Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/1-MjuqmBpsWgnIe94Ni9tG7TR67o.roa
File: 1-MjuqmBpsWgnIe94Ni9tG7TR67o.roa (raw, json)
Hash identifier: gyQfa4gE1hnrW3PZFgjLBZrA6G2ASLJW2A+0qIwPVfs=
Subject key identifier: F8:C8:EE:AA:60:69:B1:68:27:21:EF:78:36:2F:6D:1B:B4:D1:EB:BA
Certificate issuer: /CN=06c44b821ab5db542cc536c1f88b84baf0621654
Certificate serial: 0199B46CE97330558F225DF93174118EFCEF
Authority key identifier: 06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/1-MjuqmBpsWgnIe94Ni9tG7TR67o.roa
Signing time: Sun 05 Oct 2025 12:51:00 +0000
ROA not before: Sun 05 Oct 2025 12:51:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203653
IP address blocks: 185.128.39.0/24 maxlen: 24
2a03:9f60::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b4:6c:e9:73:30:55:8f:22:5d:f9:31:74:11:8e:fc:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c44b821ab5db542cc536c1f88b84baf0621654
Validity
Not Before: Oct 5 12:51:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8c8eeaa6069b1682721ef78362f6d1bb4d1ebba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e0:5d:69:13:d3:d6:ef:99:18:36:44:89:b2:
a3:b7:6d:aa:01:59:66:4b:d3:4c:8e:9b:c2:87:a0:
8e:92:f1:a2:b3:92:3c:bf:45:c6:b5:bf:07:ae:c7:
df:b4:72:84:77:6e:af:48:d8:09:67:6b:81:fa:eb:
66:7b:45:07:17:40:ed:f3:c1:db:6c:9e:16:79:71:
ae:bb:38:78:9c:71:87:5a:cd:d9:5c:94:f5:2c:0e:
36:45:db:92:20:ce:70:70:f7:c7:5b:bd:de:3a:f4:
77:e8:11:57:24:7a:e2:70:8f:67:a6:74:83:ee:bb:
07:31:52:95:f8:be:9a:41:1e:81:23:b0:d0:a3:b1:
d5:6d:d1:7c:7d:02:e2:cc:2b:b5:b1:91:11:ff:b3:
e0:39:c7:ec:a1:fe:25:a3:14:a7:ad:84:58:7f:5c:
74:e1:0f:e0:89:13:88:a5:ae:02:31:aa:b2:16:19:
54:38:24:9d:c7:20:4a:b4:cb:44:2e:b1:b4:04:48:
33:b2:62:a4:a6:20:9f:10:ca:74:30:a0:a3:f0:04:
45:41:97:77:f9:69:af:54:8d:cc:f1:bf:59:a2:d5:
b1:ff:9a:a3:83:6a:2b:95:9b:2e:43:34:cd:2b:6c:
01:91:84:2c:b0:aa:ba:e7:93:db:c8:60:d6:14:90:
20:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C8:EE:AA:60:69:B1:68:27:21:EF:78:36:2F:6D:1B:B4:D1:EB:BA
X509v3 Authority Key Identifier:
keyid:06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/1-MjuqmBpsWgnIe94Ni9tG7TR67o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.39.0/24
IPv6:
2a03:9f60::/32
Signature Algorithm: sha256WithRSAEncryption
86:5a:a3:8f:52:ba:ae:e5:f6:e1:53:a2:0d:d5:c7:a3:31:4f:
85:42:a6:e9:48:08:cf:f5:50:8d:80:3a:6a:e4:63:ce:49:70:
e5:6c:0f:b5:c3:f5:4e:25:ac:02:13:8b:04:73:57:24:77:21:
b6:f1:46:0b:12:ee:4e:d1:4e:ee:09:88:fc:44:69:fd:ac:09:
56:30:97:b4:72:6d:7c:d8:1c:d8:fb:d5:65:7b:f6:e2:d9:a9:
46:f8:47:4f:a8:61:e5:6a:2b:e1:e8:f4:16:ac:15:c8:af:3b:
c3:a5:4b:12:15:6b:b2:da:2b:6e:c7:49:fb:ec:7b:f3:fa:3d:
ca:c8:a6:b2:91:2b:2a:e8:99:dd:ba:b8:e1:9f:4b:d6:d9:03:
cd:44:c9:69:3a:f3:07:8f:c0:38:2f:77:06:76:bc:30:c1:20:
8f:74:06:2c:d0:fe:22:72:6b:1c:c8:11:f4:d0:ec:3e:91:65:
7a:f5:fa:a6:f4:c3:dd:09:b5:67:a7:e9:99:45:bc:b9:27:1f:
43:e5:a4:68:4a:92:bb:63:e4:d3:06:81:7a:e5:76:2a:ba:86:
03:8b:dd:d7:1b:76:21:e2:f1:5b:fe:69:6a:a5:6a:c4:09:65:
64:ce:94:d2:f4:86:0c:b2:ee:4d:3f:80:11:08:e6:9a:81:aa:
9b:70:ac:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:12:46 2025 by rpki-client