Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/Mf6GlvDr1wtErqygpxcN1e84hQ4.roa
File: Mf6GlvDr1wtErqygpxcN1e84hQ4.roa (raw, json)
Hash identifier: 2vPwmsC/kiv4red8VFVlLeqdkWqxZeneNgYRryPL36I=
Subject key identifier: 31:FE:86:96:F0:EB:D7:0B:44:AE:AC:A0:A7:17:0D:D5:EF:38:85:0E
Certificate issuer: /CN=256452a3420f4f18dfa3a14d26b3348fdfcf3d3b
Certificate serial: 019A111AD7E1EB36608326B329A8B420C649
Authority key identifier: 25:64:52:A3:42:0F:4F:18:DF:A3:A1:4D:26:B3:34:8F:DF:CF:3D:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/Mf6GlvDr1wtErqygpxcN1e84hQ4.roa
Signing time: Thu 23 Oct 2025 12:46:03 +0000
ROA not before: Thu 23 Oct 2025 12:46:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201290
IP address blocks: 193.24.38.0/24 maxlen: 24
193.24.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 06:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:11:1a:d7:e1:eb:36:60:83:26:b3:29:a8:b4:20:c6:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=256452a3420f4f18dfa3a14d26b3348fdfcf3d3b
Validity
Not Before: Oct 23 12:46:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31fe8696f0ebd70b44aeaca0a7170dd5ef38850e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:db:49:25:ed:37:02:70:d4:c8:3a:87:1c:a9:
bb:cc:35:34:11:f0:7f:05:2f:71:d2:04:75:95:7d:
2f:97:c7:1f:d5:a1:e9:13:95:23:dd:95:19:e8:33:
99:42:2b:98:da:fa:20:64:88:ba:7f:02:3a:d7:be:
67:d3:dc:08:81:99:17:4d:97:6f:40:b9:e1:4b:5a:
12:30:7a:97:1c:0c:96:62:ac:3d:6e:a0:2f:af:76:
aa:fc:91:71:bf:31:f0:71:ea:82:12:44:62:b4:4b:
61:62:6f:83:e6:c6:88:be:25:22:bd:12:1f:80:93:
d6:90:ad:52:3c:76:80:41:54:5f:97:6e:79:3b:32:
5c:04:24:6a:64:41:cc:3d:a8:59:b2:ba:f2:2c:56:
41:48:5f:95:f2:7f:cd:39:fb:6b:b1:03:ae:6e:bb:
1a:b6:c9:ff:7d:6c:a8:4e:6a:5c:d8:d6:e7:6f:75:
be:2e:86:49:fe:7b:6f:2b:ec:ef:f4:2f:65:af:1c:
b3:29:c6:69:84:56:7a:ae:7c:a4:ad:4c:2c:21:6a:
ac:b1:27:95:35:c8:ef:cc:68:19:3d:6c:25:2a:b3:
86:bb:4e:1d:4f:e3:ec:92:73:f5:19:76:31:21:40:
fb:27:4c:6b:2e:43:fc:41:54:27:a3:19:8e:d1:d8:
ae:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FE:86:96:F0:EB:D7:0B:44:AE:AC:A0:A7:17:0D:D5:EF:38:85:0E
X509v3 Authority Key Identifier:
keyid:25:64:52:A3:42:0F:4F:18:DF:A3:A1:4D:26:B3:34:8F:DF:CF:3D:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/Mf6GlvDr1wtErqygpxcN1e84hQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.38.0/23
Signature Algorithm: sha256WithRSAEncryption
45:fc:f3:d8:5d:a1:dd:c5:82:8b:35:3b:61:fd:a5:9d:4c:64:
c1:68:0e:34:5a:17:85:49:36:2d:ab:8b:96:db:ac:47:dd:95:
e6:a4:59:74:a9:df:a9:49:92:c9:51:5a:29:75:d0:77:60:fe:
94:d9:78:72:4a:75:9b:1b:d7:72:b9:51:a2:c5:a1:35:77:90:
01:63:3c:69:61:bc:18:42:72:e4:6f:22:45:63:25:67:52:08:
0e:19:c8:60:61:32:65:d4:67:b0:03:8c:e2:b0:7e:f1:e5:20:
83:73:31:89:7a:95:67:fc:70:6c:8f:dc:c0:42:f7:61:3f:7b:
16:9a:fa:cc:46:5c:38:b9:34:91:37:b4:00:87:48:d4:fc:5f:
bf:a0:49:5a:9c:a9:7e:e8:64:04:f1:88:2f:2e:b3:1d:b3:7b:
e6:41:6e:ed:28:91:1c:1a:36:9c:62:42:49:37:f7:fb:e1:ba:
66:b4:8e:20:07:98:ed:cf:81:4c:45:3b:2b:94:33:da:2f:bf:
fe:8c:c7:56:b7:b4:39:cb:79:00:19:f3:c1:b9:2a:28:a1:e6:
b5:4b:63:f1:72:17:84:23:1a:20:9f:3c:38:91:d0:cf:6b:be:
48:2c:79:75:dd:ae:0b:a0:e3:9a:8b:bc:f5:8c:4a:fd:1c:c3:
a5:a2:95:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:12:56 2025 by rpki-client