Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/miwTxGpbc4URsDoSPTN43xr0WZg.roa
File: miwTxGpbc4URsDoSPTN43xr0WZg.roa (raw, json)
Hash identifier: /upbdduhA0URubhKJAkjpFv4ndYPfSQYPIAaUEC9XtY=
Subject key identifier: 9A:2C:13:C4:6A:5B:73:85:11:B0:3A:12:3D:33:78:DF:1A:F4:59:98
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 0198A7624175F8FA929712E2781A2CE8334A
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/miwTxGpbc4URsDoSPTN43xr0WZg.roa
Signing time: Thu 14 Aug 2025 07:01:30 +0000
ROA not before: Thu 14 Aug 2025 07:01:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 85.254.29.0/24 maxlen: 24
85.254.178.0/23 maxlen: 23
159.148.131.0/24 maxlen: 24
159.148.169.0/24 maxlen: 24
159.148.177.0/24 maxlen: 24
185.27.92.0/24 maxlen: 24
185.27.93.0/24 maxlen: 24
185.27.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a7:62:41:75:f8:fa:92:97:12:e2:78:1a:2c:e8:33:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Aug 14 07:01:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a2c13c46a5b738511b03a123d3378df1af45998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:76:9e:28:64:d7:ad:ad:49:d2:3d:4d:e0:6f:
10:be:0f:81:e7:ed:4d:e5:3d:9c:0b:b7:fa:b1:33:
1b:c6:a7:46:52:ef:a4:fc:69:65:c1:41:04:4a:48:
3d:4e:12:ca:39:5f:bc:4f:ab:f2:23:3e:74:94:26:
7c:be:36:66:82:99:4f:0d:bb:ce:18:01:e7:e0:cc:
c8:db:7c:dc:a0:5e:34:ea:cb:b5:3f:c0:44:c4:49:
f5:aa:50:b7:81:89:3f:9e:89:45:43:c4:e0:75:cc:
54:16:74:13:1e:6a:dc:be:9d:1a:a1:0d:b7:33:d0:
25:43:09:0b:22:29:2c:e8:36:25:1f:95:f0:16:ae:
73:b9:d3:fb:c5:09:a3:e7:28:68:66:78:48:9b:e2:
c7:23:da:4f:dd:0b:1b:d3:86:e6:a8:2c:32:e4:2a:
59:3c:0f:e8:43:1a:e7:64:0e:1e:ee:3c:da:36:33:
38:4d:da:94:4d:13:7f:64:de:37:7a:7d:2d:fb:82:
e8:75:f7:6a:7d:6a:fd:77:b2:30:fa:d2:2c:e3:b7:
f7:e3:39:24:fe:56:f9:8b:82:72:19:1d:d7:ee:f3:
0f:ca:59:d6:47:e2:02:13:42:cd:dc:39:95:b1:9c:
94:92:34:d2:d5:7e:6d:fe:96:43:12:e8:5d:97:8b:
5f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2C:13:C4:6A:5B:73:85:11:B0:3A:12:3D:33:78:DF:1A:F4:59:98
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/miwTxGpbc4URsDoSPTN43xr0WZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.29.0/24
85.254.178.0/23
159.148.131.0/24
159.148.169.0/24
159.148.177.0/24
185.27.92.0/23
185.27.95.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:78:68:f7:fb:82:b8:9c:cd:e3:e3:69:ce:39:a2:ce:38:07:
ff:6f:dc:e5:2b:6e:13:f5:5c:33:ce:2a:07:4e:d7:df:6a:3e:
ae:1c:eb:54:df:62:32:94:cf:1a:06:24:22:d9:4a:03:b8:28:
1c:af:ae:c9:79:ff:9b:6b:fe:3f:49:9a:fb:ed:2c:b1:1d:29:
db:f5:9d:55:69:eb:81:e1:23:0b:85:62:88:29:ee:f7:31:e0:
df:4e:3d:f6:36:98:45:54:bf:d9:ac:cf:38:b3:33:e0:51:11:
7b:5b:ad:37:8e:d9:60:31:07:a2:36:79:28:6c:51:b3:41:8d:
6d:fc:75:8f:3b:a5:fb:0c:f3:32:03:87:e5:ed:29:72:ad:14:
a2:68:eb:92:50:30:80:41:76:f5:2d:74:a7:5f:7c:57:fc:e8:
a9:14:37:0b:f1:fd:43:eb:a6:b5:40:8e:22:e4:0e:70:2e:37:
29:33:18:f2:85:01:5d:e5:61:c4:25:ce:a2:60:f7:88:8f:a4:
0e:1b:ae:2f:8f:6c:8e:32:7f:95:04:e8:00:0c:2a:6d:4c:58:
9f:04:44:97:f7:c8:41:2c:7e:a8:07:7e:4f:65:9a:23:73:c0:
6d:44:2e:08:b9:4c:bf:d2:04:20:3a:56:53:1f:67:5e:dc:16:
c8:7e:aa:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:11:04 2025 by rpki-client