Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mRpyMgwszkP4K1jeUuHQa5rOm5Q.roa
File: mRpyMgwszkP4K1jeUuHQa5rOm5Q.roa (raw, json)
Hash identifier: cYRW4xnc/j+yUDNvoHEU9sdbR3hM2xKcsz6vC1tw/hY=
Subject key identifier: 99:1A:72:32:0C:2C:CE:43:F8:2B:58:DE:52:E1:D0:6B:9A:CE:9B:94
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019957466B8F2FD77DF748A2476C2C2C3C5B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mRpyMgwszkP4K1jeUuHQa5rOm5Q.roa
Signing time: Wed 17 Sep 2025 10:44:16 +0000
ROA not before: Wed 17 Sep 2025 10:44:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200088
IP address blocks: 37.202.211.0/24 maxlen: 24
37.202.216.0/24 maxlen: 24
151.245.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 20:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:57:46:6b:8f:2f:d7:7d:f7:48:a2:47:6c:2c:2c:3c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 17 10:44:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=991a72320c2cce43f82b58de52e1d06b9ace9b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:98:17:3c:55:51:ed:38:d4:9a:f7:7c:2a:11:
3b:10:39:1d:41:52:99:3c:87:ee:07:fc:b1:fb:2e:
a3:0f:ee:2a:52:fb:8c:5d:a7:e6:66:d1:5b:d0:09:
4c:76:da:01:20:0e:94:62:88:16:37:c9:9c:1f:05:
9b:25:fa:b2:13:dc:a5:fe:e3:40:3f:cb:e7:88:6f:
10:aa:98:0f:15:00:8c:fa:8e:20:a4:4f:e9:6e:13:
92:ad:c9:9b:76:11:7b:08:57:af:42:44:80:ac:64:
56:ba:09:bc:55:31:4c:4d:18:d8:5c:be:f9:6a:fd:
69:74:1e:26:52:00:1a:99:96:9f:d1:34:7e:9a:e3:
e2:a3:6d:77:02:8c:c2:c2:04:24:34:10:78:04:e9:
18:f5:71:13:51:b7:a6:c4:4f:85:2e:ac:ea:8c:ba:
53:26:4c:dc:e3:76:77:38:59:1d:1d:ac:48:50:87:
35:84:a4:9d:2d:4d:b2:a5:7d:fb:4d:7f:b7:06:37:
eb:e3:13:ce:f7:d4:9a:6a:57:d9:e7:5b:77:ab:93:
1f:e7:89:9e:3b:0c:8f:27:bc:f9:57:5a:62:33:24:
bc:0b:53:52:52:77:6e:4d:72:a1:4c:38:3e:c7:cb:
85:28:42:3e:24:b1:5c:12:15:55:1b:f9:1a:ac:18:
90:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:1A:72:32:0C:2C:CE:43:F8:2B:58:DE:52:E1:D0:6B:9A:CE:9B:94
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mRpyMgwszkP4K1jeUuHQa5rOm5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.211.0/24
37.202.216.0/24
151.245.112.0/24
Signature Algorithm: sha256WithRSAEncryption
10:7c:8f:71:37:10:89:87:4c:33:ee:0d:ac:8a:55:9c:77:04:
72:98:83:eb:ca:0c:3b:98:04:8c:b4:ff:87:1c:b8:9f:28:b7:
84:20:f8:63:d6:d8:6c:26:0c:06:a1:21:28:f9:e3:75:83:e1:
d2:ef:e8:c8:ae:63:5f:d2:ff:8e:37:61:25:3c:e8:f1:b6:86:
ae:fa:8d:73:d7:6c:4f:a7:2c:95:c1:14:64:4a:37:70:7c:c9:
ab:28:ef:58:ce:22:e7:11:49:32:22:99:9d:ca:47:da:02:55:
48:55:16:e2:12:e9:32:85:c8:8c:87:53:cc:bb:90:6e:48:e2:
10:86:5c:b7:fd:20:4c:bc:09:8b:65:e0:26:a9:a0:02:5a:09:
de:e9:6b:24:bc:48:cb:b4:18:1c:e6:5e:ec:91:ab:65:dc:cf:
8c:d4:11:bb:cd:8f:68:1a:cc:e0:09:f3:71:eb:7c:cb:31:fc:
4c:f5:2a:3b:ba:1c:90:73:b3:66:91:9d:f6:a2:f6:60:3b:f3:
88:56:4a:54:b0:47:99:a3:e5:8d:d2:f1:22:a8:86:bb:6b:0d:
05:86:07:b2:d5:5c:62:5c:9e:e9:48:f4:2b:41:8b:71:a8:bf:
1a:da:79:e0:ef:ec:c6:6f:5b:b6:63:57:f9:04:10:02:fe:90:
0b:f0:02:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 03:01:38 2025 by rpki-client