Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/MRvWFzgC4a_7skPBbLRCksqaIsg.roa
File: MRvWFzgC4a_7skPBbLRCksqaIsg.roa (raw, json)
Hash identifier: JKe21lFrUDcMNPiRT62GmLjAHsF9M4bn3iZlwG/8M6s=
Subject key identifier: 31:1B:D6:17:38:02:E1:AF:FB:B2:43:C1:6C:B4:42:92:CA:9A:22:C8
Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Certificate serial: 0199F37C620CEDE93D9BF8AE6BAE1F3AE3EB
Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/MRvWFzgC4a_7skPBbLRCksqaIsg.roa
Signing time: Fri 17 Oct 2025 18:43:58 +0000
ROA not before: Fri 17 Oct 2025 18:43:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215290
IP address blocks: 2a09:bc03::/32 maxlen: 32
2a11:6586::/32 maxlen: 32
2a11:6d04::/32 maxlen: 32
2a11:9f40::/29 maxlen: 29
2a12:2040::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f3:7c:62:0c:ed:e9:3d:9b:f8:ae:6b:ae:1f:3a:e3:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Validity
Not Before: Oct 17 18:43:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=311bd6173802e1affbb243c16cb44292ca9a22c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0c:7c:08:56:36:b3:51:b0:12:8b:03:11:70:
fd:1d:4c:a8:ab:70:ab:bb:e0:1e:1a:b1:4f:65:01:
3a:13:82:db:e6:a3:21:76:83:0e:fc:6c:1f:46:7e:
18:bd:41:fe:fe:b7:3d:2c:17:ed:f4:6a:96:95:3e:
7c:31:f4:77:e3:cd:a1:20:e6:f1:de:06:97:a1:ea:
5c:b6:95:b0:84:b9:9f:66:4a:c2:50:bd:e6:4a:db:
92:eb:39:c3:d4:c4:25:a4:98:03:0c:8d:96:b3:16:
49:2e:09:98:7c:0b:db:11:a4:e3:a5:d0:eb:ad:3e:
0d:e0:16:7b:a3:55:be:06:dd:75:a3:51:43:6c:c1:
61:38:7d:68:07:e6:40:ed:e5:df:89:80:d8:59:c0:
be:bd:f6:58:8b:c0:ad:6d:f9:06:57:c5:7d:2d:64:
c0:24:38:db:50:89:5f:6c:f5:90:ed:2a:4a:cb:59:
1e:5b:16:c1:ab:b3:ea:07:65:eb:a2:e3:a2:c4:6d:
eb:18:4e:52:2f:53:cd:5a:c3:0b:3e:b0:b4:b7:8a:
ae:bb:dd:87:8e:31:2c:17:90:d4:1d:43:20:d5:88:
a0:c6:de:0c:aa:43:66:77:11:14:3b:ff:ee:42:60:
72:66:48:15:59:74:89:91:09:b1:e7:b1:d9:5b:e7:
34:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1B:D6:17:38:02:E1:AF:FB:B2:43:C1:6C:B4:42:92:CA:9A:22:C8
X509v3 Authority Key Identifier:
keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/MRvWFzgC4a_7skPBbLRCksqaIsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:bc03::/32
2a11:6586::/32
2a11:6d04::/32
2a11:9f40::/29
2a12:2040::/29
Signature Algorithm: sha256WithRSAEncryption
20:d6:ee:16:97:9a:ef:88:b6:d8:fc:1c:af:27:3e:3d:bd:d4:
c1:9c:ef:32:25:1e:10:bf:cc:31:03:90:ac:0e:c2:95:0d:80:
4c:7c:df:33:5b:f2:59:d3:cc:aa:36:63:65:61:01:72:e8:ef:
42:73:5f:ba:5f:42:03:b5:16:9d:de:ed:bb:e5:48:04:ff:e4:
de:a8:62:c1:34:fd:fb:2e:b8:44:f2:b8:b6:ff:78:2e:8c:a1:
8f:8e:d5:55:45:d7:54:9d:be:3c:35:cb:b9:36:f0:20:61:e4:
ee:83:cf:27:bb:5b:7e:1e:5e:53:61:3a:c8:df:48:af:24:54:
2b:f3:10:6b:38:55:02:82:1f:b2:41:c3:78:1a:50:78:1b:6b:
8b:f8:48:68:54:00:7e:ea:a4:2a:27:38:fb:39:b0:fa:d8:9a:
74:27:2f:e3:16:77:77:ad:88:2d:38:e9:dd:3e:b8:21:7b:59:
1c:86:4c:1e:56:1e:9f:05:88:fc:f9:0c:2b:fd:17:2c:7e:e7:
63:8f:27:47:d6:f8:89:b6:88:7d:57:de:0a:ad:30:83:0c:08:
d1:03:f9:08:23:38:7c:bb:10:60:e9:3c:3d:32:77:1a:e9:b1:
eb:1c:31:dc:05:c0:8f:43:5e:5c:92:5a:ba:bc:ce:4a:da:ac:
b3:82:ac:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:55:39 2025 by rpki-client