Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/MmkRluHTTNv9acWxYHJ3_GpMc5Q.roa
File: MmkRluHTTNv9acWxYHJ3_GpMc5Q.roa (raw, json)
Hash identifier: V0Un6MJpun4HqmbH7gvdiyIo+DrhsdEBvML0fOcMAjk=
Subject key identifier: 32:69:11:96:E1:D3:4C:DB:FD:69:C5:B1:60:72:77:FC:6A:4C:73:94
Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Certificate serial: 019884BD71C1B43C4AC275B14EBEC0B55BD0
Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/MmkRluHTTNv9acWxYHJ3_GpMc5Q.roa
Signing time: Thu 07 Aug 2025 13:34:24 +0000
ROA not before: Thu 07 Aug 2025 13:34:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3257
IP address blocks: 146.19.50.0/24 maxlen: 24
185.214.166.0/24 maxlen: 24
185.253.3.0/24 maxlen: 24
194.26.218.0/24 maxlen: 24
213.134.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 07:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:bd:71:c1:b4:3c:4a:c2:75:b1:4e:be:c0:b5:5b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Validity
Not Before: Aug 7 13:34:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32691196e1d34cdbfd69c5b1607277fc6a4c7394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a4:73:7f:39:e7:76:e8:b0:de:6c:83:53:d7:
89:28:17:eb:46:0d:35:4c:67:fe:9c:5e:7f:d1:e8:
10:60:70:71:22:18:22:6e:d5:4d:f8:ea:88:9b:06:
f4:c8:e9:a6:42:9a:c8:86:73:63:2f:4b:67:fd:0c:
15:b9:10:17:e1:47:e3:99:7c:75:52:c9:42:cc:66:
bb:d3:ed:8b:80:c8:dd:6f:93:6b:dd:2e:bf:1a:26:
85:20:67:80:08:35:18:e6:eb:8f:d9:81:21:fb:79:
75:73:0c:b8:8e:2f:92:99:71:15:36:bc:33:ce:06:
49:dd:0c:d9:cb:0a:ff:29:d6:2c:b8:c8:52:54:43:
6b:e5:66:ce:5a:52:8d:81:9c:5a:99:a9:55:21:7b:
cc:48:4e:ca:41:0a:aa:a3:29:11:dd:ca:d6:af:22:
7c:64:16:7b:f3:2d:f7:ae:f1:8e:d5:2d:ba:54:11:
af:d6:65:cf:8e:8d:fc:f4:8c:33:9f:c6:ab:91:cf:
32:86:51:d5:6f:ea:16:49:ad:c9:24:49:28:70:52:
d2:6d:8c:33:8e:f0:a7:2a:ad:9d:3b:8c:02:1c:ee:
00:e2:90:10:cf:55:b2:c4:95:6a:6d:de:af:c6:c1:
cf:2c:6a:d7:6d:35:6a:32:3c:2e:fc:25:2d:6c:47:
49:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:69:11:96:E1:D3:4C:DB:FD:69:C5:B1:60:72:77:FC:6A:4C:73:94
X509v3 Authority Key Identifier:
keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/MmkRluHTTNv9acWxYHJ3_GpMc5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.50.0/24
185.214.166.0/24
185.253.3.0/24
194.26.218.0/24
213.134.25.0/24
Signature Algorithm: sha256WithRSAEncryption
af:6c:ce:01:1a:15:53:9b:48:1c:e1:a6:ed:1a:28:cd:bb:b7:
ae:41:3c:a2:6f:f5:1e:7a:de:99:67:bb:f3:57:a6:2d:7b:ec:
5e:f9:5a:86:28:ab:72:93:59:82:53:f7:97:be:2c:af:b8:49:
91:67:6b:99:1c:c8:4c:4c:ca:16:4c:ac:92:fc:fa:7f:f1:ea:
ab:8e:14:79:31:07:8d:26:36:73:3f:2e:86:3f:f5:0b:ef:13:
df:00:ad:92:b7:c7:07:25:ed:05:c6:d4:28:18:13:68:0f:21:
ea:e3:6c:f4:dd:b8:cb:fb:8c:63:0a:22:5c:2a:cb:a1:35:1e:
37:20:e4:fb:b4:d7:17:38:ca:5f:de:32:1a:9d:5e:c5:cf:ba:
40:3f:86:f3:08:23:0c:e1:cf:05:ce:4f:9b:bf:02:b6:cf:ec:
c1:0e:dc:a7:d5:2c:8c:1f:5f:0c:3c:c5:96:3c:34:31:89:4a:
9e:b2:8c:40:d1:ca:bf:3b:96:27:1c:d8:0e:4f:48:98:01:e5:
f7:25:66:a2:11:41:d9:da:b2:9f:fb:5a:06:ce:95:8d:16:31:
35:aa:06:50:ab:0c:3d:de:83:6a:fd:7e:84:22:e8:a6:56:1e:
06:84:13:39:39:4a:7c:ed:0d:7f:2b:bf:3a:cc:32:c2:b9:2f:
fa:7e:35:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:46:05 2025 by rpki-client