Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/MKp_wnfGXJz9vDnuCk6NRSVDYjQ.roa
File: MKp_wnfGXJz9vDnuCk6NRSVDYjQ.roa (raw, json)
Hash identifier: 5LllIjjTErVD6cEbTzyP47TnfsEC+5tnD2nfvOPP5z0=
Subject key identifier: 30:AA:7F:C2:77:C6:5C:9C:FD:BC:39:EE:0A:4E:8D:45:25:43:62:34
Certificate issuer: /CN=2bc7b51dbf35aa4239abdad55f966945659401cf
Certificate serial: 0198A8C07EF1610209278F16489CA0401DB1
Authority key identifier: 2B:C7:B5:1D:BF:35:AA:42:39:AB:DA:D5:5F:96:69:45:65:94:01:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/MKp_wnfGXJz9vDnuCk6NRSVDYjQ.roa
Signing time: Thu 14 Aug 2025 13:24:04 +0000
ROA not before: Thu 14 Aug 2025 13:24:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207083
IP address blocks: 185.169.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a8:c0:7e:f1:61:02:09:27:8f:16:48:9c:a0:40:1d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc7b51dbf35aa4239abdad55f966945659401cf
Validity
Not Before: Aug 14 13:24:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30aa7fc277c65c9cfdbc39ee0a4e8d4525436234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:23:17:60:54:0a:a7:18:32:63:2f:c8:5d:6b:
88:d5:98:d2:5c:36:8d:5d:6d:95:31:27:5d:d7:ae:
b7:07:f8:ee:b6:e4:7a:b7:74:63:cb:3d:e8:10:8d:
b0:fc:f1:5d:4c:c0:b9:fa:56:55:0d:d9:e2:7e:58:
a9:c3:e8:6d:07:f4:32:4c:d0:20:61:d5:81:4d:e2:
73:55:4e:8f:f2:d3:8a:d7:db:37:36:54:06:c0:da:
b6:10:83:72:f3:71:cc:0d:dc:c3:51:10:11:9b:cb:
35:e1:d2:5c:5c:c7:17:1c:cb:32:74:30:87:81:85:
d9:b5:09:09:5c:0f:f1:93:50:27:4d:aa:4d:c1:50:
b3:61:30:c5:6d:43:b2:4b:8c:4d:9a:59:c2:30:73:
5a:95:f0:68:92:cc:ca:32:c3:f0:ff:46:d9:cd:17:
3c:d6:50:09:f7:d0:27:6f:94:e4:d2:ff:45:33:81:
84:e3:f1:ff:1e:76:34:4f:d1:5a:2b:0c:27:5e:b4:
57:1c:1c:7f:14:1a:4f:0b:a3:f8:a9:b6:30:4d:98:
1c:2c:79:c4:b6:68:dc:6c:48:61:30:2a:f3:82:5a:
59:0d:72:74:4f:d9:2d:e4:85:17:d3:d1:a0:f2:20:
09:a8:8e:f9:a7:ec:86:44:59:d0:1d:cb:1d:31:71:
08:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AA:7F:C2:77:C6:5C:9C:FD:BC:39:EE:0A:4E:8D:45:25:43:62:34
X509v3 Authority Key Identifier:
keyid:2B:C7:B5:1D:BF:35:AA:42:39:AB:DA:D5:5F:96:69:45:65:94:01:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/MKp_wnfGXJz9vDnuCk6NRSVDYjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.79.0/24
Signature Algorithm: sha256WithRSAEncryption
62:fa:97:00:9f:3d:c6:2a:10:b9:4b:ca:8e:bc:d9:c1:ac:11:
f1:e1:ac:56:15:f2:25:b2:ca:10:31:4e:20:ca:17:1e:86:33:
81:1a:41:1a:cd:fd:f4:ab:d3:3b:18:73:2a:c0:53:a5:e7:4f:
be:80:5c:c4:af:1a:11:d1:28:40:98:5c:7e:0c:cc:80:b5:97:
5a:c9:47:c6:4e:2d:a9:c3:fb:77:58:66:66:e5:57:4a:d5:ed:
f3:e8:86:a7:7c:a5:8e:11:73:59:27:da:4c:b4:23:af:87:96:
fc:46:c3:52:17:9e:98:7c:84:45:3f:36:5c:40:8f:ae:77:ea:
8b:4f:2e:8a:75:76:57:f8:e1:05:2f:b6:cc:04:66:b4:5f:95:
9d:69:8e:cf:19:70:be:d3:79:85:84:cf:c6:3a:94:e8:32:32:
be:07:c8:31:9e:90:ee:33:88:39:05:9a:53:e9:29:47:ef:62:
2d:66:3c:fd:4e:fd:bc:47:3d:20:d3:92:dc:b3:34:df:05:8a:
c6:27:a1:6f:96:85:3d:fc:b8:46:f1:67:b4:94:0b:23:53:bf:
4a:a3:3f:ef:e9:4f:d9:7e:cf:a9:66:9e:4f:0c:01:99:0e:2d:
a6:dd:e2:de:32:6c:80:7f:c6:28:70:01:9a:c4:aa:21:69:50:
97:b4:ce:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:29:02 2025 by rpki-client