Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/mu7b1tGZ3fBLWT4iPiraLyQmVpw.roa
File: mu7b1tGZ3fBLWT4iPiraLyQmVpw.roa (raw, json)
Hash identifier: Ly2x9jR74YwOV4U+ROUU4l7SCpCPjv3zvv96qJ1in/E=
Subject key identifier: 9A:EE:DB:D6:D1:99:DD:F0:4B:59:3E:22:3E:2A:DA:2F:24:26:56:9C
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 0196DFCA2B64317D9114DA4EEA781A0E77EF
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/mu7b1tGZ3fBLWT4iPiraLyQmVpw.roa
Signing time: Sat 17 May 2025 19:48:10 +0000
ROA not before: Sat 17 May 2025 19:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201426
IP address blocks: 195.184.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:df:ca:2b:64:31:7d:91:14:da:4e:ea:78:1a:0e:77:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: May 17 19:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9aeedbd6d199ddf04b593e223e2ada2f2426569c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8e:83:5e:15:b7:9f:ac:a4:48:a1:2b:c3:be:
0a:fe:7a:ca:aa:b4:bb:2d:83:30:6e:61:6b:32:17:
4d:d1:f4:e9:45:36:54:fc:c6:ca:21:aa:16:20:00:
3c:9b:e1:d9:07:a3:39:cd:83:1a:c0:bd:77:36:66:
c3:5a:4e:d1:30:21:ec:d3:e5:57:db:67:ea:e4:d9:
0d:a9:2d:60:11:1b:43:2c:54:9c:46:8f:f1:3e:e1:
6b:29:01:8f:db:4f:ee:5a:6e:21:48:4d:42:e7:72:
95:96:48:06:41:41:96:95:63:41:0c:87:9c:f6:90:
5c:2e:e3:35:f6:33:d1:54:e8:eb:2f:81:f5:4d:a3:
4f:33:08:d4:9e:7c:2f:12:b8:c9:d0:69:94:6f:b6:
a2:3e:b9:49:ee:4f:56:03:1c:33:9f:38:97:cc:e2:
92:bb:93:48:a6:d7:f7:3c:58:17:15:57:32:76:8a:
cf:9a:68:40:ae:7c:77:c4:a5:f4:3b:53:fa:79:52:
79:eb:02:b5:7a:2b:49:bd:a2:2c:ff:25:8e:d9:e8:
fd:39:6a:39:e2:83:56:14:c9:15:0c:f2:35:d7:f9:
a2:6b:24:b7:11:bd:0a:70:bb:ec:a0:46:7f:fe:f6:
91:5a:34:0e:53:b2:ef:b1:ae:f9:7f:5b:99:76:4c:
fc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:EE:DB:D6:D1:99:DD:F0:4B:59:3E:22:3E:2A:DA:2F:24:26:56:9C
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/mu7b1tGZ3fBLWT4iPiraLyQmVpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.184.73.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:c3:95:5a:4f:a6:23:d4:84:64:eb:cd:1d:ad:9b:ed:6a:50:
37:b0:b2:85:01:1e:8d:a0:71:81:52:c2:b1:c5:d8:c6:fd:aa:
73:dc:b6:b2:8d:db:b1:4c:51:3d:96:af:ce:87:57:15:a8:7c:
b3:f2:2e:e6:77:f5:95:2a:a8:1a:3e:ff:9a:cb:39:43:76:79:
2f:1d:6a:9a:25:f7:45:a9:e0:df:2d:e0:30:8d:70:ff:e7:f3:
28:b2:90:4a:60:92:66:0c:90:63:df:25:ee:98:42:27:ca:0f:
86:79:7d:ea:20:b0:62:ab:44:30:8d:de:e8:4c:19:12:fe:87:
d8:50:d8:4c:45:5d:30:16:30:f8:70:37:5f:fd:96:8e:d9:d5:
26:d8:6b:95:62:a0:42:e2:ea:51:48:6e:7e:3f:74:91:15:ec:
cc:9b:d6:a9:5b:4b:5a:0b:ee:e1:b5:93:41:af:15:ea:d6:31:
12:bd:fc:cc:2c:d3:de:8b:b0:42:f5:4c:a3:48:2d:e8:b5:cc:
99:a1:b5:b4:ae:33:00:e5:a5:00:11:5c:6d:ad:b3:40:d6:ca:
ed:d1:94:97:fa:66:5f:1a:4e:84:b7:99:51:77:0b:63:bc:5e:
03:3b:2b:2c:fa:18:eb:fa:18:62:93:9a:04:54:25:5c:a9:65:
b4:34:53:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:21:28 2025 by rpki-client