Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/MK8cxn7bUsFJpBuEtPxkYKBreSQ.roa
File: MK8cxn7bUsFJpBuEtPxkYKBreSQ.roa (raw, json)
Hash identifier: C1RacTZdjwPZlfow+hor5mnPRzIoBUQ9t7zMcZ9IcC8=
Subject key identifier: 30:AF:1C:C6:7E:DB:52:C1:49:A4:1B:84:B4:FC:64:60:A0:6B:79:24
Certificate issuer: /CN=3de9be3c47afb9e0a5fc303bf2d84a73f2082fac
Certificate serial: 0199E6E1BE576D2C88308B94F5A3B9D12005
Authority key identifier: 3D:E9:BE:3C:47:AF:B9:E0:A5:FC:30:3B:F2:D8:4A:73:F2:08:2F:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/MK8cxn7bUsFJpBuEtPxkYKBreSQ.roa
Signing time: Wed 15 Oct 2025 07:59:38 +0000
ROA not before: Wed 15 Oct 2025 07:59:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21013
IP address blocks: 91.220.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e6:e1:be:57:6d:2c:88:30:8b:94:f5:a3:b9:d1:20:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de9be3c47afb9e0a5fc303bf2d84a73f2082fac
Validity
Not Before: Oct 15 07:59:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30af1cc67edb52c149a41b84b4fc6460a06b7924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:c9:6e:1a:1a:bf:1d:3e:dd:96:20:c0:25:
28:e8:37:ef:da:6b:13:83:fa:e8:0b:96:de:de:78:
7e:55:55:4d:46:f7:18:e6:d2:1d:4d:5a:10:88:9b:
ce:c6:bf:30:75:76:98:f5:98:3c:65:42:a6:6f:b4:
58:b5:4d:c1:e2:80:88:ba:4e:4a:8e:96:49:01:61:
1b:ab:33:6d:5b:55:94:0f:26:68:9e:44:68:fa:7a:
b4:51:29:c2:98:da:6b:25:36:e7:fb:64:b9:93:7d:
7a:fe:79:02:dc:69:e8:3b:e8:23:ac:dd:b9:a9:8a:
bc:b5:83:7b:89:bd:c1:f1:34:80:95:fa:6a:52:63:
0f:69:4f:be:c2:5d:ca:9f:44:c4:b3:c8:51:23:9e:
9a:56:7f:ca:35:e3:f8:32:df:11:6b:c0:5d:9e:b1:
eb:2e:aa:cc:9f:cd:a0:9c:4a:37:71:87:df:a0:c4:
65:e8:3e:b4:c8:d4:5d:3c:87:e1:3d:93:b5:89:f2:
88:bc:9b:53:0c:50:d1:c9:ce:0c:87:fe:dd:c8:07:
c2:37:a1:94:01:bd:ea:7c:98:5d:a1:40:e5:e7:f2:
cd:be:53:0d:c7:cc:ea:47:34:42:1c:d7:70:f7:8c:
f3:40:9e:75:4e:c8:df:49:e1:4e:f1:f1:bc:29:db:
31:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AF:1C:C6:7E:DB:52:C1:49:A4:1B:84:B4:FC:64:60:A0:6B:79:24
X509v3 Authority Key Identifier:
keyid:3D:E9:BE:3C:47:AF:B9:E0:A5:FC:30:3B:F2:D8:4A:73:F2:08:2F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/MK8cxn7bUsFJpBuEtPxkYKBreSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.179.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:09:51:c1:78:d2:16:b1:b3:47:97:6b:c9:3a:06:96:07:28:
b3:c5:18:80:80:92:a5:10:4f:ce:4a:4a:ec:eb:2b:49:ae:96:
c8:25:64:0e:b5:31:fd:60:44:4a:0b:09:00:5a:af:8a:52:0b:
79:71:1f:50:cc:77:3c:8f:12:84:ed:b1:8e:88:9c:c3:28:c7:
d6:30:21:47:2f:42:32:81:77:5d:82:c4:e3:a8:d8:de:13:ba:
87:f7:e1:36:d6:2b:19:1b:e9:78:f5:3a:f7:2f:74:72:69:8e:
cd:1c:be:6e:85:86:fa:5a:f0:d9:9c:db:97:0d:b0:95:f4:6d:
4d:e9:01:68:d1:14:db:e9:3e:b4:62:6a:8e:dc:13:4d:d7:b0:
be:a0:be:12:b7:59:6d:6e:57:57:99:2c:17:df:87:b8:5b:b3:
ee:ba:83:8e:2e:88:7a:b9:0a:cf:cc:80:12:94:12:38:d0:eb:
6a:fa:71:d5:d0:ac:61:39:68:f7:6d:26:e6:17:69:4f:b2:89:
b5:d5:79:a6:40:b7:ee:43:56:a8:b6:2a:89:4c:f1:74:bd:57:
ac:1f:49:f1:63:95:3a:10:01:2f:df:07:fc:a3:7e:83:39:9d:
77:e8:f4:3b:74:6d:b0:8b:a1:29:ea:2e:d2:90:d0:f1:fd:9b:
12:c3:55:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:23:54 2025 by rpki-client