Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/Mu6ijmc_aqBJxzKj_gk2CINhTJY.roa
File: Mu6ijmc_aqBJxzKj_gk2CINhTJY.roa (raw, json)
Hash identifier: 0UkVNBd7l+wwHGDngk+/nfAM3QJ5XIIOAEADr4vxqyU=
Subject key identifier: 32:EE:A2:8E:67:3F:6A:A0:49:C7:32:A3:FE:09:36:08:83:61:4C:96
Certificate issuer: /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Certificate serial: 0198E2547CD4B910EFAD8DECFC6EB415FEEF
Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/Mu6ijmc_aqBJxzKj_gk2CINhTJY.roa
Signing time: Mon 25 Aug 2025 17:44:04 +0000
ROA not before: Mon 25 Aug 2025 17:44:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 85.203.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e2:54:7c:d4:b9:10:ef:ad:8d:ec:fc:6e:b4:15:fe:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Validity
Not Before: Aug 25 17:44:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32eea28e673f6aa049c732a3fe09360883614c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1d:c6:51:9e:84:7a:4a:de:43:68:cc:04:8f:
01:b0:f5:74:dc:53:0d:e6:1c:11:69:e4:b4:8b:ee:
f0:ca:37:5c:c7:5b:9d:0b:e2:9c:78:6b:2a:e7:9e:
8b:6d:a6:54:4c:b8:cc:7e:66:91:55:39:cc:e0:ba:
ed:89:ff:5d:d6:88:17:7b:5b:fd:a9:a1:67:fd:99:
02:e6:41:90:79:c9:64:a5:96:dc:b0:fc:f8:cb:ba:
e6:59:b3:a8:60:be:88:34:0d:d3:59:29:6d:5b:7b:
3e:28:92:58:97:3f:cd:4f:58:6a:6e:2a:0b:54:ca:
7e:ba:68:f0:8e:db:a5:74:ef:c9:ef:f9:cf:9a:ca:
5e:b1:a5:03:32:7a:e5:72:a2:63:31:e8:7f:c2:48:
08:1c:ca:ba:08:a4:54:f1:ec:55:1d:d4:3a:57:c5:
1b:76:20:e2:5e:89:ed:d9:b6:b8:3e:20:d1:8e:fc:
62:37:7b:0d:22:8e:5f:f9:75:94:51:48:12:b0:0e:
26:ce:3d:db:d0:09:48:ac:8a:04:87:79:e1:d6:7e:
53:2f:6b:69:23:f4:a2:06:0b:5b:61:24:15:ed:8a:
47:a2:6d:fd:5a:4c:9d:18:c5:7e:c6:65:19:1d:cd:
6f:1e:dd:9a:2d:ec:4c:09:4f:e5:c4:c2:8a:e7:a8:
70:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EE:A2:8E:67:3F:6A:A0:49:C7:32:A3:FE:09:36:08:83:61:4C:96
X509v3 Authority Key Identifier:
keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/Mu6ijmc_aqBJxzKj_gk2CINhTJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.27.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:f9:9b:05:5d:dd:86:28:00:c3:73:b7:4c:bf:0f:24:b3:76:
98:9f:5f:f0:f0:a6:81:b3:35:64:7f:11:83:5e:f9:ff:24:02:
92:5f:d3:db:2b:ec:36:c3:04:e6:fa:51:a7:16:da:f9:80:3d:
c0:89:20:c1:f7:56:8f:90:70:fc:b1:42:10:1f:51:91:51:5e:
6a:09:11:4b:ab:42:e5:95:b4:9d:7d:23:30:5c:69:83:f4:6e:
bb:c0:07:0f:5f:1c:98:bf:20:72:ea:52:96:59:66:1a:6e:b8:
83:b7:b2:69:9c:18:05:1c:51:6e:23:65:ad:b1:18:2c:f3:86:
1f:06:8d:db:d5:f3:59:36:8a:4e:b5:b6:9e:de:68:56:07:6f:
ea:25:d3:5d:fb:90:23:d1:27:40:2b:cc:3d:1a:62:72:c0:36:
b8:fb:58:e6:4a:4d:9d:f8:dc:b0:2d:13:82:98:d0:b3:55:5d:
b6:a2:aa:7c:54:03:be:4e:f9:1c:f2:de:df:39:a0:9f:d0:5a:
6e:f4:1b:31:52:7d:43:46:ad:c1:8c:d7:77:a0:49:7f:4d:28:
ba:b4:a5:74:a9:2f:c0:e3:6a:87:5f:9a:13:bf:b5:da:0e:39:
7a:f5:8f:25:4c:a0:a8:4e:f6:cd:9c:da:f3:1e:79:67:07:df:
03:a5:08:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 07:32:31 2025 by rpki-client