Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Mg4GieH56C4YVcIaypYF8UXuYo4.roa
File: Mg4GieH56C4YVcIaypYF8UXuYo4.roa (raw, json)
Hash identifier: GZteFGhZLMuzDVyNtwTUc3dUgIN3HukyiOM2e9Cwr/8=
Subject key identifier: 32:0E:06:89:E1:F9:E8:2E:18:55:C2:1A:CA:96:05:F1:45:EE:62:8E
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019999DE3DC01937C3E1A4E3172F872A21D5
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Mg4GieH56C4YVcIaypYF8UXuYo4.roa
Signing time: Tue 30 Sep 2025 09:05:02 +0000
ROA not before: Tue 30 Sep 2025 09:05:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63199
IP address blocks: 194.231.199.0/24 maxlen: 24
194.231.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:99:de:3d:c0:19:37:c3:e1:a4:e3:17:2f:87:2a:21:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 30 09:05:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=320e0689e1f9e82e1855c21aca9605f145ee628e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:19:bd:3b:84:a8:9a:96:6c:0c:47:9e:4c:ef:
ee:68:0d:43:f1:c9:08:b6:27:5b:43:e2:bd:8f:97:
f6:96:4d:8d:4f:ca:1e:d9:ea:90:37:d4:33:5c:34:
18:6c:df:99:0e:9c:9a:1a:89:11:df:84:d7:d1:75:
97:b2:74:4f:57:c2:14:96:8e:dc:7e:14:46:f9:01:
41:69:bb:6b:3f:ae:95:b4:43:c3:95:ac:7a:cd:96:
55:24:e9:49:b5:7b:46:46:5d:02:9d:8d:a9:f7:d9:
60:eb:d8:30:4e:c3:0e:67:ce:a2:87:56:ee:a6:b1:
29:eb:40:7f:bd:6b:50:a1:8c:89:14:ae:8d:7e:8b:
e3:25:f1:dc:35:3b:13:2d:29:2a:37:ca:dd:24:54:
3b:3d:cf:9c:3d:76:5e:93:3e:e5:40:9d:ef:2d:22:
d5:29:64:40:dd:d7:84:14:37:09:e1:9b:0d:19:92:
a4:6a:44:89:5d:fd:67:92:56:16:c3:ab:32:3a:ad:
cb:6e:80:80:5b:fd:81:51:7d:28:de:8b:e8:12:20:
82:76:30:4e:67:7e:99:f3:40:a4:63:2b:f2:38:99:
df:7e:0e:a3:7a:f0:4e:dc:aa:cd:2f:88:cd:6b:77:
73:14:41:d9:61:c2:54:a0:7d:3c:5f:4c:ab:42:d9:
d2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0E:06:89:E1:F9:E8:2E:18:55:C2:1A:CA:96:05:F1:45:EE:62:8E
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Mg4GieH56C4YVcIaypYF8UXuYo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.199.0/24
194.231.213.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:06:97:13:c5:fc:01:9d:a7:ca:51:84:6b:b6:ba:92:78:6b:
30:7d:f1:9b:2a:d7:ae:ea:6a:69:e2:47:c9:8b:57:be:65:8f:
e9:da:5d:da:33:19:a8:16:de:47:9d:42:1d:ad:a9:5e:8b:9e:
f8:d3:32:3d:9a:33:48:58:ce:02:50:dc:bd:e0:98:12:50:a6:
db:57:35:1c:97:44:77:6e:0b:e5:06:05:84:4a:97:86:86:60:
d8:2c:ad:30:42:0d:75:8f:52:1f:96:6c:b2:60:a3:8d:2e:63:
dd:91:32:e4:05:31:d7:ed:d8:4c:df:7a:4d:a2:8a:c4:08:d9:
d9:ff:56:4c:1d:b0:7d:58:ed:10:ce:d3:d8:3e:05:31:25:0f:
e1:bb:3d:03:0d:1c:e4:83:7f:1a:8a:60:b5:8c:9b:59:31:07:
eb:20:11:b7:fd:0f:dc:af:ab:a4:03:ad:2c:30:58:94:51:0b:
05:1b:1f:c3:90:e8:c6:e6:7b:19:d8:1a:d8:13:7b:96:1e:0e:
99:f3:e5:25:cc:67:07:3f:22:88:83:cb:01:84:c1:2e:44:40:
4c:83:b4:e7:9f:2c:6d:c0:4b:c9:e7:f3:0a:4c:e2:10:62:a5:
d2:59:58:18:13:f9:ce:c9:c9:f6:2f:8d:67:96:13:d4:83:d4:
53:bf:d5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:13:03 2025 by rpki-client