Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/mup8GQy15_aAg1Pw6XmTJJBYc6U.roa
File: mup8GQy15_aAg1Pw6XmTJJBYc6U.roa (raw, json)
Hash identifier: hohcyT5y2j17Wyro0Vy0aX1JnJvKhwBIlTz/mg4feZ8=
Subject key identifier: 9A:EA:7C:19:0C:B5:E7:F6:80:83:53:F0:E9:79:93:24:90:58:73:A5
Certificate issuer: /CN=605522e37de26b0d56895ac18ab07d7c784ab93c
Certificate serial: 0199F2A27C629B23BA8AAEA28C546856364C
Authority key identifier: 60:55:22:E3:7D:E2:6B:0D:56:89:5A:C1:8A:B0:7D:7C:78:4A:B9:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFUi433iaw1WiVrBirB9fHhKuTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/mup8GQy15_aAg1Pw6XmTJJBYc6U.roa
Signing time: Fri 17 Oct 2025 14:45:58 +0000
ROA not before: Fri 17 Oct 2025 14:45:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210462
IP address blocks: 2a12:df00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFUi433iaw1WiVrBirB9fHhKuTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f2:a2:7c:62:9b:23:ba:8a:ae:a2:8c:54:68:56:36:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605522e37de26b0d56895ac18ab07d7c784ab93c
Validity
Not Before: Oct 17 14:45:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9aea7c190cb5e7f6808353f0e9799324905873a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1e:cc:b7:8c:9b:92:53:0b:b0:20:b5:cd:66:
e6:77:ae:09:93:95:b3:dc:da:3d:b1:95:fa:3d:54:
f1:9c:67:eb:e2:2f:28:e6:35:23:24:69:75:68:6e:
b7:a7:a6:b8:19:2c:79:c5:49:ba:ac:aa:8b:35:a0:
b6:28:2b:42:ba:f3:e3:63:44:c1:94:82:e5:a6:4e:
2b:89:b0:67:94:1f:c7:41:02:8f:06:d6:32:36:7f:
53:76:19:9d:9e:fd:ae:c7:12:96:50:43:10:04:91:
c7:c9:be:27:a4:ef:6e:46:a6:2c:3a:84:56:71:37:
0b:09:0a:81:30:02:5a:1c:8b:88:af:c9:ad:66:45:
31:a5:62:c4:5b:2f:23:05:d7:41:ca:df:77:17:2a:
5e:7b:af:e6:47:e7:db:7b:e3:f9:e7:52:ba:e6:48:
bb:79:c4:bd:a2:74:a1:54:c4:0e:0e:87:af:7e:7e:
44:3e:e6:e8:84:6f:cc:e9:bd:61:42:46:12:f0:06:
c3:4a:79:17:78:7b:ac:fa:ff:f9:a8:cc:11:d2:d9:
18:cd:b0:d9:47:55:4e:86:74:11:c2:19:8f:8c:da:
69:88:3c:2a:7c:47:e3:64:10:3c:eb:e5:0b:9e:bc:
06:fe:6a:27:9e:a1:38:53:dc:ee:d8:70:90:07:79:
93:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:EA:7C:19:0C:B5:E7:F6:80:83:53:F0:E9:79:93:24:90:58:73:A5
X509v3 Authority Key Identifier:
keyid:60:55:22:E3:7D:E2:6B:0D:56:89:5A:C1:8A:B0:7D:7C:78:4A:B9:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFUi433iaw1WiVrBirB9fHhKuTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/mup8GQy15_aAg1Pw6XmTJJBYc6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:df00::/32
Signature Algorithm: sha256WithRSAEncryption
2d:6c:fb:f9:14:64:07:8b:33:9b:ae:18:f7:fd:dd:a8:3a:be:
28:f3:72:d8:15:9a:ef:74:a9:07:13:1d:25:10:61:b7:58:21:
fe:18:4a:be:65:20:5c:bb:17:37:1f:65:05:b2:70:bb:7a:e4:
af:34:5c:4c:0b:6b:37:01:67:d5:1c:ef:0d:d7:6e:c3:0d:47:
c0:c8:0c:2e:16:b3:8f:a8:3e:b3:7c:d4:1b:4c:0d:b5:31:69:
e4:6d:16:6e:a2:88:0a:1d:30:95:0e:18:da:c1:73:69:fc:3a:
d6:fa:48:5b:80:07:2a:57:8d:3e:63:32:f5:57:6b:a1:f0:4f:
6b:b0:d6:e8:e2:17:63:d0:2f:e4:46:09:5a:0b:68:56:2c:64:
3d:fc:1a:1a:5a:2b:43:56:1d:fb:1d:a1:c0:75:34:47:bb:bf:
a0:26:16:12:4a:0c:64:cb:c2:92:c6:18:5d:cb:89:09:a5:e2:
99:0f:a4:57:c3:9d:70:01:38:76:98:ff:5a:ab:77:ef:5d:9c:
b3:81:7c:d7:0f:84:26:60:83:ca:11:47:bd:48:d4:13:bf:87:
69:23:e5:5d:e0:8b:4b:2e:f8:69:af:3b:5f:1b:1a:62:1c:da:
fd:83:37:55:fd:e2:00:9c:5f:90:a1:13:c1:01:f3:f0:c2:ce:
3e:a2:ba:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:54 2025 by rpki-client