Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/3mULbMkLr_MPSOSnvFYfAUenRp4.roa
File: 3mULbMkLr_MPSOSnvFYfAUenRp4.roa (raw, json)
Hash identifier: 6qqpV0wkHRjm2TnedKwLS/E8U5BGoXw+wiRnm1KNFsU=
Subject key identifier: DE:65:0B:6C:C9:0B:AF:F3:0F:48:E4:A7:BC:56:1F:01:47:A7:46:9E
Certificate issuer: /CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
Certificate serial: 01991B08794A75727D72FDDE923E859E396C
Authority key identifier: 82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/3mULbMkLr_MPSOSnvFYfAUenRp4.roa
Signing time: Fri 05 Sep 2025 17:59:24 +0000
ROA not before: Fri 05 Sep 2025 17:59:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34848
IP address blocks: 89.104.192.0/19 maxlen: 19
185.38.180.0/24 maxlen: 24
185.38.181.0/24 maxlen: 24
185.38.182.0/23 maxlen: 23
193.238.184.0/24 maxlen: 24
193.238.186.0/24 maxlen: 24
193.238.187.0/24 maxlen: 24
195.242.120.0/23 maxlen: 23
195.245.210.0/24 maxlen: 24
2a01:77c0::/36 maxlen: 36
2a01:77c0:6::/48 maxlen: 48
2a01:77c0:1180::/48 maxlen: 48
2a01:77c0:1181::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1b:08:79:4a:75:72:7d:72:fd:de:92:3e:85:9e:39:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
Validity
Not Before: Sep 5 17:59:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de650b6cc90baff30f48e4a7bc561f0147a7469e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:45:04:df:ba:7c:15:83:89:42:b0:aa:ee:8d:
8c:ff:c4:df:eb:65:05:60:2d:19:cf:dd:db:3b:f9:
2c:50:84:74:78:d5:20:57:12:3d:9c:05:bc:3a:d8:
94:71:cd:00:99:ac:2e:b2:e3:9e:af:65:2b:5c:ff:
1a:68:a9:0b:9c:a5:ea:0a:9d:75:fc:9e:b6:36:b4:
02:63:78:85:dd:ff:a2:66:ec:b7:38:bc:05:00:36:
1d:6a:18:8b:1a:76:38:ee:9a:20:4a:35:ad:9a:3e:
54:24:f8:1a:cf:75:af:58:88:bd:56:89:00:2a:7a:
06:87:6e:93:86:aa:ea:70:41:23:c6:9f:9f:74:a9:
85:40:10:71:00:b6:b7:8a:e5:36:47:4a:b8:c2:80:
36:25:49:62:11:84:b8:35:85:ef:12:6f:ed:3f:f5:
2a:60:f0:88:4a:fb:76:9f:cc:05:97:1e:8c:97:86:
ab:da:46:d5:11:9b:bf:b9:d5:4e:06:cc:fa:2e:4b:
ce:8a:3e:7e:83:12:8b:d0:8f:00:eb:24:53:21:15:
d8:ad:8e:f5:36:7d:ba:d0:94:4c:3e:19:ae:bc:ea:
42:88:c4:db:c6:df:09:d4:73:72:38:91:1f:b0:a6:
fe:c9:b5:50:b3:fa:e3:dc:1a:d5:b6:d6:e5:65:f6:
71:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:65:0B:6C:C9:0B:AF:F3:0F:48:E4:A7:BC:56:1F:01:47:A7:46:9E
X509v3 Authority Key Identifier:
keyid:82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/3mULbMkLr_MPSOSnvFYfAUenRp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.104.192.0/19
185.38.180.0/22
193.238.184.0/24
193.238.186.0/23
195.242.120.0/23
195.245.210.0/24
IPv6:
2a01:77c0::/36
2a01:77c0:1180::/47
Signature Algorithm: sha256WithRSAEncryption
72:d9:88:76:a5:4b:ba:96:db:24:ac:f4:bc:8b:49:5f:91:f4:
3a:ab:ea:df:e8:bb:e1:51:c8:25:86:af:20:15:1a:bc:3b:0e:
02:f1:96:0f:4c:b9:90:30:9d:c2:63:e2:c1:31:c3:13:5f:6f:
36:4e:d2:0c:bc:4f:79:cd:03:2f:ac:2b:09:f1:9d:9a:da:db:
6b:f9:4f:23:0d:36:d0:8e:b8:3e:c9:1f:3d:21:61:4c:06:26:
2b:af:f8:fb:14:58:0d:98:70:40:0b:e6:ca:b5:89:3b:a5:2e:
4d:f5:86:87:3c:7b:e3:83:66:3e:ed:01:bf:b2:a7:0f:eb:5e:
e7:2d:04:ec:00:a9:be:34:57:c1:da:b6:e1:d0:6a:18:45:05:
89:45:31:cb:c1:3b:71:89:6d:f3:af:ee:d2:17:da:c3:54:42:
b1:28:75:44:6f:17:47:a5:cf:ce:dd:8b:db:6d:bc:83:56:f1:
93:86:b8:61:8c:6d:b6:85:60:a6:22:d2:3c:55:d0:08:f2:81:
69:e7:fe:41:72:9c:07:e4:58:71:54:14:5c:61:24:1e:f2:cb:
1c:3c:58:17:a3:b6:8c:7b:51:f9:4e:26:d8:02:3f:85:32:97:
6d:e0:38:b0:9e:1b:0e:6e:d6:a1:10:bb:de:27:21:27:cd:10:
0d:1f:a2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:50:46 2025 by rpki-client