Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/mXtTQ8-mkRh-QrXwglM1XPCYI14.roa
File: mXtTQ8-mkRh-QrXwglM1XPCYI14.roa (raw, json)
Hash identifier: RqF8DGEq8PfJ2vEZrnC5IQtavTWYGlIO1RYwKae4OS8=
Subject key identifier: 99:7B:53:43:CF:A6:91:18:7E:42:B5:F0:82:53:35:5C:F0:98:23:5E
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 01990F8936275C16152CCADD0D92521E12AB
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/mXtTQ8-mkRh-QrXwglM1XPCYI14.roa
Signing time: Wed 03 Sep 2025 12:24:34 +0000
ROA not before: Wed 03 Sep 2025 12:24:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 84.55.8.0/22 maxlen: 24
84.55.10.0/24 maxlen: 24
84.55.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 18:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0f:89:36:27:5c:16:15:2c:ca:dd:0d:92:52:1e:12:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Sep 3 12:24:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=997b5343cfa691187e42b5f08253355cf098235e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6a:4f:89:32:8b:38:cb:86:4d:db:c5:3c:ac:
04:ff:7d:ac:cb:0e:a4:30:ca:f1:af:13:cb:a1:93:
ed:c3:bf:0d:e8:38:78:e6:eb:fa:a4:da:c4:2f:14:
04:0d:06:ec:4b:cc:80:a0:e7:db:03:28:39:6f:0b:
96:29:b7:8d:d8:c5:ac:29:70:c1:3c:08:6e:c3:4b:
50:e6:01:0a:19:67:76:25:47:3b:bf:f2:95:21:6a:
33:e7:69:96:55:00:ed:6d:65:c5:13:9a:c4:75:79:
c8:b7:d9:5f:7a:4f:1a:79:f5:fd:d3:c9:77:67:10:
9b:c3:82:9d:6e:fe:0a:80:bb:9b:5c:24:8e:43:1f:
6c:7b:e1:38:fe:f8:19:da:b9:18:20:ea:f9:42:32:
ff:3d:e9:f5:5f:8c:1e:8e:a8:f7:c9:66:4e:81:cb:
18:48:da:b7:91:9e:ee:46:44:2c:b1:55:51:c7:1c:
de:a8:5f:18:7f:a6:4e:be:7c:00:43:c4:f1:aa:94:
a9:3a:22:fb:8d:77:ef:26:00:be:6b:5b:c2:6b:08:
f2:a5:09:40:a5:44:41:48:8b:f2:d4:ac:f2:de:ff:
4c:dd:ea:26:52:2e:e3:9e:44:c6:a4:e0:fd:7b:5f:
d2:e2:4f:7e:4c:e8:76:de:2b:12:fa:25:a7:c0:fa:
4a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7B:53:43:CF:A6:91:18:7E:42:B5:F0:82:53:35:5C:F0:98:23:5E
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/mXtTQ8-mkRh-QrXwglM1XPCYI14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.8.0/22
84.55.14.0/24
Signature Algorithm: sha256WithRSAEncryption
82:18:8c:71:8f:1d:ab:49:13:33:42:b1:12:b1:4e:18:a4:a5:
97:42:05:4f:06:30:20:ed:91:2b:82:94:59:7a:c0:91:5a:6d:
8f:c7:11:58:18:28:6d:5a:ad:f3:c6:84:96:cd:de:c3:8a:09:
60:7d:bc:37:14:a6:e6:51:8e:3f:eb:c3:4b:5b:3e:eb:24:de:
d0:1b:c0:ef:fe:9c:7e:f3:eb:70:3d:44:6d:f6:74:0c:90:94:
94:fa:db:4b:99:f1:b0:ac:e1:45:7d:b4:5f:e5:b0:f3:1e:02:
85:b5:c1:83:9f:52:5c:c9:97:c6:86:2d:54:42:ce:51:28:76:
6c:7f:62:e1:58:6b:0e:23:39:96:d5:8f:61:62:96:10:3c:ae:
97:30:a5:e8:09:d6:6d:1e:a1:c7:de:77:fb:5a:e0:00:aa:bf:
42:de:25:02:59:c1:f3:dd:2d:69:64:24:92:72:49:0e:3a:86:
17:a1:ee:e3:37:80:d4:52:c2:92:5e:08:cc:c2:1d:cc:c1:33:
ea:fd:a7:97:2f:db:72:fa:d2:ba:9e:9c:c8:f7:61:83:7d:f9:
db:ed:85:73:04:68:ae:3f:8f:13:31:d0:7a:08:84:6d:97:a9:
94:20:1b:28:b6:ca:9e:79:9e:10:6f:ac:de:9a:12:2b:97:c5:
56:c6:ce:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 00:34:21 2025 by rpki-client