Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/m1nXhaF-D_WcU0JXN1FLM9GEIUc.roa
File: m1nXhaF-D_WcU0JXN1FLM9GEIUc.roa (raw, json)
Hash identifier: ybdzKUdVwWUYP9WPsrEmoZSSbzTWuphzg1xrntp1nbU=
Subject key identifier: 9B:59:D7:85:A1:7E:0F:F5:9C:53:42:57:37:51:4B:33:D1:84:21:47
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019901B5CF85B8D2AF48116C8570592B4F44
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/m1nXhaF-D_WcU0JXN1FLM9GEIUc.roa
Signing time: Sun 31 Aug 2025 19:58:36 +0000
ROA not before: Sun 31 Aug 2025 19:58:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213877
IP address blocks: 64.188.73.0/24 maxlen: 24
64.188.75.0/24 maxlen: 24
64.188.92.0/22 maxlen: 24
64.188.96.0/24 maxlen: 24
64.188.97.0/24 maxlen: 24
64.188.124.0/24 maxlen: 24
64.188.125.0/24 maxlen: 24
64.188.126.0/24 maxlen: 24
77.239.104.0/24 maxlen: 24
77.239.105.0/24 maxlen: 24
77.239.122.0/24 maxlen: 24
77.239.123.0/24 maxlen: 24
144.31.192.0/23 maxlen: 24
150.241.105.0/24 maxlen: 24
150.241.108.0/24 maxlen: 24
150.241.123.0/24 maxlen: 24
185.184.122.0/24 maxlen: 24
185.184.123.0/24 maxlen: 24
185.207.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 17:17:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:01:b5:cf:85:b8:d2:af:48:11:6c:85:70:59:2b:4f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 31 19:58:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b59d785a17e0ff59c53425737514b33d1842147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:43:c6:0c:08:79:ea:1d:bd:16:57:15:ef:60:
44:e3:d5:2d:dd:50:6e:3d:ae:b9:ac:af:13:09:07:
9d:a4:35:8b:14:c7:0c:75:e1:1f:21:72:3d:de:e4:
81:e2:43:ee:53:a0:5e:48:8d:49:d6:ea:ae:92:ad:
c1:5f:00:70:21:7a:9a:7a:17:64:f2:a4:d2:78:3a:
88:66:61:b8:f5:a4:b2:79:00:31:a1:66:db:06:f4:
6b:af:ee:53:4a:9e:93:36:74:78:9d:06:f9:a0:2b:
6d:ec:19:91:87:74:b7:62:1d:32:13:62:52:a4:51:
49:26:15:fa:d9:fb:88:5b:f0:84:99:7e:b7:bf:4f:
23:99:fb:98:44:83:04:a6:9c:91:01:53:cb:dc:da:
8c:d1:bb:85:a2:39:9a:fe:57:3b:5a:1e:c7:a3:02:
3d:17:a3:25:b7:97:87:1e:95:7e:22:6f:0f:e3:22:
00:78:a9:d7:00:7b:61:fe:b5:2d:77:f3:71:51:8e:
3c:bb:5e:34:9e:45:63:c8:b2:2a:61:30:87:87:87:
2e:3a:8a:e1:72:44:98:82:58:85:57:b6:59:56:5b:
c3:95:35:aa:93:fd:59:2a:f7:97:46:bf:5c:4e:37:
e9:05:1b:09:64:b0:48:bb:6f:3a:fa:0a:4c:67:ec:
92:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:59:D7:85:A1:7E:0F:F5:9C:53:42:57:37:51:4B:33:D1:84:21:47
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/m1nXhaF-D_WcU0JXN1FLM9GEIUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.188.73.0/24
64.188.75.0/24
64.188.92.0-64.188.97.255
64.188.124.0-64.188.126.255
77.239.104.0/23
77.239.122.0/23
144.31.192.0/23
150.241.105.0/24
150.241.108.0/24
150.241.123.0/24
185.184.122.0/23
185.207.133.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:0d:d8:7c:6b:2a:62:12:73:fc:02:ed:ab:47:7c:e3:f8:7b:
6b:c6:9c:99:db:90:dd:c5:b8:b1:39:2f:07:9a:a8:ba:e7:e8:
98:e1:44:3a:0c:a2:97:8c:7f:be:a5:e0:a5:89:6d:bf:24:eb:
59:7d:b9:cb:7e:a9:c7:c9:c9:c9:0f:3b:2c:53:20:22:06:e6:
8d:3b:1c:0a:6f:8e:b4:8f:6b:42:32:6a:8c:a6:63:cc:27:c7:
fb:ca:f1:bd:0e:d3:51:78:f6:7e:e8:59:b4:1b:a6:27:77:ea:
39:d0:51:46:b5:4a:3d:73:30:34:20:a5:23:61:08:58:83:75:
fa:d9:3e:8d:9b:a2:cd:54:43:c4:64:73:d5:37:b2:63:a9:60:
42:bb:e6:b9:30:fa:a3:39:e6:40:47:ff:b9:96:48:b4:a7:7d:
d7:73:f7:1d:1a:a1:32:5c:55:5e:53:72:ff:b6:9f:ad:49:0b:
21:f4:2a:b1:04:7d:ec:a6:93:93:4c:7b:28:a5:3c:a4:0c:9a:
c8:fc:48:93:d2:a7:28:cf:b0:69:e2:42:e8:22:30:9b:4d:14:
9d:aa:55:f4:cf:14:d8:21:45:7f:b0:6f:6f:62:4a:42:67:f4:
1f:01:cb:fd:9b:c2:54:d2:82:82:24:44:27:ef:e6:b2:32:f8:
57:20:9c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 21:58:06 2025 by rpki-client