Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/MYlZiK8j4I-CRpNK84XFADjqS_Q.roa
File: MYlZiK8j4I-CRpNK84XFADjqS_Q.roa (raw, json)
Hash identifier: sHYzc9/ggp3cDmlo2cdq6sgs+CvgzddIutlRUEG3Jro=
Subject key identifier: 31:89:59:88:AF:23:E0:8F:82:46:93:4A:F3:85:C5:00:38:EA:4B:F4
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 01970CC0DAC3DC133D5CE926F24CC5FF2E6B
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/MYlZiK8j4I-CRpNK84XFADjqS_Q.roa
Signing time: Mon 26 May 2025 13:20:54 +0000
ROA not before: Mon 26 May 2025 13:20:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62206
IP address blocks: 91.228.12.0/24 maxlen: 24
91.228.13.0/24 maxlen: 24
91.228.14.0/24 maxlen: 24
91.228.15.0/24 maxlen: 24
94.154.32.0/24 maxlen: 24
94.154.33.0/24 maxlen: 24
94.154.35.0/24 maxlen: 24
94.154.36.0/24 maxlen: 24
94.154.37.0/24 maxlen: 24
94.154.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0c:c0:da:c3:dc:13:3d:5c:e9:26:f2:4c:c5:ff:2e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: May 26 13:20:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31895988af23e08f8246934af385c50038ea4bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2d:d1:9e:f5:c7:64:e0:44:de:62:4c:9f:55:
0a:0c:7c:99:94:1f:a6:16:23:4a:16:d7:98:94:ba:
d0:de:81:7c:96:08:72:09:48:96:d3:6f:6c:7d:ef:
3c:a5:72:7e:d3:b9:f7:a0:56:45:a7:cd:2a:69:79:
80:54:69:8f:42:69:47:01:cd:85:12:be:8f:db:24:
2c:36:f5:65:06:ad:7e:58:41:a3:c6:93:2f:2b:f8:
0e:e5:c7:ef:23:ae:42:0a:ef:c4:93:29:90:a0:87:
76:58:e7:ea:4e:5e:c4:fe:82:d2:76:5c:32:d4:5d:
ff:71:3a:f0:ca:b0:83:29:6e:2b:17:db:ae:0c:ba:
26:92:6d:8b:0d:5e:f5:ca:53:74:2c:d2:0f:33:dc:
b1:5b:5a:75:26:b6:f9:49:16:ff:c0:ba:e5:ab:ae:
56:33:e9:e1:fa:e4:9d:75:84:53:75:46:fc:a2:97:
4e:3a:f3:a1:b9:b9:3a:29:16:c8:19:84:a2:f9:d6:
0e:17:ee:bd:48:71:24:76:39:1b:95:08:b2:86:05:
86:59:a0:c7:ae:5a:d6:ec:c4:f6:35:1e:5d:d9:3c:
26:e8:25:1c:85:6d:a8:89:ff:ae:1a:ce:57:e7:af:
c5:e6:a1:74:59:cf:b2:68:1e:e0:73:5a:b2:42:33:
a1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:89:59:88:AF:23:E0:8F:82:46:93:4A:F3:85:C5:00:38:EA:4B:F4
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/MYlZiK8j4I-CRpNK84XFADjqS_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.12.0/22
94.154.32.0/23
94.154.35.0-94.154.38.255
Signature Algorithm: sha256WithRSAEncryption
9f:d4:f9:22:3e:1e:92:5e:70:fd:1e:98:8c:48:cc:ab:e0:98:
74:f1:65:dc:e1:83:f9:0f:6d:62:b7:bf:f8:ff:47:e6:20:f7:
0c:17:bb:b6:f9:61:58:bf:a0:57:ef:30:bd:72:be:34:a8:28:
0e:54:eb:66:9b:eb:f9:ca:dd:39:41:4e:a3:09:97:8f:aa:95:
1e:08:63:2f:66:92:e7:23:80:f0:6a:a8:dd:94:3f:38:7c:52:
1d:f7:9d:55:6c:4e:4d:c5:95:de:a2:de:2a:23:dd:01:d3:b6:
40:56:45:aa:71:71:00:fe:dc:02:5b:3d:5a:df:b7:27:7e:bd:
37:2c:b4:05:32:81:9a:14:74:3f:89:6e:c7:f8:81:ac:6f:6f:
e2:c0:f9:bc:c1:08:c3:a5:63:a0:db:2d:45:8b:f5:64:75:cc:
c4:1a:2f:17:d6:f2:ca:b8:f5:6c:92:0b:55:ad:f3:b2:48:d4:
de:50:0d:02:85:47:cc:9a:3a:b9:91:82:72:96:f9:30:50:83:
7b:8c:4e:a6:62:ff:78:98:79:32:23:22:43:6f:16:0f:c0:cb:
a3:54:b5:e6:19:25:97:1a:b1:47:06:b0:54:15:83:f4:7f:81:
9d:c8:fb:32:79:43:4b:e2:9c:ba:87:2a:6a:36:a0:37:6d:00:
f2:3c:74:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:09:06 2025 by rpki-client