Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/mOMaktyaCkMxZ5MZJip9rZKzZTo.roa
File: mOMaktyaCkMxZ5MZJip9rZKzZTo.roa (raw, json)
Hash identifier: 6nwLbfgbvPLxcE59s58vm7SzOxg6/OXQsbiUHhiUMSY=
Subject key identifier: 98:E3:1A:92:DC:9A:0A:43:31:67:93:19:26:2A:7D:AD:92:B3:65:3A
Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial: 0196CE13BF80C2CB14069BB77C4FEC083F1A
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/mOMaktyaCkMxZ5MZJip9rZKzZTo.roa
Signing time: Wed 14 May 2025 09:15:22 +0000
ROA not before: Wed 14 May 2025 09:15:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 84.239.5.0/24 maxlen: 24
84.239.6.0/24 maxlen: 24
84.239.7.0/24 maxlen: 24
84.239.10.0/24 maxlen: 24
84.239.12.0/24 maxlen: 24
84.239.16.0/24 maxlen: 24
84.239.17.0/24 maxlen: 24
84.239.25.0/24 maxlen: 24
84.239.27.0/24 maxlen: 24
84.239.28.0/24 maxlen: 24
84.239.31.0/24 maxlen: 24
84.239.33.0/24 maxlen: 24
84.239.37.0/24 maxlen: 24
84.239.41.0/24 maxlen: 24
84.239.42.0/24 maxlen: 24
84.239.43.0/24 maxlen: 24
84.239.45.0/24 maxlen: 24
84.239.47.0/24 maxlen: 24
84.239.48.0/24 maxlen: 24
84.239.50.0/24 maxlen: 24
84.239.52.0/24 maxlen: 24
84.239.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:13:bf:80:c2:cb:14:06:9b:b7:7c:4f:ec:08:3f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
Validity
Not Before: May 14 09:15:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98e31a92dc9a0a4331679319262a7dad92b3653a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:80:77:20:c6:24:4d:61:16:73:41:c3:9d:26:
86:57:19:88:f6:9a:47:cc:67:d7:0f:3b:58:0a:1f:
03:81:bf:f9:71:ac:cc:dd:b2:5f:77:f9:cf:bc:7a:
3f:92:b5:0b:48:ae:c7:a1:f8:55:43:a0:1a:40:6e:
3d:3c:97:bd:e8:e7:51:6f:07:2b:1e:6b:12:0c:a8:
33:46:a0:5d:f0:58:c3:40:8d:bc:b2:91:13:cd:9c:
72:0f:73:bc:f2:4e:15:6f:64:1c:7f:f8:e5:c7:be:
39:5b:6c:b3:e3:12:2b:d8:01:e7:0e:83:7b:e4:8f:
5c:70:a4:b6:ac:dc:b2:29:24:82:53:bb:d8:48:31:
25:0a:b4:87:e8:c0:04:8d:da:3b:7b:15:21:55:0e:
37:bb:b2:17:1f:74:ae:4f:16:93:4c:4d:34:89:9d:
d4:95:b2:c7:31:c5:5c:ae:e2:b7:bd:76:fd:52:92:
37:01:b2:00:5d:73:c8:b9:24:95:f0:33:eb:a0:ae:
19:6b:a3:7e:31:5b:e3:ae:52:aa:32:e2:bb:08:68:
43:70:b1:de:d0:7a:7a:c3:cb:9b:a4:41:48:42:31:
fd:4e:d9:85:d2:0e:2c:74:1b:9b:fa:b3:1d:77:ab:
73:72:f1:a8:2d:3c:1f:c2:b3:f8:7f:72:9e:63:37:
42:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E3:1A:92:DC:9A:0A:43:31:67:93:19:26:2A:7D:AD:92:B3:65:3A
X509v3 Authority Key Identifier:
keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/mOMaktyaCkMxZ5MZJip9rZKzZTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.239.5.0-84.239.7.255
84.239.10.0/24
84.239.12.0/24
84.239.16.0/23
84.239.25.0/24
84.239.27.0-84.239.28.255
84.239.31.0/24
84.239.33.0/24
84.239.37.0/24
84.239.41.0-84.239.43.255
84.239.45.0/24
84.239.47.0-84.239.48.255
84.239.50.0/24
84.239.52.0/24
84.239.60.0/24
Signature Algorithm: sha256WithRSAEncryption
23:6d:74:36:6f:6f:52:aa:50:41:2b:e8:1f:b2:c2:22:24:b8:
ad:34:d5:3a:3a:e5:90:47:b0:1a:6b:39:20:d4:52:97:f6:dd:
ed:4e:0c:ca:1d:d6:32:8f:e7:4c:25:50:55:ac:75:d1:72:f9:
22:b1:de:17:95:3f:69:3c:56:b3:b6:91:d8:75:20:88:4f:03:
1a:6f:7b:7b:1e:4a:d4:5f:83:98:b1:db:02:e0:fe:c2:4d:d4:
61:91:7e:22:3b:71:20:63:31:71:0b:39:35:e0:f4:40:b4:8e:
53:03:fa:cd:61:16:f9:f2:cd:34:99:91:b1:29:bb:97:f2:48:
12:ba:87:1f:32:78:a8:31:9b:cd:a9:22:4d:e8:da:68:d9:50:
f5:60:3c:d7:d7:be:2a:86:dc:23:49:9a:d1:94:2e:6c:56:0b:
8b:ab:e7:cb:ac:d3:44:09:cb:16:d6:d7:d4:bc:88:81:de:13:
cf:48:50:06:c3:b7:9f:a4:bf:d4:ea:94:b2:eb:28:f5:54:ce:
3d:4c:3f:02:5f:6d:77:b3:38:ae:18:c8:cd:c2:31:4d:fe:76:
16:53:bb:03:40:41:2a:d8:dc:25:4e:99:96:a4:18:de:44:68:
36:7b:44:40:80:10:0d:df:80:a2:76:f7:e4:17:64:e1:7e:57:
e7:98:ce:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:10:44 2025 by rpki-client