:a5:19:5a:13:86:4e:19:61:6c:fd:e9:33:
36:cf:e7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 16:05:08 2025 by rpki-client