Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/MuulXko9r_W9s3lZpOtOQspqBFI.roa
File: MuulXko9r_W9s3lZpOtOQspqBFI.roa (raw, json)
Hash identifier: H644QJfpv5o0XjCRyV5KUt5CE7o8qrfzHbuiFfSJd7U=
Subject key identifier: 32:EB:A5:5E:4A:3D:AF:F5:BD:B3:79:59:A4:EB:4E:42:CA:6A:04:52
Certificate issuer: /CN=11fe3900e141c3b169a3cccb3557bccef2895e85
Certificate serial: 01988E027DDC1DC7A992EE0AA47C64C37F08
Authority key identifier: 11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/MuulXko9r_W9s3lZpOtOQspqBFI.roa
Signing time: Sat 09 Aug 2025 08:46:24 +0000
ROA not before: Sat 09 Aug 2025 08:46:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12676
IP address blocks: 193.143.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:02:7d:dc:1d:c7:a9:92:ee:0a:a4:7c:64:c3:7f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11fe3900e141c3b169a3cccb3557bccef2895e85
Validity
Not Before: Aug 9 08:46:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32eba55e4a3daff5bdb37959a4eb4e42ca6a0452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e2:b0:c2:2b:25:eb:39:d4:df:dd:15:62:39:
ec:39:08:3a:fa:59:e2:42:7e:96:13:ad:1c:ee:10:
42:4a:fa:48:a9:9f:0b:03:8a:17:2c:e1:9e:5c:98:
1b:31:a9:89:7e:f9:94:58:6d:d7:bb:e2:fc:14:4e:
d8:2c:31:44:ad:44:b4:dd:11:10:a6:18:ed:02:46:
1b:95:c2:a2:c5:32:96:ed:a2:de:e7:1f:fc:29:4f:
51:f6:1f:d5:4e:c1:1e:6b:32:a3:c7:85:28:b0:c4:
27:bb:a7:bf:df:6d:a3:88:61:30:ce:27:14:e7:b7:
06:5d:63:f4:09:30:1b:53:9f:4e:7f:fb:f3:e8:15:
0b:7b:f3:44:90:c7:10:25:ed:79:32:ed:1f:f8:a0:
40:9c:32:8f:72:a9:2b:3b:e4:75:b8:e4:f8:c1:f9:
3c:fc:50:77:c3:76:f3:da:af:a3:59:55:ba:5e:af:
21:9f:74:15:45:ae:f4:ff:cc:55:19:31:b8:08:40:
e5:5e:82:88:16:0f:f4:2b:9e:ea:ae:74:61:bc:2f:
65:7e:d3:7e:07:fe:e1:3e:2b:91:63:94:68:78:31:
c1:b4:ff:f9:a3:74:f3:9d:e6:ab:06:3f:f3:3a:3e:
ed:08:7f:a8:48:92:7b:43:e4:ae:75:a4:9a:f4:b1:
bf:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EB:A5:5E:4A:3D:AF:F5:BD:B3:79:59:A4:EB:4E:42:CA:6A:04:52
X509v3 Authority Key Identifier:
keyid:11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/MuulXko9r_W9s3lZpOtOQspqBFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.143.122.0/24
Signature Algorithm: sha256WithRSAEncryption
42:60:54:13:6c:c5:0d:85:6a:1a:7d:63:f7:3c:77:86:0d:b4:
3a:44:31:b7:19:eb:be:e6:15:52:a8:f3:18:8c:4f:0a:db:76:
dc:44:3c:bc:7a:53:80:0c:e5:2b:41:32:de:c9:a2:91:61:dc:
e2:cd:f5:4d:b5:68:de:6a:48:86:a2:62:09:8b:33:49:bf:c7:
5b:16:7f:0c:ae:3b:b6:39:a3:8a:a4:5f:63:c0:21:ca:9b:22:
37:c0:49:e5:59:36:e3:c0:f0:37:11:36:43:3d:60:f4:eb:66:
00:04:2e:b1:ee:a1:66:25:1e:be:67:26:69:ea:0b:c3:cb:6d:
eb:da:32:c5:dc:7c:43:d7:45:e8:5f:e4:2f:67:b8:b6:99:26:
16:d1:87:a3:14:3e:16:5d:12:f9:b7:4f:8f:32:a4:7d:c5:fd:
f7:13:32:49:3c:80:4b:1c:1e:b0:d9:31:20:8c:9d:43:c5:4f:
19:42:1b:f3:cc:b8:14:d6:d4:51:cb:99:ed:06:58:0f:a6:27:
cd:12:2a:f8:d1:06:86:32:0a:e7:11:e8:fd:2c:e2:69:05:c6:
87:6a:20:3e:42:1b:8b:a0:11:9c:c0:97:4b:ac:2c:24:23:2d:
3a:02:52:69:2e:4f:1a:84:4d:3a:c0:c3:5d:b3:de:ec:8d:77:
f4:c6:63:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:28:27 2025 by rpki-client