Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/3_MwNQOGJs5i2M68AVJJMT_ecMU.roa
File: 3_MwNQOGJs5i2M68AVJJMT_ecMU.roa (raw, json)
Hash identifier: K/tXg1M2cyA/liPthnzow5ifZT9tDZ9Dl3Wipy466tA=
Subject key identifier: DF:F3:30:35:03:86:26:CE:62:D8:CE:BC:01:52:49:31:3F:DE:70:C5
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0199810F3A18E001A5985355C39320A68515
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/3_MwNQOGJs5i2M68AVJJMT_ecMU.roa
Signing time: Thu 25 Sep 2025 13:28:02 +0000
ROA not before: Thu 25 Sep 2025 13:28:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14576
IP address blocks: 193.233.89.0/24 maxlen: 24
193.233.90.0/24 maxlen: 24
193.233.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:81:0f:3a:18:e0:01:a5:98:53:55:c3:93:20:a6:85:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Sep 25 13:28:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dff33035038626ce62d8cebc015249313fde70c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0c:6c:24:16:0b:a3:80:7b:e9:c2:4a:54:63:
7a:8d:5f:20:38:30:03:25:c0:19:d4:60:f4:ff:ec:
44:0c:cd:34:46:4b:d5:e8:29:df:96:c7:d3:11:19:
ed:3f:e0:17:1d:35:78:18:ff:57:0e:6c:5f:65:a7:
57:ef:db:fa:b3:c5:18:cf:45:6d:f5:7a:02:4c:3d:
a9:64:12:65:3f:af:57:b8:27:97:67:73:31:5c:52:
ca:dc:76:d8:a4:d0:5c:dc:3b:2c:01:bc:60:41:6b:
5f:ed:10:4a:ad:dd:7c:e1:4d:20:eb:8b:93:26:a7:
06:3d:ce:5c:b1:a6:39:39:0e:cb:ff:5f:c1:1b:90:
ec:fb:d5:62:c9:5e:5c:d1:27:ec:72:1f:af:8f:af:
38:09:88:07:80:2f:59:7d:03:90:81:9d:a0:c1:82:
4e:4a:0c:4b:e6:05:4f:bb:b9:1d:b7:f5:a2:71:7b:
96:aa:e9:68:dc:07:2e:77:b2:ae:25:ea:3a:e6:be:
a0:d3:02:1f:4a:88:25:28:35:ad:3f:e5:54:b4:10:
d1:5c:4c:16:f9:11:98:32:39:3e:9d:5f:54:ef:66:
49:e4:e8:52:c4:5d:13:9f:0f:e5:9a:ec:57:d7:29:
15:af:26:13:73:85:91:7e:52:13:db:44:cc:9e:fb:
40:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F3:30:35:03:86:26:CE:62:D8:CE:BC:01:52:49:31:3F:DE:70:C5
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/3_MwNQOGJs5i2M68AVJJMT_ecMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.89.0-193.233.91.255
Signature Algorithm: sha256WithRSAEncryption
80:a4:96:74:a8:fc:52:0b:7e:91:c4:81:11:2d:ae:23:54:90:
a2:18:7d:eb:79:f4:d3:94:1f:88:ea:6b:b0:1f:93:34:f9:d2:
4c:89:fb:67:c5:0e:3e:0d:7e:01:68:3e:5b:24:8d:bc:26:33:
4d:1c:58:79:33:93:9d:d2:c8:53:79:f1:a3:10:50:b1:1c:8c:
4c:3f:ee:37:19:e9:71:8c:c3:76:be:40:f8:a9:e0:c2:44:57:
56:97:b1:06:3f:fe:a9:3d:01:57:0a:04:d1:33:43:3e:e1:a8:
e1:35:24:7d:53:a5:c5:34:19:6e:61:ce:a9:09:f6:25:59:e0:
bb:fb:2a:97:cc:e5:f8:38:ee:a6:0c:1d:c8:5a:28:db:57:1f:
07:9a:11:09:a6:3a:b4:f4:6a:3d:1f:ad:d7:dc:07:c6:a6:2a:
aa:61:06:24:f0:2b:9f:a0:e1:4d:fb:54:c7:95:ef:40:f1:ef:
4c:19:59:ac:0c:7f:43:b5:fb:e6:9c:8b:dd:99:51:0a:86:e3:
05:da:0e:de:0f:46:8d:1d:d0:2a:ba:57:e5:05:b5:07:e6:be:
42:ea:06:09:b6:98:83:0a:8d:e6:93:2a:8b:ed:60:99:0c:a4:
97:ef:4d:08:94:67:e5:8f:a4:02:93:f8:d9:e9:28:c2:57:37:
45:c4:c2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:10:32 2025 by rpki-client