Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/Ml1Fsmyw_RPOo4jYKTu8jk-kam0.roa
File: Ml1Fsmyw_RPOo4jYKTu8jk-kam0.roa (raw, json)
Hash identifier: eAJJqzb8VNfBkUPBC7i1kIV3RBQsZ3qtGfeZNiTYCV0=
Subject key identifier: 32:5D:45:B2:6C:B0:FD:13:CE:A3:88:D8:29:3B:BC:8E:4F:A4:6A:6D
Certificate issuer: /CN=70fee176f51ce8fd81424ff73a5417341279c0f1
Certificate serial: 019A11E51BA1B3C820080113CC50BDD60EA3
Authority key identifier: 70:FE:E1:76:F5:1C:E8:FD:81:42:4F:F7:3A:54:17:34:12:79:C0:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/Ml1Fsmyw_RPOo4jYKTu8jk-kam0.roa
Signing time: Thu 23 Oct 2025 16:26:58 +0000
ROA not before: Thu 23 Oct 2025 16:26:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213671
IP address blocks: 192.48.111.0/24 maxlen: 24
2a05:b100:1000::/36 maxlen: 36
2a05:b100:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:11:e5:1b:a1:b3:c8:20:08:01:13:cc:50:bd:d6:0e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70fee176f51ce8fd81424ff73a5417341279c0f1
Validity
Not Before: Oct 23 16:26:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=325d45b26cb0fd13cea388d8293bbc8e4fa46a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a5:3f:5e:01:ef:ae:54:28:f0:55:4f:e7:f9:
97:23:a9:9d:4d:32:b8:06:88:56:13:f9:c4:39:11:
92:b4:8b:52:9a:a2:a8:b3:46:15:39:7a:67:2d:66:
15:26:14:6f:2c:e4:02:f8:40:83:93:3c:e6:73:8f:
d2:6c:55:48:27:78:78:5d:1b:66:3e:b0:eb:72:f7:
5a:3c:a7:61:e4:df:eb:c5:e2:58:ed:06:c2:55:37:
8c:f1:5e:18:2d:6a:d6:11:43:9c:00:e3:5a:82:cf:
4e:35:6c:d9:1b:a3:b8:ff:64:2f:f1:b7:84:54:aa:
2a:0a:1f:bb:3b:bc:04:7e:5b:87:02:8e:74:ac:1b:
90:5a:54:73:7d:1f:71:d9:e9:c9:05:e1:9f:4e:71:
fc:4c:bb:0e:c0:b8:a3:aa:67:8f:4a:6e:fd:28:76:
20:54:1a:ae:e6:8a:e9:9d:9a:40:c0:39:03:bc:ba:
d2:6f:0b:ec:90:08:7e:56:be:8b:bb:3d:5b:4f:f2:
d0:90:e2:40:94:30:87:38:89:38:04:9c:e9:d1:cc:
4d:50:57:f3:19:d2:34:2c:47:1b:33:3a:36:9d:a5:
25:b0:8c:70:5d:4b:b7:56:a7:ac:f4:49:f1:2e:f8:
94:82:aa:8b:f5:14:ae:54:af:d7:fa:e4:05:ad:32:
d1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5D:45:B2:6C:B0:FD:13:CE:A3:88:D8:29:3B:BC:8E:4F:A4:6A:6D
X509v3 Authority Key Identifier:
keyid:70:FE:E1:76:F5:1C:E8:FD:81:42:4F:F7:3A:54:17:34:12:79:C0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/Ml1Fsmyw_RPOo4jYKTu8jk-kam0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.48.111.0/24
IPv6:
2a05:b100:1000::-2a05:b100:2fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1c:14:22:1d:f7:f2:6a:11:a6:85:46:af:6f:ec:29:d3:38:56:
70:d2:df:9e:3a:68:f4:36:51:a2:79:8b:7a:a4:81:b7:05:15:
6f:23:1a:b8:57:82:2d:5e:9e:cf:23:f5:17:02:9e:df:5d:39:
4c:7f:a6:07:44:f9:cb:71:2c:96:6f:9f:bc:48:af:d8:2c:91:
35:71:44:f2:e3:49:09:08:65:66:be:32:b6:5b:37:32:47:12:
e5:12:7b:d6:2a:9d:93:06:c6:83:80:cc:49:e4:8c:dd:63:d8:
84:23:ba:38:e5:d3:ae:7b:5c:65:e7:45:93:48:52:54:e8:d6:
b1:eb:99:a7:6f:6f:aa:19:13:85:24:fb:9a:68:cb:cf:9b:63:
5d:70:a0:f6:bb:25:ce:b0:85:c0:f2:43:22:2c:c2:8b:6a:a6:
ce:30:fb:09:79:ca:db:76:62:40:7b:f4:8c:5a:ed:42:32:3d:
d1:7a:c3:e1:35:73:14:e0:23:18:0e:c3:c0:16:82:80:9d:26:
1d:73:6c:c2:df:d5:e3:1a:4b:e8:9b:aa:25:61:ff:0e:3a:c8:
f2:99:96:9e:95:ab:b9:11:4b:31:f0:f3:fa:70:92:b7:ce:3c:
58:3f:a6:61:3c:28:12:b7:74:41:24:7e:9d:23:e1:31:4f:0d:
bc:0b:ac:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 12:29:55 2025 by rpki-client