Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/mPqcgtGb2yf9In758ERINrkMypo.roa
File: mPqcgtGb2yf9In758ERINrkMypo.roa (raw, json)
Hash identifier: NIdkZJadBz8qYXRNbhuo0LCb4YMZcnXeOqxZtSChOrc=
Subject key identifier: 98:FA:9C:82:D1:9B:DB:27:FD:22:7E:F9:F0:44:48:36:B9:0C:CA:9A
Certificate issuer: /CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Certificate serial: 0199C36488B07019582856C7B03BCAD95B01
Authority key identifier: 85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/mPqcgtGb2yf9In758ERINrkMypo.roa
Signing time: Wed 08 Oct 2025 10:36:09 +0000
ROA not before: Wed 08 Oct 2025 10:36:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213354
IP address blocks: 91.228.68.0/22 maxlen: 22
185.248.192.0/23 maxlen: 23
185.248.194.0/23 maxlen: 23
194.15.112.0/24 maxlen: 24
194.15.113.0/24 maxlen: 24
194.26.18.0/24 maxlen: 24
2a11:9c00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:64:88:b0:70:19:58:28:56:c7:b0:3b:ca:d9:5b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Validity
Not Before: Oct 8 10:36:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98fa9c82d19bdb27fd227ef9f0444836b90cca9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:98:be:7d:e8:e2:5e:80:e2:f3:ca:c7:50:8e:
10:ab:84:71:36:5f:8f:78:43:d0:e6:cc:b9:04:fd:
61:fc:df:f5:b7:2d:d2:a4:b5:0c:67:af:e1:f0:5b:
2a:76:f5:c4:28:27:b1:12:20:9d:c9:04:f0:f7:a6:
37:76:1e:c1:21:5b:46:a2:e3:32:67:4a:0d:da:62:
03:1e:5e:16:4c:f3:bc:d6:31:15:d9:5f:15:f2:74:
df:40:a0:83:5b:3d:8b:17:cf:1f:fa:09:b3:27:80:
86:8c:59:98:b8:f9:9e:14:ff:cd:92:af:5e:a6:ab:
b5:fa:bd:1b:df:8d:b1:c7:22:2f:b3:c1:42:9e:3e:
1c:af:75:aa:50:79:df:33:c3:0a:e0:a8:8c:48:bb:
05:f6:e5:49:b0:b6:63:d0:55:3b:1f:4c:32:fc:61:
c4:dc:f5:48:db:f1:f6:ce:c6:73:e6:5f:99:9d:8c:
0d:73:6d:4d:de:9d:e3:55:72:41:fa:f8:e5:8e:1e:
3a:fd:d7:50:cb:b8:d1:0a:84:15:63:cf:66:94:01:
d4:3f:5c:1d:77:8d:5b:ee:29:18:6b:28:fc:f9:1c:
95:4e:46:23:dd:b9:a9:75:98:5b:60:34:7a:aa:20:
d1:24:2a:20:19:3d:b4:e7:97:6d:5f:bc:30:b5:c8:
70:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FA:9C:82:D1:9B:DB:27:FD:22:7E:F9:F0:44:48:36:B9:0C:CA:9A
X509v3 Authority Key Identifier:
keyid:85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/mPqcgtGb2yf9In758ERINrkMypo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.68.0/22
185.248.192.0/22
194.15.112.0/23
194.26.18.0/24
IPv6:
2a11:9c00::/40
Signature Algorithm: sha256WithRSAEncryption
83:ed:84:3b:a7:9e:fe:69:b9:d6:75:fa:c0:07:60:52:3b:96:
ff:24:14:a0:cf:a6:9d:96:ca:bf:ec:26:02:d8:5d:a3:63:15:
42:f1:aa:4f:63:a7:7e:a9:6e:68:fa:78:6a:a0:66:c9:aa:e8:
eb:50:50:99:7c:a0:01:48:e7:4a:a2:9e:84:76:c8:38:f0:3b:
e7:39:91:19:ff:39:69:82:72:2c:7c:c8:99:f4:5d:db:34:bb:
54:bf:df:14:2a:16:dc:d4:3c:0e:82:38:f4:bb:7f:e3:cc:da:
71:c7:35:66:da:24:6e:29:3e:c1:50:b6:4e:3c:4b:fd:84:fc:
db:09:e9:57:31:bc:f3:d5:ca:f7:a3:45:62:87:77:a0:c9:7f:
8a:ba:bb:fb:c9:d7:4f:66:83:34:70:aa:1e:fd:10:03:ec:42:
ed:1b:89:a0:cf:f8:44:6e:ca:56:83:44:cd:ab:51:58:6b:79:
96:ae:2c:e3:dd:96:71:da:ba:3a:21:58:82:f3:be:b8:3b:aa:
e9:ff:47:51:b7:61:6b:dc:54:91:70:ab:2c:fd:55:20:33:1c:
98:db:3f:55:01:ad:f7:10:7e:af:07:f0:4a:03:95:eb:a2:17:
d2:a4:70:38:5d:75:28:55:f9:a6:2b:7d:58:8f:42:1c:ef:b4:
7f:28:6d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 21:23:30 2025 by rpki-client