Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/mJUNw4dhsVDBnFTg7x4G5Co4xf0.roa
File: mJUNw4dhsVDBnFTg7x4G5Co4xf0.roa (raw, json)
Hash identifier: uA/rqJShT3FbqgkbYlEQFRj/7911uoTUqkA+K2PLe1c=
Subject key identifier: 98:95:0D:C3:87:61:B1:50:C1:9C:54:E0:EF:1E:06:E4:2A:38:C5:FD
Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial: 0198AA6A37A4983517CA57FC1701408BAB20
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/mJUNw4dhsVDBnFTg7x4G5Co4xf0.roa
Signing time: Thu 14 Aug 2025 21:09:04 +0000
ROA not before: Thu 14 Aug 2025 21:09:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213784
IP address blocks: 188.191.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:aa:6a:37:a4:98:35:17:ca:57:fc:17:01:40:8b:ab:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Validity
Not Before: Aug 14 21:09:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98950dc38761b150c19c54e0ef1e06e42a38c5fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e2:fa:29:ca:81:73:3b:bb:83:e6:46:61:93:
e1:89:b4:0c:db:7e:8a:e4:2d:74:9e:46:81:9f:5f:
1d:80:27:42:b9:d4:01:83:12:cc:3c:3e:42:80:06:
13:6d:19:d2:b0:7a:a8:55:3f:69:9d:6a:9a:ff:92:
17:dd:a9:9d:fd:3e:6f:ef:c7:16:15:60:28:fa:24:
11:76:00:75:90:79:dd:e9:ce:58:1c:e5:c5:a9:9f:
1b:d9:7b:d3:fb:7c:01:78:5c:b1:24:7e:ae:68:92:
86:81:37:c8:06:ca:b5:b6:eb:b3:39:0f:b5:3c:90:
48:48:61:f8:a4:c5:40:80:f4:85:b1:0f:f3:08:40:
b4:76:f2:fa:4e:7b:40:a2:e2:4e:7e:7f:dd:7d:e9:
80:e7:ff:18:70:a6:7d:78:ff:79:2a:2a:46:45:4b:
0a:66:04:ef:7d:3f:e1:e8:9a:0e:a9:3a:bc:d8:04:
99:8f:8e:28:61:a9:5d:1e:95:b7:b8:2e:d1:8d:54:
ad:a0:ce:27:6e:9c:f1:66:87:5f:92:4f:06:91:ce:
34:db:a0:a9:9a:36:e5:ed:7d:ff:26:f6:17:fa:60:
a3:80:3a:ae:f5:63:97:d9:08:bd:1c:ba:32:b8:31:
2e:e6:e0:40:21:f6:64:ab:4e:a2:6c:b5:53:a5:5e:
72:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:95:0D:C3:87:61:B1:50:C1:9C:54:E0:EF:1E:06:E4:2A:38:C5:FD
X509v3 Authority Key Identifier:
keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/mJUNw4dhsVDBnFTg7x4G5Co4xf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.48.0/24
Signature Algorithm: sha256WithRSAEncryption
99:a6:98:f0:90:08:5d:4b:0e:ea:c6:a4:87:3d:76:a4:7e:16:
4f:64:1a:64:5c:0b:32:46:98:19:48:33:94:9e:7e:9f:08:07:
21:f9:c6:e6:e5:1c:33:ac:ef:94:fe:ed:87:a4:37:41:4c:0d:
77:ad:09:cb:86:d6:25:11:67:32:c7:f2:ef:7e:fe:77:2b:de:
e7:95:a1:0c:a8:fd:d3:c1:29:40:77:b3:19:c8:aa:37:a3:52:
dd:c6:eb:24:bb:ad:24:38:2d:47:be:08:d7:aa:55:12:9a:e4:
b7:ee:05:37:d9:d8:d7:11:3f:18:df:e5:c0:51:b4:d0:90:8e:
d5:87:cc:df:a2:53:8c:45:1e:de:49:96:1c:b7:15:c9:30:37:
5f:0b:96:22:3c:fe:85:a3:9f:7a:af:23:d0:c1:15:2b:bf:0d:
13:5b:83:ba:45:95:61:53:b1:c1:84:4a:25:5e:c2:e7:c3:08:
76:6c:07:62:cb:cf:c2:49:3d:06:50:60:90:0e:47:a3:0b:95:
6a:c8:f1:e8:7f:d8:b7:bb:c7:e3:2d:aa:ec:00:f3:5f:7c:18:
4d:b9:5a:b5:4a:01:4d:0f:0c:ab:23:75:3d:82:5e:d6:ff:be:
79:b8:bc:e8:78:e4:f5:f3:a0:36:8a:19:f3:ab:32:4d:a4:2a:
f1:d8:75:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:20:43 2025 by rpki-client