Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/MmyoU1d_eJFX-H2KqTWCxTyqZUE.roa
File: MmyoU1d_eJFX-H2KqTWCxTyqZUE.roa (raw, json)
Hash identifier: /aUQyxA9FWTgcGNqSYNdeE3E1fPdCRKRLlgB9Wz8/1o=
Subject key identifier: 32:6C:A8:53:57:7F:78:91:57:F8:7D:8A:A9:35:82:C5:3C:AA:65:41
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0196F3D39DD67661CC4577672541AD9E9F68
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/MmyoU1d_eJFX-H2KqTWCxTyqZUE.roa
Signing time: Wed 21 May 2025 17:10:54 +0000
ROA not before: Wed 21 May 2025 17:10:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215287
IP address blocks: 185.214.108.0/24 maxlen: 24
193.8.112.0/24 maxlen: 24
194.5.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f3:d3:9d:d6:76:61:cc:45:77:67:25:41:ad:9e:9f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: May 21 17:10:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=326ca853577f789157f87d8aa93582c53caa6541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:75:c8:76:3b:3a:8b:6d:55:b7:d0:5d:58:7d:
09:7c:31:4d:2d:4d:85:4b:4d:bb:df:97:94:87:d0:
d3:d1:c9:ba:39:64:7e:c5:34:98:a9:9d:1d:ba:88:
57:40:4e:3e:d0:60:00:b3:11:26:33:a8:de:7a:d6:
03:b0:4a:b5:7e:47:37:a0:a7:06:c3:e7:e3:2c:51:
f6:93:60:ce:77:d3:83:e0:e2:dc:da:0a:bd:4c:62:
6f:b0:e4:32:b4:fd:b2:9d:e9:b8:17:31:c5:f4:32:
10:30:f7:fa:58:85:52:74:73:97:63:30:f7:e3:b7:
98:8a:a1:f6:14:8e:94:04:e5:a3:0b:6e:24:73:48:
7a:23:b4:bb:0f:90:10:8d:3c:07:eb:62:2e:59:0a:
b1:9e:e7:b4:11:16:3d:20:9a:ed:0d:1b:ef:db:c8:
bd:95:c9:63:00:fc:45:f4:b2:77:ba:6b:7d:5a:2e:
a6:90:bb:f8:f3:df:1d:01:80:cf:de:06:d7:a1:3d:
6c:fb:25:3e:2b:cb:c9:7c:67:00:ce:67:c7:41:87:
c6:42:f0:c0:27:b1:d2:12:51:18:6c:50:f0:d3:66:
36:3d:d1:95:42:00:80:ed:c2:b3:24:af:b5:aa:1e:
c7:c2:01:69:88:bb:3c:ce:aa:1f:f3:ad:19:6a:60:
e5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6C:A8:53:57:7F:78:91:57:F8:7D:8A:A9:35:82:C5:3C:AA:65:41
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/MmyoU1d_eJFX-H2KqTWCxTyqZUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.108.0/24
193.8.112.0/24
194.5.64.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:46:77:54:8c:6f:ec:37:a0:f6:e4:c6:f0:60:2c:75:79:1d:
ce:d1:c3:db:20:30:c3:34:18:e5:c0:83:47:a4:4f:c3:94:c4:
72:0c:d5:94:df:22:7b:63:72:53:42:7f:c9:64:d0:4e:af:33:
e3:36:9e:af:26:1d:c0:cb:c8:e5:80:56:2e:3c:13:d8:d2:35:
15:af:e6:d3:73:e6:09:74:45:75:9d:5d:e4:8a:f0:cf:d9:22:
74:f1:9c:3a:32:df:87:c7:4a:11:af:a8:25:c7:c2:be:dc:58:
6e:0a:c3:e8:68:01:ec:f9:57:ec:c3:86:9d:ec:cd:5b:9e:4a:
4b:c0:43:14:02:aa:3e:5e:93:54:84:02:dc:51:e7:e6:93:4d:
31:21:f5:4a:2c:cc:13:34:40:0a:0d:49:c5:6f:4d:f2:02:a5:
46:20:d6:4a:14:05:05:fb:8f:84:50:2e:cc:bb:6b:63:ce:9a:
99:69:03:3f:b0:97:b7:a4:04:a6:ef:c0:66:46:62:31:da:2c:
d1:ba:d8:ca:4e:bf:67:ae:42:2c:8f:2d:0f:da:0f:28:25:32:
d6:e1:31:af:72:b3:c8:a5:c5:15:3d:14:51:70:af:cc:90:a7:
8d:98:fb:3f:c2:94:db:60:1c:31:6a:71:5d:11:5c:47:c6:03:
30:2f:f5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 05:25:27 2025 by rpki-client