Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/GE6nRoMuniMWGyv11YMLRPKemVU.roa
File: GE6nRoMuniMWGyv11YMLRPKemVU.roa (raw, json)
Hash identifier: RaYbPvfO1sHreb2/JnG9Opl+09YsllUwocY3Ihxf+gE=
Subject key identifier: 18:4E:A7:46:83:2E:9E:23:16:1B:2B:F5:D5:83:0B:44:F2:9E:99:55
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 0198BFB36F65A6D2AAAE77A23F62AFAE03AA
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/GE6nRoMuniMWGyv11YMLRPKemVU.roa
Signing time: Tue 19 Aug 2025 00:21:04 +0000
ROA not before: Tue 19 Aug 2025 00:21:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 81.199.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bf:b3:6f:65:a6:d2:aa:ae:77:a2:3f:62:af:ae:03:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Aug 19 00:21:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=184ea746832e9e23161b2bf5d5830b44f29e9955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:55:00:1a:dc:22:f0:e0:7f:95:7a:cb:05:c0:
f3:65:76:0a:0b:da:33:27:3e:1c:c5:a1:32:86:c6:
2c:16:cc:c6:8f:81:35:85:da:4b:bc:a4:88:11:dd:
0b:77:1d:06:d1:fa:ad:3a:cb:f1:41:68:ec:74:37:
60:9b:bc:0c:52:18:21:bb:4e:57:d4:b6:39:f2:bd:
d5:0e:85:d1:29:b9:80:4a:bb:a0:3f:c0:37:b3:e1:
5e:56:4e:28:a2:cd:5e:f4:49:95:dd:9e:dc:0a:0c:
25:8c:83:06:56:6b:0c:f0:22:13:53:7d:15:80:e8:
54:a3:cc:f2:5f:ab:bf:2d:36:d8:28:bc:56:c2:64:
c1:51:a2:fd:14:5e:f9:3b:8d:4c:43:27:0f:53:64:
44:ed:cc:3b:66:d9:ba:66:0f:45:5a:11:56:25:23:
2b:fe:36:84:03:b3:2f:c6:ee:41:1f:6d:f4:ae:5f:
37:63:24:35:b6:a2:84:27:7d:a6:78:23:05:8d:27:
88:ac:45:18:b9:19:c4:33:ae:53:43:09:09:fc:aa:
db:61:5b:8f:5d:7e:ea:3e:c9:ee:95:86:63:2a:4a:
c9:8a:9c:8f:b6:c9:32:a9:99:c5:f7:6a:d6:25:98:
4f:0f:9b:0f:45:94:4f:d7:95:98:51:fd:7d:64:b9:
51:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4E:A7:46:83:2E:9E:23:16:1B:2B:F5:D5:83:0B:44:F2:9E:99:55
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/GE6nRoMuniMWGyv11YMLRPKemVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.28.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:09:5d:27:fb:a0:7d:84:29:3c:b1:12:cf:30:a7:39:96:b2:
ab:4b:7b:b7:69:12:eb:e0:e2:3e:97:05:1e:a1:07:ef:47:73:
cb:47:be:d2:b9:6a:aa:d9:c7:48:54:a0:4d:55:81:97:4c:ac:
01:2d:fe:d7:79:92:1f:5a:51:08:b6:9d:a5:62:60:ff:2f:7c:
6f:fa:4f:35:a1:8d:91:19:74:ab:c6:cf:78:6a:31:ca:62:87:
e9:d4:b8:dc:63:01:64:6b:92:44:09:5f:31:fa:e0:19:ea:95:
20:0a:45:d0:c4:0f:5b:dc:42:e7:f0:e5:0e:55:83:86:84:b1:
e2:7b:7a:4e:22:23:ff:5f:2c:e5:21:e6:1d:ff:4e:41:ce:af:
ca:16:71:f3:b9:73:dc:b7:16:ae:d0:78:bc:8f:81:92:8e:5b:
c8:74:95:17:62:8f:3b:6a:d0:82:e9:8b:59:00:20:c1:6a:fa:
bd:4e:fe:e2:6e:0b:87:99:38:bb:70:61:65:3d:ef:c7:a4:d0:
e4:6d:c6:01:4a:40:10:80:94:51:53:42:cc:ff:9e:c4:5e:90:
9b:a3:03:bb:f0:b3:71:32:10:14:22:73:b1:e4:64:54:25:b0:
29:69:e3:a4:9b:aa:e1:6a:dc:02:fe:07:8d:b9:d3:65:46:a6:
85:2d:e2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:11:09 2025 by rpki-client