Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/MiT8dgaaY8qaIaVA7v8mrB1HxCE.roa
File: MiT8dgaaY8qaIaVA7v8mrB1HxCE.roa (raw, json)
Hash identifier: EwWdAXH47+SHKw8sZgohxBBaXTBNbMyvHkTz6QrsDso=
Subject key identifier: 32:24:FC:76:06:9A:63:CA:9A:21:A5:40:EE:FF:26:AC:1D:47:C4:21
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 0197D0AA2B37152485E048E80FA63777AC07
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/MiT8dgaaY8qaIaVA7v8mrB1HxCE.roa
Signing time: Thu 03 Jul 2025 14:21:42 +0000
ROA not before: Thu 03 Jul 2025 14:21:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 87.254.29.0/24 maxlen: 24
185.210.168.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d0:aa:2b:37:15:24:85:e0:48:e8:0f:a6:37:77:ac:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jul 3 14:21:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3224fc76069a63ca9a21a540eeff26ac1d47c421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:33:44:15:3c:fc:26:76:b6:9f:c6:1d:7b:3b:
aa:be:99:6c:67:fb:6b:8a:7f:4e:2d:e6:27:24:ca:
8f:96:20:bc:c7:88:31:3b:ee:7f:4b:ab:23:16:95:
9c:41:3a:1a:9a:26:be:2e:de:8b:2a:76:6f:4c:63:
f6:61:ae:5f:3d:99:f0:77:88:86:6b:03:04:ce:eb:
73:72:04:ff:e1:dd:ec:05:1f:6b:b7:4b:21:1a:23:
29:8d:28:b6:5e:22:10:67:10:a6:ba:ec:4f:c3:5c:
1c:73:ff:80:12:99:4b:35:48:24:6d:0d:c0:ef:de:
e5:5d:ca:35:32:82:7d:79:67:f9:45:46:53:de:9e:
07:7a:7b:ff:df:7c:05:ec:13:ec:85:70:83:59:67:
b8:49:8a:4a:c5:64:c2:75:36:4c:8f:9e:59:c9:93:
74:38:e5:7b:aa:e0:da:e0:e1:f8:cb:8a:d6:1b:4b:
ad:90:5e:ee:46:bd:71:e1:17:f8:ed:31:4c:8e:d9:
f6:53:1d:f4:ce:0a:08:b2:2b:03:23:13:4e:3e:13:
db:d7:00:20:ad:4c:e9:e8:59:65:8e:0a:77:bd:c0:
8a:b9:a9:9c:9f:ed:eb:b9:88:a6:19:35:44:ba:54:
dd:34:f0:d3:ba:2d:3b:8a:82:a7:2d:7e:66:a0:54:
f0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:24:FC:76:06:9A:63:CA:9A:21:A5:40:EE:FF:26:AC:1D:47:C4:21
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/MiT8dgaaY8qaIaVA7v8mrB1HxCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.29.0/24
185.210.168.0/23
Signature Algorithm: sha256WithRSAEncryption
38:85:5e:57:69:48:18:e1:29:02:5a:7e:ae:a6:0c:c1:8e:62:
ba:cf:2a:52:e1:43:1e:24:54:a8:f1:82:3a:c9:8d:c4:36:41:
12:fa:a5:7e:c8:62:0f:63:5f:16:58:8c:d0:83:c8:00:0b:df:
80:f9:8b:af:8f:6a:4a:f5:34:06:6e:7f:94:66:b2:6d:f7:c2:
d1:1c:20:13:71:6f:fd:cd:1c:4d:ef:b3:19:dd:cc:9a:31:d8:
ec:60:91:fa:e9:7c:d3:3e:1f:e0:28:10:08:ec:db:c3:7a:2f:
3f:74:04:40:c1:96:af:39:a9:d8:08:4a:1d:96:5f:6b:e8:ee:
3d:fc:c2:2f:2b:ed:2a:12:c7:26:65:f5:dc:03:da:ef:97:f6:
1f:62:ef:29:ea:07:8c:12:f5:43:be:86:85:a2:22:31:ac:1a:
43:2c:66:8e:53:af:b3:aa:64:6a:f2:cc:6a:78:45:25:6d:35:
1d:32:85:8b:54:20:c0:6f:eb:78:cf:84:44:56:f0:a1:b5:b7:
f0:a7:c2:ec:7d:4e:6b:5a:02:21:f2:e1:30:03:be:90:d5:66:
fb:f3:ed:46:fe:fb:8b:ef:c2:aa:9d:11:0f:f0:80:ea:14:77:
9f:b3:e7:c4:a2:ef:62:d8:a9:d2:e5:af:78:70:d6:e1:e4:a2:
e4:f2:63:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 20:34:40 2025 by rpki-client