Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/mjqRtPW_FFHVUc_9UfMFfi25D8E.roa
File: mjqRtPW_FFHVUc_9UfMFfi25D8E.roa (raw, json)
Hash identifier: XJlXFoLhM+Dtcep8s7P/rFzF3KGUlEzdjjknkuerFuY=
Subject key identifier: 9A:3A:91:B4:F5:BF:14:51:D5:51:CF:FD:51:F3:05:7E:2D:B9:0F:C1
Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321
Certificate serial: 0198C4F62D7CA71E6F0F21CE036FC8E07811
Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/mjqRtPW_FFHVUc_9UfMFfi25D8E.roa
Signing time: Wed 20 Aug 2025 00:52:04 +0000
ROA not before: Wed 20 Aug 2025 00:52:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 185.7.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c4:f6:2d:7c:a7:1e:6f:0f:21:ce:03:6f:c8:e0:78:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321
Validity
Not Before: Aug 20 00:52:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a3a91b4f5bf1451d551cffd51f3057e2db90fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:72:72:00:99:a4:0f:ce:ca:06:6f:d8:b5:3e:
17:fb:0b:1e:4b:c5:ee:9a:ff:83:bc:74:8f:59:c3:
d6:58:c1:d4:29:86:d6:73:a1:55:64:21:78:ed:ab:
1c:6e:6b:17:74:f8:56:94:83:34:7b:40:21:ed:e5:
37:75:c0:b2:b9:d0:1e:3c:f1:28:eb:58:50:99:b8:
05:91:bc:99:ee:89:9f:f6:29:ba:ca:79:8b:16:65:
8c:98:a4:25:1b:d4:b4:83:b0:0e:76:9a:d1:19:8c:
17:8d:6f:98:2e:f3:10:9d:73:d6:c9:d8:09:d8:51:
6c:89:70:f6:61:da:f5:68:ae:df:36:f1:a3:72:04:
c8:3c:00:6d:b3:ae:70:f8:13:3f:de:9c:78:6b:12:
94:4e:1b:ee:d4:69:41:19:87:54:73:27:bb:cf:a2:
70:5b:30:d4:19:df:5c:50:bb:81:de:30:cd:a2:e2:
4f:d5:6c:e0:1d:28:c7:07:fa:78:35:15:cb:60:71:
3a:10:84:10:ab:29:5d:e6:22:2c:d9:eb:9b:95:60:
9f:be:ab:00:94:97:ae:55:d2:2d:19:22:1f:b2:a1:
11:ba:ab:f2:a9:3d:e9:08:79:03:15:34:ba:65:89:
c5:9a:22:42:90:3a:be:d9:1d:37:37:e0:04:b5:e9:
48:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3A:91:B4:F5:BF:14:51:D5:51:CF:FD:51:F3:05:7E:2D:B9:0F:C1
X509v3 Authority Key Identifier:
keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/mjqRtPW_FFHVUc_9UfMFfi25D8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.240.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:04:36:19:c9:2b:f5:21:97:b5:1e:75:59:92:bc:b6:0c:46:
85:aa:0c:82:42:0e:41:e2:fd:8c:19:1c:f7:8c:04:21:7d:cf:
3a:4f:f0:b3:a2:53:f4:f2:ac:0f:ec:43:e5:38:9f:7a:51:14:
03:e1:71:4b:97:da:98:30:67:1a:b0:18:4c:2f:91:e2:6c:5a:
97:e6:30:80:bf:01:ca:cc:f8:0c:71:5f:69:3f:57:10:2a:57:
35:84:2e:8e:66:2e:c6:2e:a9:b8:fb:bf:f6:cf:ee:d3:64:2b:
14:ac:2f:06:b5:0a:79:73:74:c3:cb:68:e6:0a:f2:ab:88:c2:
a1:0b:06:1a:c1:ad:d4:41:03:1f:a2:c2:12:a1:02:a5:03:67:
38:af:19:9f:4e:c2:99:54:11:f3:ca:50:1a:83:cc:aa:84:64:
84:5a:0b:1e:e2:44:99:99:28:36:85:d5:1a:7b:56:ed:de:3f:
f2:af:42:b4:87:cf:34:07:18:d8:f6:62:bb:cf:b7:ce:62:c0:
4a:4d:03:b5:6f:7f:94:a9:de:92:b5:0e:4a:6e:b2:fd:1c:8d:
d1:72:6b:66:fc:af:78:e2:43:85:86:e3:31:a6:35:bb:d4:6f:
45:33:28:50:61:1b:2d:c9:89:85:72:4a:3e:f2:df:5b:ac:67:
b2:d3:7d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:07:51 2025 by rpki-client